last executing test programs:

7m24.603850555s ago: executing program 2 (id=1300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084)

7m24.474735689s ago: executing program 2 (id=1302):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0)

7m21.356599105s ago: executing program 2 (id=1321):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0xfffffffffffffffd})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
r2 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2002})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})

7m21.284990439s ago: executing program 2 (id=1322):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2065091, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x81000, 0x0)

7m21.280083086s ago: executing program 2 (id=1323):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="bbf92bbd7000fd"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

7m20.975658055s ago: executing program 2 (id=1324):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r1, 0x10000)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000440)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5)

7m20.89315212s ago: executing program 32 (id=1324):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r1, 0x10000)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000440)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5)

7m7.056677662s ago: executing program 1 (id=1456):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x280040})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r1, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0xe5, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x2000000000, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

7m7.056412116s ago: executing program 1 (id=1457):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804)

7m6.89636552s ago: executing program 1 (id=1458):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r1)
read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf)
write(r0, 0x0, 0x0)

7m5.508231215s ago: executing program 1 (id=1477):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020)

7m5.454460056s ago: executing program 1 (id=1479):
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
writev(r0, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)='T', 0x1}], 0x2)

7m5.073173229s ago: executing program 1 (id=1482):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0)

7m4.953313799s ago: executing program 33 (id=1482):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0)

6m50.279176267s ago: executing program 3 (id=1614):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000000f6030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m50.137333146s ago: executing program 3 (id=1615):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

6m50.066034633s ago: executing program 3 (id=1616):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

6m48.879282998s ago: executing program 3 (id=1626):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x7, 0x108000, 0x3c, 0x2, 0xf77, 0x2004cc, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x5, 0x7, 0x8, 0x0, 0x2, 0xfffffffffffffffd, 0x1], 0x8083000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m48.75008141s ago: executing program 3 (id=1629):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

6m48.688361509s ago: executing program 3 (id=1630):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010000104000000000000c91127de8e05", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c0002800400120014000600fe8000000000000000000000000000aa08000300", @ANYRES32=r3], 0x58}}, 0x4000000)

6m46.746481948s ago: executing program 0 (id=1635):
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x80108907, 0x0)
r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_disconnect(r0)

6m45.305178105s ago: executing program 0 (id=1644):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
futex_waitv(&(0x7f0000001b00)=[{0xffb, 0x0, 0xa}], 0x1, 0x0, 0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d800010000000000000000000000008"], 0x80}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002060102000000000000000000000000040007800500010006000000050005000a00000000686173683a6970740000000009000200"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffe}}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @union={0x0, 0x7, 0x0, 0x9, 0x0, 0x2, [{0xf, 0x3, 0x81}, {0x0, 0x3, 0x7}, {0x6, 0x4, 0x8}, {0x4, 0x5, 0x5}, {0xa, 0x3, 0x43}, {0x3, 0x2, 0x240}, {0xf, 0x3, 0x10}]}]}}, 0x0, 0x9e}, 0x28)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m44.372192187s ago: executing program 0 (id=1648):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40)

6m44.315562153s ago: executing program 0 (id=1649):
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000400)=[<r0=>0xee00])
setregid(0x0, r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r2, &(0x7f0000000100)='fd/3\x00')

6m44.298998304s ago: executing program 0 (id=1650):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

6m44.215763695s ago: executing program 0 (id=1652):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r2, &(0x7f0000006800)="10", 0x20)
syz_usb_disconnect(r1)

6m33.660675396s ago: executing program 34 (id=1630):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010000104000000000000c91127de8e05", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c0002800400120014000600fe8000000000000000000000000000aa08000300", @ANYRES32=r3], 0x58}}, 0x4000000)

6m29.219504072s ago: executing program 35 (id=1652):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r2, &(0x7f0000006800)="10", 0x20)
syz_usb_disconnect(r1)

6m3.985560818s ago: executing program 7 (id=1922):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x1269, &(0x7f0000000040)={'syztnl1\x00', 0x0})

6m3.872629171s ago: executing program 7 (id=1925):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0x0, 0xf000, 0x0, 0x2, 0x8, 0x0, 0x40, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0xfb, 0x9, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x6000, 0x3000, 0xc, 0x0, 0x7, 0x9, 0x40, 0x0, 0x3, 0x9, 0x0, 0xfc}, {0xeeef0000, 0xd000, 0x0, 0xff, 0x0, 0xfe, 0xa, 0x0, 0xfe, 0x3, 0x4}, {0xdddd0000, 0x3000, 0x4, 0x0, 0xff, 0x4, 0x6, 0xb, 0x0, 0x3c}, {0x0, 0x4000, 0x0, 0x3, 0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0xdddd1000, 0x0, 0x2, 0xff, 0x0, 0xff}, {0x0, 0x3000, 0xe, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x96}, {0x1, 0x4}, {0x80a0000, 0xff}, 0x9dfeffdb, 0x0, 0xeeee8000, 0x600, 0x1, 0x5800, 0x0, [0x13, 0x0, 0x1]})
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000045a96102bff67521ce16f8f1f449a7a835673312b54ebb2aa383369d22627e7", 0x0, 0xac)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x428c45d425c93519, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x401c5820, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0x100000000, 0x0})

6m3.723952079s ago: executing program 7 (id=1928):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0)

6m3.632099434s ago: executing program 7 (id=1929):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0)
mknodat$loop(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

6m3.556288313s ago: executing program 7 (id=1931):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x91)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

6m3.464136626s ago: executing program 7 (id=1933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r0, 0x0, 0x0)

5m48.457830746s ago: executing program 36 (id=1933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r0, 0x0, 0x0)

2.370771714s ago: executing program 4 (id=3435):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
write$6lowpan_control(r0, 0x0, 0x0)
syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r0}, &(0x7f0000000340)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2})

2.287623875s ago: executing program 4 (id=3436):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x740, 0x140)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e07070514"], 0xa)

2.287285239s ago: executing program 4 (id=3437):
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x1, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r1 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @multicast}, 0x4a, {0x2, 0x0, @private=0xa010100}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_usb_connect(0x6, 0x53, &(0x7f0000000540)=ANY=[@ANYBLOB="120150026daa2840d112d5b46c1601021d0109024100020b0650030904314000ff03367f0a2401fbff050201020904030100f9765005052406000105240003000d240f0106000000010003000806241a020008"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000001d80)={0x14, 0x0, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, &(0x7f0000002040)={0x18, &(0x7f0000001dc0)=ANY=[@ANYBLOB], 0x0, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001080)=ANY=[], 0x0})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10)
listen(r6, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0xba, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x6, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0x0, 0x401, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xfffffffd, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x4008000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x42, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x1, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1538, 0x200, 0xffff3441, 0x1001]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x6)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x9000000)

1.809552518s ago: executing program 5 (id=3440):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020)

1.755880809s ago: executing program 5 (id=3442):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$sg(0x0, 0x0, 0x5)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}})
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4)
r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0)
madvise(&(0x7f0000773000/0x4000)=nil, 0x4000, 0xd)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b0001006261746164760000", @ANYRES32], 0x3c}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

1.568773747s ago: executing program 8 (id=3447):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000004440), 0x800, 0x0)
readv(r0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1)

1.509043345s ago: executing program 6 (id=3448):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000480)=@file={0xfd, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10, 0x4010}}], 0x2, 0x20000000)

1.44595089s ago: executing program 8 (id=3449):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, 0x0)

1.445841103s ago: executing program 6 (id=3450):
r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0xffffffffffffff60, &(0x7f00000000c0)={0x5, 0xffffffffffffa062, 0x14}})

1.389201246s ago: executing program 8 (id=3451):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040))
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xfff)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000300)={{<r6=>0x0, 0x7fff, 0xffffffffffffffff, 0x8, 0x7fff, 0x8000000000000000, 0x6, 0xfffffff7, 0x80000001, 0x3, 0x6, 0x7fff, 0x4, 0x7, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000480)={r6, 0x2d4})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb0, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000064000000060a030400000000000000000a0000050900010073797a310000000038000480340001800b00010074617267657400002400028009000100445343500000000008000240000000000b02000000000000005000000900020073797a32000000001400000011000100aa3681a24201afb8555a50e3b400000000000000000100000a1aa421b1323c454644493595"], 0x8c}}, 0x200088c0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_getattr(0x0, &(0x7f0000000100)={0x38}, 0x38, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

1.04613607s ago: executing program 4 (id=3452):
fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r4, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4008000)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000018000680050043001f0000000c00018008000140ffffffff05000500020000000500010006000000"], 0x64}}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300f7438893810a75a146c10f4e088fa6de2d6ad9cded", @ANYRESOCT=r5, @ANYRES32=r1, @ANYRESOCT=r6, @ANYRESOCT=0x0], 0x48)
migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000b00)=0x6)
openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.046063011s ago: executing program 6 (id=3453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)

948.717571ms ago: executing program 6 (id=3454):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x24, 0x5e, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, 0x24}], 0x1}, 0x0)

888.397816ms ago: executing program 6 (id=3455):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x1, 0x0, 0x0, 0x3ff, 0x4, 0xd5130eddb9b47aa5, 0x20, 0x10})

508.397665ms ago: executing program 6 (id=3456):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4)
r2 = getpgid(0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil)
connect$inet(r5, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000008c0)={0x0, 0x1}, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x8a, &(0x7f0000000140)=0x57fd, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000ff0000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110)

316.293729ms ago: executing program 5 (id=3457):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x3, 0x3, &(0x7f0000001000)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000008}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)={@ifindex, r0, 0x37, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)

253.818787ms ago: executing program 8 (id=3458):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
shmdt(0x0)

253.181494ms ago: executing program 5 (id=3459):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

161.521748ms ago: executing program 8 (id=3460):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000d00)="e0274239ad0d85490a4ddf977499", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

88.416844ms ago: executing program 5 (id=3461):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x24, 0x0, &(0x7f0000000100)=0xffffffffffffffa1)

68.98649ms ago: executing program 4 (id=3462):
r0 = getpid()
ioprio_set$pid(0x1, r0, 0x0)

4.294451ms ago: executing program 4 (id=3463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000045000900000000000200000002000000080002"], 0x1c}}, 0x0)

4.078942ms ago: executing program 8 (id=3464):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 5 (id=3472):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000300000000000000eeffffff8500000020000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

ng DVB extension
[  364.803178][T13525] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  364.838118][T13525] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  364.843045][T13525] overlayfs: failed to look up (tracing) for ino (-66)
[  364.955317][T13463] em28xx 13-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  364.961862][   T34] usb 13-1: USB disconnect, device number 4
[  364.964486][   T34] em28xx 13-1:0.0: Disconnecting em28xx
[  364.983306][ T1027] em28xx 13-1:0.0: Registering input extension
[  364.985733][   T34] em28xx 13-1:0.0: Closing input extension
[  365.009550][   T34] em28xx 13-1:0.0: Freeing device
[  365.340927][ T7708] usb 54-1: device descriptor read/8, error -110
[  365.749901][ T7708] usb usb54-port1: attempt power cycle
[  365.825802][T13543] syzkaller0: entered promiscuous mode
[  365.829035][T13543] syzkaller0: entered allmulticast mode
[  366.379264][ T7708] usb usb54-port1: unable to enumerate USB device
[  367.728498][T13569] overlayfs: failed to clone upperpath
[  371.151934][T13610] xt_CT: You must specify a L4 protocol and not use inversions on it
[  371.618742][T13616] Trying to write to read-only block-device nullb0
[  375.743486][T13675] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  375.745573][T13675] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  375.773946][T13675] vhci_hcd vhci_hcd.0: Device attached
[  376.047513][T13681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.084675][ T7708] usb 54-1: SetAddress Request (6) to port 0
[  376.086850][ T7708] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd
[  376.359258][T13676] vhci_hcd: connection reset by peer
[  376.361460][ T4548] vhci_hcd: stop threads
[  376.363290][ T4548] vhci_hcd: release socket
[  376.365215][ T4548] vhci_hcd: disconnect device
[  376.619730][T13687] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  378.232645][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2543'.
[  378.554018][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2545'.
[  379.152989][T13740] wireguard0: entered promiscuous mode
[  379.160187][T13740] wireguard0: entered allmulticast mode
[  381.082629][ T6026] IPVS: starting estimator thread 0...
[  381.151897][ T7708] usb 54-1: device descriptor read/8, error -110
[  381.202826][T13771] IPVS: using max 44 ests per chain, 105600 per kthread
[  381.864715][ T7708] usb usb54-port1: attempt power cycle
[  382.239424][T13784] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  382.242345][T13784] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  382.251163][T13784] vhci_hcd vhci_hcd.0: Device attached
[  382.311333][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2556'.
[  382.460044][ T7708] usb usb54-port1: unable to enumerate USB device
[  382.539977][T13786] vhci_hcd: connection closed
[  382.540495][ T6721] vhci_hcd: stop threads
[  382.544225][ T6721] vhci_hcd: release socket
[  382.546359][ T6721] vhci_hcd: disconnect device
[  382.593373][ T6026] usb 50-1: enqueue for inactive port 0
[  382.749957][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  383.135290][ T6026] usb usb50-port1: attempt power cycle
[  383.724884][ T6026] usb usb50-port1: unable to enumerate USB device
[  384.139634][T13812] veth3: entered promiscuous mode
[  384.297884][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  384.297898][   T40] audit: type=1326 audit(1764685483.939:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.309914][   T40] audit: type=1326 audit(1764685483.949:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.318009][   T40] audit: type=1326 audit(1764685483.959:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.326381][   T40] audit: type=1326 audit(1764685483.959:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.336598][   T40] audit: type=1326 audit(1764685483.959:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.346591][   T40] audit: type=1326 audit(1764685483.959:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.377890][   T40] audit: type=1326 audit(1764685483.959:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.393497][   T40] audit: type=1326 audit(1764685483.959:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.475207][   T40] audit: type=1326 audit(1764685483.969:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.483822][   T40] audit: type=1326 audit(1764685483.969:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13816 comm="syz.8.2566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  384.888131][T13821] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  384.892278][T13821] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  384.899585][T13821] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  390.919948][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2588'.
[  390.923160][T13904] netlink: 'syz.8.2588': attribute type 5 has an invalid length.
[  390.925801][T13904] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2588'.
[  391.060847][T13904] geneve3: entered promiscuous mode
[  391.071422][T13904] geneve3: entered allmulticast mode
[  391.077771][ T6721] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  391.081377][ T6721] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  391.085850][ T6721] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  391.089011][ T6721] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  391.182810][T13915] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  391.439628][T13903] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  391.444521][T13920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.933650][   T63] Bluetooth: hci0: command 0x0c1a tx timeout
[  394.294330][T13955] futex_wake_op: syz.4.2601 tries to shift op by -1; fix this program
[  394.475985][   T63] Bluetooth: hci0: unexpected event for opcode 0x204e
[  394.783660][T13963] netfs: Couldn't get user pages (rc=-14)
[  395.023481][T13965] netlink: 'syz.6.2604': attribute type 10 has an invalid length.
[  396.117213][T13972] netlink: 'syz.8.2607': attribute type 2 has an invalid length.
[  396.130056][T13972] !: entered promiscuous mode
[  396.253922][   T40] kauditd_printk_skb: 15 callbacks suppressed
[  396.253932][   T40] audit: type=1326 audit(1764685495.878:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  396.263522][   T40] audit: type=1326 audit(1764685495.878:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  396.271475][   T40] audit: type=1326 audit(1764685495.878:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  396.283556][   T40] audit: type=1326 audit(1764685495.878:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  396.295267][   T40] audit: type=1326 audit(1764685495.878:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  396.302586][   T40] audit: type=1326 audit(1764685495.878:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  396.309834][   T40] audit: type=1326 audit(1764685495.878:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  396.317076][   T40] audit: type=1326 audit(1764685495.878:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  396.328105][   T40] audit: type=1326 audit(1764685495.878:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  396.336268][   T40] audit: type=1326 audit(1764685495.878:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.6.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  400.011606][T14041] lo speed is unknown, defaulting to 1000
[  400.014152][T14041] lo speed is unknown, defaulting to 1000
[  400.019831][T14041] lo speed is unknown, defaulting to 1000
[  400.043685][T14041] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  400.104009][T14041] lo speed is unknown, defaulting to 1000
[  400.111159][T14041] lo speed is unknown, defaulting to 1000
[  400.117175][T14041] lo speed is unknown, defaulting to 1000
[  400.122671][T14041] lo speed is unknown, defaulting to 1000
[  400.427042][T14044] fuse: Bad value for 'rootmode'
[  402.132695][   T34] usb 13-1: new high-speed USB device number 5 using dummy_hcd
[  402.432944][   T34] usb 13-1: Using ep0 maxpacket: 8
[  402.436945][   T34] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  402.439458][   T34] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  402.445827][   T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  402.449591][   T34] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  402.454347][   T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  402.458188][   T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  402.461815][   T34] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  402.466563][   T34] usb 13-1: config 168 interface 0 has no altsetting 0
[  402.469843][   T34] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  402.472527][   T34] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  402.477045][   T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  402.480930][   T34] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  402.485002][   T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  402.488655][   T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  402.492451][   T34] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  402.497054][   T34] usb 13-1: config 168 interface 0 has no altsetting 0
[  402.500073][   T34] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  402.502596][   T34] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  402.506512][   T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  402.510332][   T34] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  402.514496][   T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  402.518191][   T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  402.521890][   T34] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  402.528132][   T34] usb 13-1: config 168 interface 0 has no altsetting 0
[  402.533002][   T34] usb 13-1: string descriptor 0 read error: -22
[  402.535843][   T34] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  402.539177][   T34] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.547133][   T34] adutux 13-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  402.809985][   T34] usb 13-1: USB disconnect, device number 5
[  404.018897][T14070] [U] �
[  404.692460][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2632'.
[  404.887100][T14104] 9pnet_fd: p9_fd_create_tcp (14104): problem connecting socket to 127.0.0.1
[  405.440317][   T40] kauditd_printk_skb: 23 callbacks suppressed
[  405.440334][   T40] audit: type=1326 audit(1764685505.059:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.455856][   T40] audit: type=1326 audit(1764685505.069:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.465075][   T40] audit: type=1326 audit(1764685505.079:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.474735][   T40] audit: type=1326 audit(1764685505.079:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.484012][   T40] audit: type=1326 audit(1764685505.079:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.493413][   T40] audit: type=1326 audit(1764685505.079:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.503604][   T40] audit: type=1326 audit(1764685505.079:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.513135][   T40] audit: type=1326 audit(1764685505.079:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.522713][   T40] audit: type=1326 audit(1764685505.079:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.532232][   T40] audit: type=1326 audit(1764685505.079:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.5.2634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  405.913644][T14117] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  405.987619][T14117] serio: Serial port ptm0
[  408.985234][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2648'.
[  410.483618][T14180] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  410.485843][T14180] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  410.488634][T14180] vhci_hcd vhci_hcd.0: Device attached
[  410.761121][ T7708] usb 54-1: SetAddress Request (10) to port 0
[  410.763132][ T7708] usb 54-1: new SuperSpeed USB device number 10 using vhci_hcd
[  411.185201][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2656'.
[  411.215961][T14181] vhci_hcd: connection reset by peer
[  411.218309][ T1226] vhci_hcd: stop threads
[  411.219778][ T1226] vhci_hcd: release socket
[  411.221433][ T1226] vhci_hcd: disconnect device
[  411.248154][T14194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  413.091013][T14213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  413.551996][T14200] Bluetooth: MGMT ver 1.23
[  415.839924][ T7708] usb 54-1: device descriptor read/8, error -110
[  416.496796][ T7708] usb usb54-port1: attempt power cycle
[  417.047083][T14249] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  417.049442][T14249] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  417.052368][T14249] vhci_hcd vhci_hcd.0: Device attached
[  417.341413][ T7708] usb usb54-port1: unable to enumerate USB device
[  417.475945][T14256] siw: device registration error -23
[  417.654242][ T7708] usb 50-1: SetAddress Request (6) to port 0
[  417.674347][ T7708] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd
[  417.737529][T14250] vhci_hcd: connection closed
[  417.737967][T14006] vhci_hcd: stop threads
[  417.741139][T14006] vhci_hcd: release socket
[  417.742716][T14006] vhci_hcd: disconnect device
[  420.202914][T14278] netfs: Couldn't get user pages (rc=-14)
[  420.640347][   T24] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  420.791620][   T24] usb 11-1: Using ep0 maxpacket: 8
[  420.795183][   T24] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  420.797883][   T24] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  420.801902][   T24] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  420.805839][   T24] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  420.814445][   T24] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  420.819248][   T24] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  420.824574][   T24] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  420.829911][   T24] usb 11-1: config 168 interface 0 has no altsetting 0
[  420.833912][   T24] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  420.837148][   T24] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  420.842199][   T24] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  420.846092][   T24] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  420.850345][   T24] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  420.854390][   T24] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  420.858509][   T24] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  420.864207][   T24] usb 11-1: config 168 interface 0 has no altsetting 0
[  420.868537][   T24] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  420.872250][   T24] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  420.877303][   T24] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  420.882754][   T24] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  420.888374][   T24] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  420.893432][   T24] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  420.898783][   T24] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  420.906948][   T24] usb 11-1: config 168 interface 0 has no altsetting 0
[  420.913903][   T24] usb 11-1: string descriptor 0 read error: -22
[  420.917136][   T24] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  420.923803][   T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.933391][   T24] adutux 11-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  421.169616][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2675'.
[  421.196282][   T24] usb 11-1: USB disconnect, device number 6
[  421.202254][T14298] netlink: 'syz.4.2675': attribute type 5 has an invalid length.
[  421.205778][T14298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2675'.
[  421.219809][T14298] geneve2: entered promiscuous mode
[  422.100200][T14298] geneve2: entered allmulticast mode
[  422.103570][T14006] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  422.106448][T14006] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  422.109378][T14006] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  422.134615][T14006] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  422.793176][ T7708] usb 50-1: device descriptor read/8, error -110
[  423.198804][ T7708] usb usb50-port1: attempt power cycle
[  423.784126][ T7708] usb usb50-port1: unable to enumerate USB device
[  424.441126][T14323] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  424.459698][T14323] serio: Serial port ptm0
[  424.607913][T14330] siw: device registration error -23
[  425.380749][T14340] binder: 14334:14340 ioctl 0 80000040 returned -22
[  425.765660][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2689'.
[  426.201280][ T6009] libceph: connect (1)[c::]:6789 error -101
[  426.204015][ T6009] libceph: mon0 (1)[c::]:6789 connect error
[  426.392502][T14362] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2694'.
[  426.493201][ T6009] libceph: connect (1)[c::]:6789 error -101
[  426.500761][ T6009] libceph: mon0 (1)[c::]:6789 connect error
[  426.592127][T14352] ceph: No mds server is up or the cluster is laggy
[  426.749894][T14370] netlink: 'syz.4.2695': attribute type 10 has an invalid length.
[  427.391889][T14376] tipc: Started in network mode
[  427.393775][T14376] tipc: Node identity ac14140f, cluster identity 4711
[  427.412626][T14376] tipc: New replicast peer: 255.255.255.255
[  427.417020][T14376] tipc: Enabled bearer <udp:syz2>, priority 10
[  427.423879][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2696'.
[  427.444077][T14376] tipc: Disabling bearer <udp:syz2>
[  427.926653][T14383] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  427.938236][T14383] serio: Serial port ptm0
[  428.031736][T14385] siw: device registration error -23
[  431.014688][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2704'.
[  432.599793][T14441] cdrom: dropping to single frame dma
[  433.074821][T14444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  433.678322][ T1328] IPVS: starting estimator thread 0...
[  433.762769][T14459] IPVS: using max 26 ests per chain, 62400 per kthread
[  434.848136][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2717'.
[  434.853260][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2717'.
[  434.909732][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'.
[  434.915041][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2717'.
[  434.918861][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2717'.
[  434.976041][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2717'.
[  434.979124][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2717'.
[  435.042609][T14466] ceph: No mds server is up or the cluster is laggy
[  435.147483][T14483] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  435.150140][T14483] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  435.159143][T14483] vhci_hcd vhci_hcd.0: Device attached
[  435.434185][ T6009] usb 54-1: SetAddress Request (14) to port 0
[  435.436921][ T6009] usb 54-1: new SuperSpeed USB device number 14 using vhci_hcd
[  435.480542][T14490] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  435.529583][T14490] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  435.534138][T14490] overlayfs: failed to look up (tracing) for ino (-66)
[  435.821495][T14484] vhci_hcd: connection reset by peer
[  435.824200][   T91] vhci_hcd: stop threads
[  435.826431][   T91] vhci_hcd: release socket
[  435.828519][   T91] vhci_hcd: disconnect device
[  435.858716][T14493] 
: renamed from bridge_slave_0
[  436.108979][T14497] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  436.111722][T14497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  436.115490][T14497] vhci_hcd vhci_hcd.0: Device attached
[  436.834266][T14498] vhci_hcd: connection closed
[  436.846902][   T67] vhci_hcd: stop threads
[  436.849360][T14496] siw: device registration error -23
[  436.850650][   T67] vhci_hcd: release socket
[  436.854784][   T67] vhci_hcd: disconnect device
[  437.343589][T11046] vhci_hcd: vhci_device speed not set
[  437.845674][T14509] netlink: zone id is out of range
[  437.903116][T14509] netlink: set zone limit has 4 unknown bytes
[  438.226595][ T6213] IPVS: starting estimator thread 0...
[  438.316624][T14520] IPVS: using max 44 ests per chain, 105600 per kthread
[  439.023791][T14529] netlink: 'syz.6.2728': attribute type 8 has an invalid length.
[  439.230248][T14536] vxcan1: entered promiscuous mode
[  439.617573][T11046] usb 13-1: new high-speed USB device number 6 using dummy_hcd
[  439.890966][T14549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  440.137443][T14547] lo speed is unknown, defaulting to 1000
[  440.139757][T14547] lo speed is unknown, defaulting to 1000
[  440.141973][T14547] lo speed is unknown, defaulting to 1000
[  440.148974][T14547] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  440.163406][T14547] lo speed is unknown, defaulting to 1000
[  440.166264][T14547] lo speed is unknown, defaulting to 1000
[  440.169348][T14547] lo speed is unknown, defaulting to 1000
[  440.171979][T14547] lo speed is unknown, defaulting to 1000
[  440.488695][ T6009] usb 54-1: device descriptor read/8, error -110
[  440.744689][T14567] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2736'.
[  440.875772][T14567] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.878527][T14567] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.886890][ T6009] usb usb54-port1: attempt power cycle
[  441.951040][ T6009] usb usb54-port1: unable to enumerate USB device
[  442.120221][   T52] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  442.290370][   T52] usb 10-1: Using ep0 maxpacket: 8
[  442.296875][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'.
[  442.298165][   T52] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  442.305041][   T52] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  442.318373][   T52] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  442.334799][   T52] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  442.350518][   T52] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  442.371648][   T52] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  442.385572][   T52] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.643637][T14583] syzkaller0: entered promiscuous mode
[  442.646755][T14583] syzkaller0: entered allmulticast mode
[  442.661328][   T52] usb 10-1: usb_control_msg returned -32
[  442.663565][   T52] usbtmc 10-1:16.0: can't read capabilities
[  443.076164][T14602] usbtmc 10-1:16.0: usb_control_msg returned -32
[  443.152383][   T34] usb 10-1: USB disconnect, device number 9
[  444.148563][T14623] binder: 14618:14623 ioctl 0 80000040 returned -22
[  444.185025][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  444.313433][T14622] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  444.315700][T14622] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  444.329123][T14622] vhci_hcd vhci_hcd.0: Device attached
[  444.602410][ T6009] usb 48-1: SetAddress Request (6) to port 0
[  444.605245][ T6009] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd
[  444.777081][T14626] vhci_hcd: connection reset by peer
[  444.779756][ T1151] vhci_hcd: stop threads
[  444.781557][ T1151] vhci_hcd: release socket
[  444.783967][ T1151] vhci_hcd: disconnect device
[  445.282511][T14636] veth1_to_batadv: entered promiscuous mode
[  445.293385][T14636] macsec1: entered promiscuous mode
[  445.324839][T14636] bridge0: port 3(erspan0) entered blocking state
[  445.327193][T14636] bridge0: port 3(erspan0) entered disabled state
[  445.329819][T14636] erspan0: entered allmulticast mode
[  445.444719][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2752'.
[  445.463714][T14636] erspan0: entered promiscuous mode
[  445.466051][T14636] bridge0: port 3(erspan0) entered blocking state
[  445.468509][T14636] bridge0: port 3(erspan0) entered forwarding state
[  445.699938][T14643] lo speed is unknown, defaulting to 1000
[  445.702865][T14643] lo speed is unknown, defaulting to 1000
[  445.910702][T14648] tipc: Cannot configure node identity twice
[  445.924290][ T6213] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  446.254114][ T6213] usb 13-1: new high-speed USB device number 7 using dummy_hcd
[  446.429500][ T6213] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  446.438500][ T6213] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  446.443032][ T6213] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66
[  446.460473][ T6213] usb 13-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  446.472983][ T6213] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  446.477609][ T6213] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  446.481190][ T6213] usb 13-1: Product: syz
[  446.483095][ T6213] usb 13-1: Manufacturer: syz
[  446.497392][ T6213] cdc_wdm 13-1:1.0: skipping garbage
[  446.499802][ T6213] cdc_wdm 13-1:1.0: skipping garbage
[  446.502204][ T6213] cdc_wdm 13-1:1.0: skipping garbage
[  446.507551][ T6213] cdc_wdm 13-1:1.0: probe with driver cdc_wdm failed with error -22
[  446.836008][T14665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.843161][T14665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.733061][T14673] 
: renamed from bridge_slave_0 (while UP)
[  447.737870][T14670] netfs: Couldn't get user pages (rc=-14)
[  449.039112][   T34] usb 13-1: USB disconnect, device number 7
[  449.394605][T14700] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  449.397523][T14700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  449.401059][T14700] vhci_hcd vhci_hcd.0: Device attached
[  449.666892][ T7708] usb 54-1: SetAddress Request (18) to port 0
[  449.673869][ T7708] usb 54-1: new SuperSpeed USB device number 18 using vhci_hcd
[  449.697097][ T6009] usb 48-1: device descriptor read/8, error -110
[  449.962660][T14701] vhci_hcd: connection reset by peer
[  449.965763][ T6894] vhci_hcd: stop threads
[  449.967616][ T6894] vhci_hcd: release socket
[  449.969782][ T6894] vhci_hcd: disconnect device
[  450.024940][T14705] team0 (unregistering): Port device team_slave_0 removed
[  450.056763][T14705] team0 (unregistering): Port device team_slave_1 removed
[  450.089013][ T6009] usb usb48-port1: attempt power cycle
[  450.347836][T14711] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.370948][T14710] bond_slave_0: entered promiscuous mode
[  450.373902][T14710] bond_slave_1: entered promiscuous mode
[  450.423618][T14710] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  450.439609][T14710] bond1: (slave macvlan2): making interface the new active one
[  450.458179][T14710] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  450.718177][ T6009] usb usb48-port1: unable to enumerate USB device
[  450.995988][T14722] bond_slave_0: left promiscuous mode
[  450.999012][T14722] bond_slave_1: left promiscuous mode
[  451.007671][T14727] netfs: Couldn't get user pages (rc=-14)
[  451.082607][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.094481][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.456390][T14006] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  451.460262][T14006] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  451.463825][T14006] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  451.467438][T14006] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.359951][T14730] block device autoloading is deprecated and will be removed.
[  452.781577][   T40] kauditd_printk_skb: 48 callbacks suppressed
[  452.781589][   T40] audit: type=1804 audit(1764685552.365:637): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2775" name="/newroot/323/bus/bus" dev="overlay" ino=1794 res=1 errno=0
[  452.794603][   T40] audit: type=1804 audit(1764685552.375:638): pid=14743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2775" name="/newroot/323/bus/bus" dev="overlay" ino=1794 res=1 errno=0
[  452.801875][   T40] audit: type=1800 audit(1764685552.385:639): pid=14743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2775" name="bus" dev="overlay" ino=1794 res=0 errno=0
[  453.080428][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  453.807514][   T40] audit: type=1326 audit(1764685553.374:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.8.2778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  453.891729][   T40] audit: type=1326 audit(1764685553.394:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.8.2778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  453.943792][   T40] audit: type=1326 audit(1764685553.394:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.8.2778" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf709d579 code=0x7ffc0000
[  454.035350][   T40] audit: type=1326 audit(1764685553.394:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.8.2778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  454.091010][   T40] audit: type=1326 audit(1764685553.394:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.8.2778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  454.099772][T14826] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  454.102037][T14826] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  454.104020][   T40] audit: type=1326 audit(1764685553.404:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.8.2778" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d579 code=0x7ffc0000
[  454.119222][T14826] vhci_hcd vhci_hcd.0: Device attached
[  454.131103][   T40] audit: type=1326 audit(1764685553.404:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.8.2778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  454.135512][T14829] binder: 14825:14829 unknown command 0
[  454.145022][T14829] binder: 14825:14829 ioctl c0306201 80000080 returned -22
[  454.197964][T14829] binder: 14825:14829 ioctl c0306201 80000300 returned -11
[  454.363317][T14837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  454.374475][T12231] lo speed is unknown, defaulting to 1000
[  454.412572][T14839] netlink: 'syz.5.2782': attribute type 10 has an invalid length.
[  454.433193][T14839] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  454.726520][T14840] hub 8-0:1.0: USB hub found
[  454.736693][T14840] hub 8-0:1.0: 1 port detected
[  455.124668][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2780'.
[  455.193156][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2780'.
[  455.219420][T14851] netlink: 'syz.6.2780': attribute type 12 has an invalid length.
[  455.737683][T14827] vhci_hcd: connection reset by peer
[  455.742532][   T67] vhci_hcd: stop threads
[  455.744353][   T67] vhci_hcd: release socket
[  455.748269][ T7708] usb 54-1: device descriptor read/8, error -110
[  455.748812][   T67] vhci_hcd: disconnect device
[  456.143041][ T7708] usb usb54-port1: attempt power cycle
[  456.743539][ T7708] usb usb54-port1: unable to enumerate USB device
[  457.728228][T14892] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  458.484686][T14895] binder: 14883:14895 ioctl 0 80000040 returned -22
[  459.912169][T14916] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  461.079998][T14930] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  461.082755][T14930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  461.086446][T14930] vhci_hcd vhci_hcd.0: Device attached
[  461.347331][T11046] usb 50-1: SetAddress Request (10) to port 0
[  461.349552][T11046] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd
[  461.748603][T14932] vhci_hcd: connection reset by peer
[  461.768097][  T229] vhci_hcd: stop threads
[  461.769986][  T229] vhci_hcd: release socket
[  461.781023][  T229] vhci_hcd: disconnect device
[  463.234809][T14964] input input36: cannot allocate more than FF_MAX_EFFECTS effects
[  463.497509][T14965] serio: Serial port ptm3
[  464.143928][ T6009] kernel write not supported for file /sequencer2 (pid: 6009 comm: kworker/1:3)
[  465.684594][T14992] siw: device registration error -23
[  466.010326][T14997] fuse: Unknown parameter 'use00000000000000000000'
[  466.482406][T15002] lo: MTU too low for tipc bearer
[  466.484281][T15002] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  466.522377][T11046] usb 50-1: device descriptor read/8, error -110
[  467.015456][T11046] usb usb50-port1: attempt power cycle
[  467.173392][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2815'.
[  467.729587][T11046] usb usb50-port1: unable to enumerate USB device
[  467.773577][T15011] bond0: (slave team0): Releasing backup interface
[  467.782250][T15011] team0 (unregistering): Port device team_slave_0 removed
[  467.788656][T15011] team0 (unregistering): Port device team_slave_1 removed
[  467.805158][T15011] team0 (unregistering): Port device dummy0 removed
[  468.201953][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'.
[  468.206683][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'.
[  468.415853][   T40] kauditd_printk_skb: 51 callbacks suppressed
[  468.415889][   T40] audit: type=1800 audit(1764685567.981:698): pid=15023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2822" name="file0" dev="9p" ino=71827695 res=0 errno=0
[  469.147525][T15033] fuse: Bad value for 'fd'
[  469.474846][T15036] netlink: 'syz.5.2825': attribute type 2 has an invalid length.
[  469.483850][T15036] !: entered promiscuous mode
[  469.491775][T15036] netlink: 'syz.5.2825': attribute type 2 has an invalid length.
[  469.495478][T15036] !: left promiscuous mode
[  470.783566][T15054] siw: device registration error -23
[  470.976104][T15055] bond0: (slave team0): Releasing backup interface
[  470.994867][T15055] team0 (unregistering): Port device team_slave_0 removed
[  471.011218][T15055] team0 (unregistering): Port device team_slave_1 removed
[  471.112767][T15060] lo speed is unknown, defaulting to 1000
[  471.116023][T15060] lo speed is unknown, defaulting to 1000
[  471.126493][T15057] openvswitch: netlink: Missing key (keys=40, expected=100)
[  471.150978][   T40] audit: type=1804 audit(1764685570.709:699): pid=15057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2837" name="/newroot/339/file0/file0" dev="9p" ino=71827695 res=1 errno=0
[  471.265736][T12231] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  471.670290][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2833'.
[  472.531769][T15074] netlink: 'syz.5.2831': attribute type 16 has an invalid length.
[  472.550698][T15074] netlink: 'syz.5.2831': attribute type 17 has an invalid length.
[  473.750256][T15074] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.796507][T15074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  474.578427][T15097] lo speed is unknown, defaulting to 1000
[  474.582265][T15097] lo speed is unknown, defaulting to 1000
[  474.617644][T15098] netlink: 'syz.8.2840': attribute type 8 has an invalid length.
[  475.818175][T15109] team0 (unregistering): Port device team_slave_0 removed
[  475.846965][T15109] team0 (unregistering): Port device team_slave_1 removed
[  475.860285][T15113] 9pnet: Unknown protocol version 9p2000.0x0000000000000001	
[  476.400010][   T34] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  477.506048][   T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  477.509325][   T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  477.512713][   T34] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  477.519347][   T34] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  477.522435][   T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  477.525105][   T34] usb 11-1: Product: syz
[  477.526523][   T34] usb 11-1: Manufacturer: syz
[  477.528107][   T34] usb 11-1: SerialNumber: syz
[  477.913381][   T34] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  478.215014][T12231] usb 11-1: USB disconnect, device number 7
[  478.219656][T12231] usblp0: removed
[  478.519182][T15134] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2849'.
[  478.616680][T15130] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.878534][T15150] hub 8-0:1.0: USB hub found
[  479.882323][T15150] hub 8-0:1.0: 1 port detected
[  479.911941][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2852'.
[  479.915152][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2852'.
[  479.922488][T15150] netlink: 'syz.5.2852': attribute type 12 has an invalid length.
[  479.956298][T15155] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  479.958462][T15155] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  479.961361][T15155] vhci_hcd vhci_hcd.0: Device attached
[  480.233529][ T7708] usb 50-1: SetAddress Request (14) to port 0
[  480.236057][ T7708] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd
[  480.847576][T15156] vhci_hcd: connection reset by peer
[  480.851425][ T4399] vhci_hcd: stop threads
[  480.855780][ T4399] vhci_hcd: release socket
[  480.883482][ T4399] vhci_hcd: disconnect device
[  481.460972][T15179] netlink: 'syz.4.2860': attribute type 9 has an invalid length.
[  481.464784][T15179] netlink: 'syz.4.2860': attribute type 7 has an invalid length.
[  481.468109][T15179] netlink: 'syz.4.2860': attribute type 8 has an invalid length.
[  481.680234][   T40] audit: type=1804 audit(1764685581.230:700): pid=15183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2861" name="/newroot/346/bus/file0" dev="overlay" ino=1922 res=1 errno=0
[  483.788221][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2868'.
[  483.820076][T15211] netlink: 'syz.4.2867': attribute type 16 has an invalid length.
[  483.836161][T15211] netlink: 'syz.4.2867': attribute type 17 has an invalid length.
[  483.870980][T15211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  484.880029][T15223] input input38: cannot allocate more than FF_MAX_EFFECTS effects
[  486.405002][T15237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2874'.
[  486.960917][ T7708] usb 50-1: device descriptor read/8, error -110
[  487.356925][ T7708] usb usb50-port1: attempt power cycle
[  488.369004][T15265] lo speed is unknown, defaulting to 1000
[  488.546722][ T7708] usb usb50-port1: unable to enumerate USB device
[  488.604084][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2878'.
[  488.605299][T15265] lo speed is unknown, defaulting to 1000
[  488.622585][T15258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  488.647095][ T7708] lo speed is unknown, defaulting to 1000
[  488.649044][ T7708] syz0: Port: 1 Link ACTIVE
[  489.289729][T15273] loop2: detected capacity change from 0 to 7
[  489.292959][T15273] Dev loop2: unable to read RDB block 7
[  489.295490][T15273]  loop2: AHDI p1 p2 p3
[  489.296956][T15273] loop2: partition table partially beyond EOD, truncated
[  489.299868][T15273] loop2: p1 start 1601398130 is beyond EOD, truncated
[  489.302705][T15273] loop2: p2 start 1702059890 is beyond EOD, truncated
[  489.699789][T15281] hub 8-0:1.0: USB hub found
[  489.784825][T15281] hub 8-0:1.0: 1 port detected
[  490.070027][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2882'.
[  490.099929][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2882'.
[  490.137507][T15285] netlink: 'syz.8.2882': attribute type 12 has an invalid length.
[  490.750586][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'.
[  490.793709][T15295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  491.449907][T15304] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2891'.
[  491.502566][   T34] usb 13-1: new high-speed USB device number 8 using dummy_hcd
[  491.682723][   T34] usb 13-1: Using ep0 maxpacket: 32
[  491.696000][   T34] usb 13-1: config index 0 descriptor too short (expected 156, got 27)
[  491.699641][   T34] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  491.714681][   T34] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  491.730434][   T34] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  491.746475][   T34] usb 13-1: config 0 interface 0 has no altsetting 0
[  491.750618][   T34] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  491.756753][   T34] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  491.766171][   T34] usb 13-1: Product: syz
[  491.768133][   T34] usb 13-1: Manufacturer: syz
[  491.772764][   T34] usb 13-1: SerialNumber: syz
[  491.791915][   T34] usb 13-1: config 0 descriptor??
[  491.799748][   T34] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  491.812846][   T34] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  492.270563][T15316] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  492.272896][T15316] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  492.283391][T15316] vhci_hcd vhci_hcd.0: Device attached
[  492.311142][   T40] audit: type=1326 audit(1764685591.851:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15297 comm="syz.8.2888" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x0
[  492.573688][ T7708] usb 54-1: SetAddress Request (22) to port 0
[  492.575704][ T7708] usb 54-1: new SuperSpeed USB device number 22 using vhci_hcd
[  493.808996][T15335] 9pnet_virtio: no channels available for device syz
[  493.823242][   T40] audit: type=1800 audit(1764685593.360:702): pid=15335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2896" name="file0" dev="9p" ino=71827719 res=0 errno=0
[  495.551587][T15317] vhci_hcd: connection reset by peer
[  495.553113][T11046] usb 13-1: USB disconnect, device number 8
[  495.554828][ T4126] vhci_hcd: stop threads
[  495.557940][ T4126] vhci_hcd: release socket
[  495.560606][ T4126] vhci_hcd: disconnect device
[  495.583495][T11046] ldusb 13-1:0.0: LD USB Device #0 now disconnected
[  496.963994][T15367] overlayfs: missing 'lowerdir'
[  497.773319][ T7708] usb 54-1: device descriptor read/8, error -110
[  498.293219][ T7708] usb usb54-port1: attempt power cycle
[  498.889091][ T7708] usb usb54-port1: unable to enumerate USB device
[  499.249416][T15382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  500.073163][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2912'.
[  500.838587][T15414] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2914'.
[  501.351020][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2917'.
[  502.276075][T15432] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2920'.
[  503.026195][T15440] fuse: Bad value for 'fd'
[  503.096823][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2921'.
[  503.239972][T15439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  503.688446][T15446] netlink: 'syz.6.2923': attribute type 10 has an invalid length.
[  503.694518][T15446] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  503.990601][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2923'.
[  504.117788][T15440] Process accounting resumed
[  504.418798][T15445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  504.457385][T15454] lo speed is unknown, defaulting to 1000
[  504.460264][T15454] lo speed is unknown, defaulting to 1000
[  504.663454][T12231] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  505.644546][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'.
[  505.648810][T15468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'.
[  505.652976][T15468] netlink: 'syz.4.2926': attribute type 12 has an invalid length.
[  505.674883][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  505.722902][T15467] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  505.725967][T15467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  505.739426][T15467] vhci_hcd vhci_hcd.0: Device attached
[  505.824392][T12231] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  505.827942][T15476] netlink: 'syz.8.2928': attribute type 4 has an invalid length.
[  505.835238][T12231] lo speed is unknown, defaulting to 1000
[  505.837674][T12231] syz0: Port: 1 Link DOWN
[  506.034124][ T7708] usb 50-1: SetAddress Request (18) to port 0
[  506.039909][ T7708] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd
[  506.478604][T15473] vhci_hcd: connection reset by peer
[  506.481312][   T95] vhci_hcd: stop threads
[  506.483513][   T95] vhci_hcd: release socket
[  506.486321][   T95] vhci_hcd: disconnect device
[  506.842373][T15478] overlayfs: failed to clone upperpath
[  509.116595][   T34] usb 13-1: new low-speed USB device number 9 using dummy_hcd
[  509.156957][T12231] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  509.318088][   T34] usb 13-1: config 0 has an invalid interface number: 1 but max is 0
[  509.320859][   T34] usb 13-1: config 0 has no interface number 0
[  509.322967][   T34] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  509.328559][   T34] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  509.332739][   T34] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  509.335783][   T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.339862][   T34] usb 13-1: config 0 descriptor??
[  509.342140][T15503] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  509.350051][   T34] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  509.506835][T11046] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  509.561741][T12231] usb 13-1: USB disconnect, device number 9
[  509.561797][    C2] iowarrior 13-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  509.638058][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2942'.
[  509.676869][T11046] usb 10-1: Using ep0 maxpacket: 8
[  509.680329][T11046] usb 10-1: config 0 interface 0 has no altsetting 0
[  509.682688][T11046] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  509.685762][T11046] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.695431][T11046] usb 10-1: config 0 descriptor??
[  510.204320][T11046] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  510.470449][T15533] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  510.472653][T15533] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  510.475618][T15533] vhci_hcd vhci_hcd.0: Device attached
[  510.586124][ T6009] usb 10-1: USB disconnect, device number 10
[  510.925636][T11046] usb 54-1: SetAddress Request (26) to port 0
[  510.963532][T11046] usb 54-1: new SuperSpeed USB device number 26 using vhci_hcd
[  511.110052][ T7708] usb 50-1: device descriptor read/8, error -110
[  511.238132][   T40] audit: type=1800 audit(1764685610.127:703): pid=15533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2945" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  511.550513][ T7708] usb usb50-port1: attempt power cycle
[  511.728388][T14006] Bluetooth: hci1: Frame reassembly failed (-84)
[  512.132067][ T7708] usb usb50-port1: unable to enumerate USB device
[  513.750090][   T63] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  514.717439][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'.
[  515.304772][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2956'.
[  515.451226][T15534] vhci_hcd: connection reset by peer
[  515.454093][ T4399] vhci_hcd: stop threads
[  515.455553][ T4399] vhci_hcd: release socket
[  515.460623][ T4399] vhci_hcd: disconnect device
[  515.544081][T15589] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2957'.
[  515.637079][T15593] lo speed is unknown, defaulting to 1000
[  515.640141][T15593] lo speed is unknown, defaulting to 1000
[  516.071732][T11046] usb 54-1: device descriptor read/8, error -110
[  516.172154][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  516.615475][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2962'.
[  517.213148][T15608] 
: left allmulticast mode
[  517.214743][T15608] 
: left promiscuous mode
[  517.216401][T15608] bridge0: port 1(
) entered disabled state
[  517.224235][T15608] bridge_slave_1: left allmulticast mode
[  517.226106][T15608] bridge_slave_1: left promiscuous mode
[  517.228098][T15608] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.233740][T15608] bond0: (slave bond_slave_0): Releasing backup interface
[  517.238794][T15608] bond0: (slave bond_slave_1): Releasing backup interface
[  517.241926][T15608] batman_adv: batadv0: Removing interface: batadv_slave_0
[  517.245946][T11046] usb usb54-port1: attempt power cycle
[  517.344064][T15608] batman_adv: batadv0: Removing interface: batadv_slave_1
[  517.364606][T15608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  518.036673][T11046] usb usb54-port1: unable to enumerate USB device
[  518.599654][T15634] netlink: 107460 bytes leftover after parsing attributes in process `syz.5.2968'.
[  518.639718][ T6894] Bluetooth: hci1: Frame reassembly failed (-84)
[  520.388549][T15645] lo speed is unknown, defaulting to 1000
[  520.392696][T15645] lo speed is unknown, defaulting to 1000
[  520.657925][T12231] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  520.687521][T15652] lo speed is unknown, defaulting to 1000
[  520.690361][T15652] lo speed is unknown, defaulting to 1000
[  520.725520][ T5949] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  521.305497][T15659] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  521.308290][T15659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  521.311664][T15659] vhci_hcd vhci_hcd.0: Device attached
[  521.555719][T11046] usb 49-1: new low-speed USB device number 3 using vhci_hcd
[  521.842634][T15662] vhci_hcd: connection reset by peer
[  521.847031][   T91] vhci_hcd: stop threads
[  521.850375][   T91] vhci_hcd: release socket
[  521.854718][   T91] vhci_hcd: disconnect device
[  521.937484][T15670] fuse: Bad value for 'fd'
[  522.379619][T15658] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  523.384921][T15683] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  523.387153][T15683] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  523.390619][T15683] vhci_hcd vhci_hcd.0: Device attached
[  523.437464][ T5949] Bluetooth: hci4: command 0x0406 tx timeout
[  523.694875][ T6009] usb 48-1: SetAddress Request (10) to port 0
[  523.697622][ T6009] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd
[  523.798815][T15684] vhci_hcd: connection reset by peer
[  523.801211][   T91] vhci_hcd: stop threads
[  523.802642][   T91] vhci_hcd: release socket
[  523.804572][   T91] vhci_hcd: disconnect device
[  523.983992][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2978'.
[  524.174252][T15694] netlink: 'syz.4.2979': attribute type 16 has an invalid length.
[  524.183170][T15694] netlink: 'syz.4.2979': attribute type 17 has an invalid length.
[  524.196159][T15694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  524.798237][ T5949] Bluetooth: hci1: command 0x1003 tx timeout
[  524.878296][   T63] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  525.539687][T15705] netlink: 'syz.5.2981': attribute type 10 has an invalid length.
[  528.070723][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2985'.
[  528.152383][T15723] ptrace attach of "/syz-executor exec"[10150] was attempted by "/syz-executor exec"[15723]
[  528.159192][T15723] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2986'.
[  528.215832][T15724] netlink: 'syz.5.2986': attribute type 21 has an invalid length.
[  528.218996][T15724] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2986'.
[  528.571664][T11046] vhci_hcd: vhci_device speed not set
[  528.578992][T15724] netlink: 'syz.5.2986': attribute type 4 has an invalid length.
[  528.583549][T15724] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2986'.
[  528.594333][T15725] batadv1: entered promiscuous mode
[  528.598428][T15725] 8021q: adding VLAN 0 to HW filter on device batadv1
[  528.954516][ T6009] usb 48-1: device descriptor read/8, error -110
[  529.153597][T15736] overlayfs: missing 'lowerdir'
[  529.877146][ T6009] usb usb48-port1: attempt power cycle
[  530.047745][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2990'.
[  530.097037][T15747] macvlan2: entered allmulticast mode
[  530.099552][T15747] veth1_vlan: entered allmulticast mode
[  530.112142][T15747] veth1_vlan: left allmulticast mode
[  530.478381][T15735] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  530.480548][T15735] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  530.489341][T15735] vhci_hcd vhci_hcd.0: Device attached
[  530.755763][ T6009] usb usb48-port1: unable to enumerate USB device
[  530.822536][T10191] usb 54-1: SetAddress Request (30) to port 0
[  530.836819][T10191] usb 54-1: new SuperSpeed USB device number 30 using vhci_hcd
[  530.879075][T15755] lo speed is unknown, defaulting to 1000
[  530.884676][T15755] lo speed is unknown, defaulting to 1000
[  531.103732][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  531.114830][T15749] vhci_hcd: connection reset by peer
[  531.121355][   T12] vhci_hcd: stop threads
[  531.129143][   T12] vhci_hcd: release socket
[  531.135042][   T12] vhci_hcd: disconnect device
[  531.145290][T15761] vxcan1: left promiscuous mode
[  531.204989][T15761] wireguard0: left promiscuous mode
[  531.207625][T15761] wireguard0: left allmulticast mode
[  532.069602][T15771] sp0: Synchronizing with TNC
[  532.269995][T15775] lo speed is unknown, defaulting to 1000
[  532.272723][T15775] lo speed is unknown, defaulting to 1000
[  532.885363][T15768] [U] �`
[  533.833086][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'.
[  533.883996][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'.
[  534.445684][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  535.954301][T10191] usb 54-1: device descriptor read/8, error -110
[  536.387327][T10191] usb usb54-port1: attempt power cycle
[  536.516029][T15807] overlayfs: missing 'lowerdir'
[  537.059863][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3001'.
[  537.134976][T15806] macvlan3: entered allmulticast mode
[  537.137547][T15806] veth1_vlan: entered allmulticast mode
[  537.142470][T15806] veth1_vlan: left allmulticast mode
[  537.787938][T10191] usb usb54-port1: unable to enumerate USB device
[  538.041927][T15823] binder: 15820:15823 ioctl 0 80000040 returned -22
[  538.294646][T15828] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[  538.412245][T15832] lo speed is unknown, defaulting to 1000
[  538.416083][T15832] lo speed is unknown, defaulting to 1000
[  538.714721][T15840] sp0: Synchronizing with TNC
[  538.877900][T15829] netlink: 'syz.6.3007': attribute type 10 has an invalid length.
[  539.577083][T15831] [U] �`
[  540.866218][T15857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3016'.
[  540.878283][T15854] can: request_module (can-proto-0) failed.
[  540.961939][T15857] binder: 15853:15857 ioctl 81e8943c 80000500 returned -22
[  541.244328][T15861] ALSA: mixer_oss: invalid OSS volume ''
[  541.281210][T15861] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[  541.283377][T15861] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  541.286010][T15861] vhci_hcd vhci_hcd.0: Device attached
[  541.330175][T15860] lo speed is unknown, defaulting to 1000
[  541.336972][T15860] lo speed is unknown, defaulting to 1000
[  542.171670][T11046] vhci_hcd: vhci_device speed not set
[  542.340841][T11046] usb 53-1: new full-speed USB device number 2 using vhci_hcd
[  542.385888][T15874] lo speed is unknown, defaulting to 1000
[  542.389243][T15874] lo speed is unknown, defaulting to 1000
[  542.439902][T15862] vhci_hcd: connection reset by peer
[  542.448750][T14006] vhci_hcd: stop threads
[  542.450298][T14006] vhci_hcd: release socket
[  542.452653][T14006] vhci_hcd: disconnect device
[  543.029095][T15887] bond0: (slave syz_tun): Releasing backup interface
[  543.226405][T15887] bond1: (slave dummy0): Releasing active interface
[  543.298192][T15892] netlink: 'syz.5.3024': attribute type 21 has an invalid length.
[  543.357622][T15887] 
: left allmulticast mode
[  543.361644][T15887] 
: left promiscuous mode
[  543.371963][T15887] bridge0: port 1(
) entered disabled state
[  543.384548][T15887] bridge_slave_1: left allmulticast mode
[  543.386684][T15887] bridge_slave_1: left promiscuous mode
[  543.389964][T15887] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.459291][T15887] bond0: (slave bond_slave_0): Releasing backup interface
[  543.609357][T15887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.614326][T15887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  543.624013][T15887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.627260][T15887] batman_adv: batadv0: Removing interface: batadv_slave_1
[  543.640687][T15887] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  543.732794][T15900] netlink: 107460 bytes leftover after parsing attributes in process `syz.8.3026'.
[  543.804997][ T4399] Bluetooth: hci1: Frame reassembly failed (-84)
[  543.807396][ T4399] Bluetooth: hci1: Frame reassembly failed (-84)
[  543.810326][ T4399] Bluetooth: hci1: Frame reassembly failed (-84)
[  544.135827][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3025'.
[  545.853455][   T63] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  546.689712][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3027'.
[  546.721998][T15920] macvlan2: entered allmulticast mode
[  546.724577][T15920] veth1_vlan: entered allmulticast mode
[  546.736399][T15920] veth1_vlan: left allmulticast mode
[  547.214848][T15924] lo speed is unknown, defaulting to 1000
[  547.217873][T15924] lo speed is unknown, defaulting to 1000
[  547.524532][T11046] vhci_hcd: vhci_device speed not set
[  548.935266][T15951] netlink: 'syz.8.3036': attribute type 10 has an invalid length.
[  548.976320][   T40] audit: type=1326 audit(1764685648.459:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15945 comm="syz.4.3037" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x0
[  549.090564][T15956] netlink: 107460 bytes leftover after parsing attributes in process `syz.6.3038'.
[  550.005123][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3039'.
[  550.195867][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.199602][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  550.352786][T15965] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3041'.
[  550.610264][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3040'.
[  550.793849][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3042'.
[  550.817328][T15977] macvlan3: entered allmulticast mode
[  550.819386][T15977] veth1_vlan: entered allmulticast mode
[  550.824888][T15977] veth1_vlan: left allmulticast mode
[  551.217123][ T5949] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  551.217145][   T63] Bluetooth: hci1: command 0x1003 tx timeout
[  551.437784][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3044'.
[  551.980665][T15991] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13)
[  551.983688][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  551.989010][T15991] vhci_hcd vhci_hcd.0: Device attached
[  552.001527][T15991] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15)
[  552.004519][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  552.008722][T15991] vhci_hcd vhci_hcd.0: Device attached
[  552.014469][T15991] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(17)
[  552.017394][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  552.023776][T15991] vhci_hcd vhci_hcd.0: Device attached
[  552.028508][T15991] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  552.035317][T15991] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21)
[  552.038252][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  552.043025][T15991] vhci_hcd vhci_hcd.0: Device attached
[  552.049894][T15991] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(23)
[  552.052111][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  552.060290][T15991] vhci_hcd vhci_hcd.0: Device attached
[  552.065957][T15991] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  552.075486][T15991] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(27)
[  552.078222][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  552.084210][T15991] vhci_hcd vhci_hcd.0: Device attached
[  552.089966][T15991] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  552.115785][T15998] vhci_hcd: connection closed
[  552.116214][ T6721] vhci_hcd: stop threads
[  552.119594][ T6721] vhci_hcd: release socket
[  552.121286][T15996] vhci_hcd: connection closed
[  552.122351][T15994] vhci_hcd: connection closed
[  552.124334][T15992] vhci_hcd: connection closed
[  552.124743][ T6721] vhci_hcd: disconnect device
[  552.133443][T16002] vhci_hcd: connection closed
[  552.227795][T10191] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  552.232146][T15993] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  552.360533][T16000] vhci_hcd: connection closed
[  552.700612][T16009] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  552.704479][T16009] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  552.716162][T16009] vhci_hcd vhci_hcd.0: Device attached
[  552.734842][T16008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3045'.
[  553.021262][ T6721] vhci_hcd: stop threads
[  553.023133][ T6721] vhci_hcd: release socket
[  553.048731][ T6721] vhci_hcd: disconnect device
[  553.102314][T11046] usb 50-1: SetAddress Request (22) to port 0
[  553.104402][T11046] usb 50-1: new SuperSpeed USB device number 22 using vhci_hcd
[  553.147689][ T6721] vhci_hcd: stop threads
[  553.159944][ T6721] vhci_hcd: release socket
[  553.164072][ T6721] vhci_hcd: disconnect device
[  553.328568][ T6721] vhci_hcd: stop threads
[  553.330590][ T6721] vhci_hcd: release socket
[  553.332185][ T6721] vhci_hcd: disconnect device
[  553.333828][ T6721] vhci_hcd: stop threads
[  553.335276][ T6721] vhci_hcd: release socket
[  553.336833][ T6721] vhci_hcd: disconnect device
[  553.338653][ T6721] vhci_hcd: stop threads
[  553.340099][ T6721] vhci_hcd: release socket
[  553.341748][ T6721] vhci_hcd: disconnect device
[  553.405644][T16021] tipc: Can't bind to reserved service type 1
[  554.569692][T16010] vhci_hcd: connection reset by peer
[  554.571752][ T6721] vhci_hcd: stop threads
[  554.573284][ T6721] vhci_hcd: release socket
[  554.574882][ T6721] vhci_hcd: disconnect device
[  555.503838][T16048] efs: Unknown parameter 'norecovery��;f�����O���`�A�u4��墅Jی�$�fh�Yo���n1ylJ8(�K1'
[  555.547947][ T6009] IPVS: starting estimator thread 0...
[  555.690472][T16049] IPVS: using max 44 ests per chain, 105600 per kthread
[  555.721975][T16053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  555.869813][T16053] vlan0: entered promiscuous mode
[  555.885279][T16053] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  557.041633][ T1328] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  557.211341][ T1328] usb 11-1: Using ep0 maxpacket: 8
[  557.214437][ T1328] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  557.218084][ T1328] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  557.231235][ T1328] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  557.241406][ T1328] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  557.245793][ T1328] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  557.248788][ T1328] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.431379][T10191] vhci_hcd: vhci_device speed not set
[  557.467259][ T1328] usb 11-1: usb_control_msg returned -32
[  557.469492][ T1328] usbtmc 11-1:16.0: can't read capabilities
[  557.623137][T16080] fuse: Unknown parameter ''
[  558.156204][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3066'.
[  558.159300][T16089] bridge_slave_1: left allmulticast mode
[  558.161301][T16089] bridge_slave_1: left promiscuous mode
[  558.165063][T16089] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.191864][T11046] usb 50-1: device descriptor read/8, error -110
[  558.266559][T16089] bridge_slave_0: left allmulticast mode
[  558.269012][T16089] bridge_slave_0: left promiscuous mode
[  558.277253][T16089] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.794000][ T6026] usb usb48-port1: attempt power cycle
[  558.873615][   T40] audit: type=1326 audit(1764685658.372:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.6.3061" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x0
[  558.873957][T11046] usb usb50-port1: attempt power cycle
[  559.227650][T16095] lo speed is unknown, defaulting to 1000
[  559.234295][T16095] lo speed is unknown, defaulting to 1000
[  559.348378][    C1] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  559.365292][T16097] usbtmc 11-1:16.0: Unable to send data, error -71
[  559.596601][ T6026] usb usb48-port1: unable to enumerate USB device
[  559.766772][T16100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3068'.
[  560.049126][T11046] usb usb50-port1: unable to enumerate USB device
[  561.158550][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3071'.
[  561.181494][T16118] macvlan3: entered allmulticast mode
[  561.183392][T16118] veth1_vlan: entered allmulticast mode
[  561.188236][T16118] veth1_vlan: left allmulticast mode
[  561.367583][T16120] netlink: 'syz.4.3069': attribute type 10 has an invalid length.
[  561.674377][T11046] usb 11-1: USB disconnect, device number 8
[  561.854143][T16122] netlink: 'syz.5.3072': attribute type 4 has an invalid length.
[  561.856843][T16122] netlink: 'syz.5.3072': attribute type 1 has an invalid length.
[  561.859505][T16122] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3072'.
[  562.513877][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3075'.
[  562.584453][T16131] netlink: 'syz.4.3075': attribute type 4 has an invalid length.
[  562.629789][ T6026] lo speed is unknown, defaulting to 1000
[  562.631893][ T6026] syz: Port: 1 Link DOWN
[  564.260334][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3082'.
[  565.231493][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3088'.
[  565.919595][T16176] bond2: option arp_interval: invalid value (18446744073709551615)
[  565.923223][T16176] bond2: option arp_interval: allowed values 0 - 2147483647
[  566.590609][T16176] bond2 (unregistering): Released all slaves
[  567.028921][T16194] Bluetooth: MGMT ver 1.23
[  567.092549][T16197] ptrace attach of "/syz-executor exec"[10840] was attempted by "/syz-executor exec"[16197]
[  567.132360][T16197] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3089'.
[  567.152473][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  567.231652][T16197] netlink: 'syz.6.3089': attribute type 21 has an invalid length.
[  567.235146][T16197] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3089'.
[  567.248540][T16197] netlink: 'syz.6.3089': attribute type 4 has an invalid length.
[  567.258192][T16197] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3089'.
[  567.273547][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3090'.
[  567.329894][T16197] batadv1: entered promiscuous mode
[  567.346528][T16197] 8021q: adding VLAN 0 to HW filter on device batadv1
[  568.070901][T16204] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13)
[  568.073278][T16204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  568.081746][T16204] vhci_hcd vhci_hcd.0: Device attached
[  568.089018][T16204] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(15)
[  568.091242][T16204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  568.099735][T16204] vhci_hcd vhci_hcd.0: Device attached
[  568.109324][T16204] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(17)
[  568.111529][T16204] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  568.118344][T16204] vhci_hcd vhci_hcd.0: Device attached
[  568.126832][T16204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  568.137453][T16204] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(21)
[  568.139656][T16204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  568.147058][T16204] vhci_hcd vhci_hcd.0: Device attached
[  568.154524][T16204] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(23)
[  568.156720][T16204] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  568.165365][T16204] vhci_hcd vhci_hcd.0: Device attached
[  568.173941][T16204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  568.181960][T16204] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(27)
[  568.184232][T16204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  568.189414][T16204] vhci_hcd vhci_hcd.0: Device attached
[  568.193193][T16204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  568.211237][T16215] vhci_hcd: connection closed
[  568.211457][T16213] vhci_hcd: connection closed
[  568.213247][T16211] vhci_hcd: connection closed
[  568.215030][T16209] vhci_hcd: connection closed
[  568.216676][T16207] vhci_hcd: connection closed
[  568.218320][T16205] vhci_hcd: connection closed
[  568.222002][T14006] vhci_hcd: stop threads
[  568.228750][T14006] vhci_hcd: release socket
[  568.232450][T14006] vhci_hcd: disconnect device
[  568.236766][T14006] vhci_hcd: stop threads
[  568.243409][T14006] vhci_hcd: release socket
[  568.245015][T14006] vhci_hcd: disconnect device
[  568.246735][T14006] vhci_hcd: stop threads
[  568.253546][T14006] vhci_hcd: release socket
[  568.257720][T14006] vhci_hcd: disconnect device
[  568.262562][T14006] vhci_hcd: stop threads
[  568.264413][T14006] vhci_hcd: release socket
[  568.266629][T14006] vhci_hcd: disconnect device
[  568.296537][T14006] vhci_hcd: stop threads
[  568.298115][T14006] vhci_hcd: release socket
[  568.300028][T14006] vhci_hcd: disconnect device
[  568.301911][T14006] vhci_hcd: stop threads
[  568.303398][T14006] vhci_hcd: release socket
[  568.305077][T14006] vhci_hcd: disconnect device
[  568.318977][ T6026] usb 53-1: new low-speed USB device number 3 using vhci_hcd
[  568.321615][ T6026] usb 53-1: enqueue for inactive port 0
[  568.399056][ T6026] vhci_hcd: vhci_device speed not set
[  569.580924][   T40] audit: type=1800 audit(1764685669.075:706): pid=16225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3095" name="blkio.throttle.io_service_bytes_recursive" dev="9p" ino=71828017 res=0 errno=0
[  570.121826][T16243] dummy0: entered promiscuous mode
[  570.129832][T16243] dummy0: entered allmulticast mode
[  571.340897][ T6026] usb 13-1: new full-speed USB device number 10 using dummy_hcd
[  571.382401][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3102'.
[  571.393831][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3102'.
[  571.502812][ T6026] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.518229][ T6026] usb 13-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  571.527679][ T6026] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.539918][ T6026] usb 13-1: Product: syz
[  571.545974][ T6026] usb 13-1: Manufacturer: syz
[  571.552127][ T6026] usb 13-1: SerialNumber: syz
[  571.563837][ T6026] usb 13-1: config 0 descriptor??
[  572.706185][T16269] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3105'.
[  572.750271][T16269] batadv2: entered allmulticast mode
[  573.092128][ T6026] keyspan 13-1:0.0: Keyspan 1 port adapter converter detected
[  573.098740][ T6026] keyspan 13-1:0.0: found no endpoint descriptor for endpoint 82
[  573.104664][ T6026] keyspan 13-1:0.0: found no endpoint descriptor for endpoint 81
[  573.107432][ T6026] keyspan 13-1:0.0: found no endpoint descriptor for endpoint 1
[  573.110001][ T6026] keyspan 13-1:0.0: found no endpoint descriptor for endpoint 2
[  573.117597][ T6026] usb 13-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  573.122220][ T6026] usb 13-1: USB disconnect, device number 10
[  573.129326][ T6026] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  573.132790][ T6026] keyspan 13-1:0.0: device disconnected
[  573.540603][T16284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  573.544850][T16284] syzkaller0: entered promiscuous mode
[  573.547300][T16284] syzkaller0: entered allmulticast mode
[  573.588846][T16284] bond1: option mode: unable to set because the bond device has slaves
[  573.630594][T16284] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  573.664646][T16283] tipc: Resetting bearer <eth:syzkaller0>
[  573.687726][T16283] tipc: Disabling bearer <eth:syzkaller0>
[  573.738426][T16288] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  574.053776][T16296] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  574.055985][T16296] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  574.067681][T16296] vhci_hcd vhci_hcd.0: Device attached
[  574.146888][T16296] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3112'.
[  574.303298][   T54] usb 49-1: new low-speed USB device number 4 using vhci_hcd
[  574.679726][T16297] vhci_hcd: connection reset by peer
[  574.692622][   T91] vhci_hcd: stop threads
[  574.695419][   T91] vhci_hcd: release socket
[  574.704365][   T91] vhci_hcd: disconnect device
[  574.969003][T16320] lo speed is unknown, defaulting to 1000
[  574.975820][T16320] lo speed is unknown, defaulting to 1000
[  575.681022][T16332] rdma_rxe: rxe_newlink: failed to add syz_tun
[  575.926144][T16332] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3121'.
[  576.607691][T16344] ptrace attach of ""[16345] was attempted by "/syz-executor exec"[16344]
[  577.239267][T16353] ALSA: mixer_oss: invalid OSS volume ''
[  577.521747][T16353] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  577.524557][T16353] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  577.528115][T16353] vhci_hcd vhci_hcd.0: Device attached
[  578.190651][T16369] lo speed is unknown, defaulting to 1000
[  578.193396][T16369] lo speed is unknown, defaulting to 1000
[  578.315751][T16359] vhci_hcd: connection closed
[  578.316263][   T91] vhci_hcd: stop threads
[  578.325265][   T91] vhci_hcd: release socket
[  578.335933][   T91] vhci_hcd: disconnect device
[  579.261709][T16384] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3132'.
[  579.467665][   T54] vhci_hcd: vhci_device speed not set
[  579.699444][T16389] lo speed is unknown, defaulting to 1000
[  579.702287][T16389] lo speed is unknown, defaulting to 1000
[  580.333878][T16403] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3137'.
[  580.433770][T16403] netlink: 'syz.6.3137': attribute type 10 has an invalid length.
[  580.471523][T16406] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  580.483519][T16406] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  580.737155][T10191] usb 13-1: new high-speed USB device number 11 using dummy_hcd
[  581.088367][T10191] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  581.092049][T10191] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  581.095318][T10191] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  581.121226][T10191] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.138717][T16387] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  581.144758][T10191] usb 13-1: Quirk or no altset; falling back to MIDI 1.0
[  581.251269][T16416] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  581.253562][T16416] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  581.271434][T16416] vhci_hcd vhci_hcd.0: Device attached
[  581.305964][T16416] netlink: 'syz.6.3139': attribute type 10 has an invalid length.
[  581.341146][T16416] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  581.524314][T16417] vhci_hcd: connection closed
[  581.524615][   T12] vhci_hcd: stop threads
[  581.528976][   T12] vhci_hcd: release socket
[  581.531084][   T12] vhci_hcd: disconnect device
[  581.547640][   T54] usb 50-1: enqueue for inactive port 0
[  582.181214][   T54] usb usb50-port1: attempt power cycle
[  582.749899][   T54] usb usb50-port1: unable to enumerate USB device
[  582.845270][T16430] lo speed is unknown, defaulting to 1000
[  582.848280][T16430] lo speed is unknown, defaulting to 1000
[  583.460889][   T54] usb 13-1: USB disconnect, device number 11
[  585.139409][T16466] netlink: 'syz.5.3151': attribute type 12 has an invalid length.
[  586.511306][T16479] lo speed is unknown, defaulting to 1000
[  586.515364][T16479] lo speed is unknown, defaulting to 1000
[  587.101321][T14726] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  587.178970][T16488] fuse: Bad value for 'fd'
[  587.271378][T14726] usb 10-1: Using ep0 maxpacket: 8
[  587.276131][T14726] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  587.283550][T14726] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  587.287998][T14726] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  587.296809][T14726] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  587.303440][T14726] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  587.307527][T14726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.547529][T14726] usb 10-1: usb_control_msg returned -32
[  587.552625][T14726] usbtmc 10-1:16.0: can't read capabilities
[  588.376073][   T40] audit: type=1326 audit(1764685687.852:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16485 comm="syz.5.3157" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x0
[  588.385378][T16506] lo speed is unknown, defaulting to 1000
[  588.391180][T16506] lo speed is unknown, defaulting to 1000
[  589.377585][    C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  589.380783][T16520] usbtmc 10-1:16.0: Unable to send data, error -71
[  589.724931][T16532] netlink: 'syz.6.3162': attribute type 12 has an invalid length.
[  590.497991][T16534] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  590.500276][T16534] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  590.503577][T16534] vhci_hcd vhci_hcd.0: Device attached
[  590.613317][T16534] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3163'.
[  590.639591][T16538] lo speed is unknown, defaulting to 1000
[  590.652929][T16538] lo speed is unknown, defaulting to 1000
[  590.747896][ T1027] usb 10-1: USB disconnect, device number 11
[  590.844194][ T6009] usb 53-1: new low-speed USB device number 4 using vhci_hcd
[  591.133317][T16535] vhci_hcd: connection reset by peer
[  591.135799][ T4126] vhci_hcd: stop threads
[  591.137241][ T4126] vhci_hcd: release socket
[  591.139157][ T4126] vhci_hcd: disconnect device
[  591.234690][   T40] audit: type=1326 audit(1764685690.711:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.4.3168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000
[  591.261077][   T40] audit: type=1326 audit(1764685690.711:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.4.3168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000
[  591.284040][   T40] audit: type=1326 audit(1764685690.711:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.4.3168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000
[  591.291599][   T40] audit: type=1326 audit(1764685690.711:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.4.3168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000
[  591.308005][   T40] audit: type=1326 audit(1764685690.711:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.4.3168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000
[  591.316193][   T40] audit: type=1326 audit(1764685690.711:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.4.3168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000
[  591.326232][   T40] audit: type=1326 audit(1764685690.711:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.4.3168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000
[  591.338725][   T40] audit: type=1326 audit(1764685690.711:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.4.3168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000
[  591.349890][   T40] audit: type=1326 audit(1764685690.711:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.4.3168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000
[  592.356080][T16560] rdma_rxe: rxe_newlink: failed to add syz_tun
[  592.371140][T16558] netlink: 'syz.4.3170': attribute type 10 has an invalid length.
[  592.374240][T16558] netlink: 'syz.4.3170': attribute type 10 has an invalid length.
[  592.377686][T16558] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3170'.
[  592.671002][T16571] lo speed is unknown, defaulting to 1000
[  592.675059][T16571] lo speed is unknown, defaulting to 1000
[  592.680572][T16560] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3171'.
[  592.927061][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  593.300419][T16578] lo speed is unknown, defaulting to 1000
[  593.303160][T16578] lo speed is unknown, defaulting to 1000
[  593.443747][T16586] overlayfs: overlapping lowerdir path
[  593.449950][T16586] overlayfs: overlapping lowerdir path
[  593.466112][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  593.960223][T16596] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3179'.
[  596.077212][ T6009] vhci_hcd: vhci_device speed not set
[  596.164225][T16616] netlink: 'syz.5.3183': attribute type 4 has an invalid length.
[  596.500174][T16618] lo speed is unknown, defaulting to 1000
[  596.503326][T16618] lo speed is unknown, defaulting to 1000
[  597.626683][T16630] dvmrp8: left allmulticast mode
[  597.645614][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  597.917295][T16642] lo speed is unknown, defaulting to 1000
[  597.929034][T16642] lo speed is unknown, defaulting to 1000
[  598.078598][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  599.107563][T16667] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3192'.
[  599.148351][T16667] batadv1: entered allmulticast mode
[  600.081974][T16676] lo speed is unknown, defaulting to 1000
[  600.174182][T16676] lo speed is unknown, defaulting to 1000
[  600.440594][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  601.111453][T16701] lo speed is unknown, defaulting to 1000
[  601.114032][T16701] lo speed is unknown, defaulting to 1000
[  601.340574][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  601.712272][T16712] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  601.715285][T16712] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  601.730065][T16712] vhci_hcd vhci_hcd.0: Device attached
[  601.904913][   T40] kauditd_printk_skb: 1459 callbacks suppressed
[  601.904924][   T40] audit: type=1326 audit(1764685701.374:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f86598 code=0x7ffc0000
[  601.925381][   T40] audit: type=1326 audit(1764685701.384:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  601.933246][   T40] audit: type=1326 audit(1764685701.384:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  601.940306][   T40] audit: type=1326 audit(1764685701.384:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  601.953987][   T40] audit: type=1326 audit(1764685701.384:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  601.961421][   T40] audit: type=1326 audit(1764685701.384:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  601.968677][   T40] audit: type=1326 audit(1764685701.384:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  601.976168][   T40] audit: type=1326 audit(1764685701.384:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000
[  601.983519][   T40] audit: type=1326 audit(1764685701.384:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f86598 code=0x7ffc0000
[  601.992407][   T40] audit: type=1326 audit(1764685701.384:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.6.3205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f86598 code=0x7ffc0000
[  602.071355][T16721] input: syz0 as /devices/virtual/input/input42
[  602.271760][T16725] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  602.274939][T16725] UDF-fs: Scanning with blocksize 2048 failed
[  602.277706][T16725] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  602.280097][T16725] UDF-fs: Scanning with blocksize 4096 failed
[  602.381324][   T54] usb 48-1: SetAddress Request (18) to port 0
[  602.384391][   T54] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd
[  602.408685][T16713] vhci_hcd: connection closed
[  602.408952][T14006] vhci_hcd: stop threads
[  602.412240][T14006] vhci_hcd: release socket
[  602.413971][T14006] vhci_hcd: disconnect device
[  602.821373][   T54] usb 48-1: enqueue for inactive port 0
[  603.116792][T16731] lo speed is unknown, defaulting to 1000
[  603.120494][T16731] lo speed is unknown, defaulting to 1000
[  603.916829][   T54] usb usb48-port1: attempt power cycle
[  604.169108][T16749] 9p: Unknown Cache mode or invalid value Smap
[  604.283178][T16751] lo speed is unknown, defaulting to 1000
[  604.287553][T16751] lo speed is unknown, defaulting to 1000
[  604.426932][T16758] overlay: Unknown parameter 'subj_role'
[  604.546987][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3211'.
[  604.550861][   T54] usb usb48-port1: unable to enumerate USB device
[  604.553941][T16760] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3211'.
[  604.638386][T16762] siw: device registration error -23
[  605.172834][ T5949] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  605.687627][T16766] lo speed is unknown, defaulting to 1000
[  605.691667][T16766] lo speed is unknown, defaulting to 1000
[  605.853288][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  605.893424][   T54] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  606.053611][   T54] usb 10-1: Using ep0 maxpacket: 8
[  606.060216][   T54] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  606.067014][   T54] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  606.071286][   T54] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  606.074610][   T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.187035][   T54] usbtmc 10-1:16.0: bulk endpoints not found
[  606.282666][T16779] netlink: 'syz.4.3219': attribute type 4 has an invalid length.
[  607.053676][T16790] lo speed is unknown, defaulting to 1000
[  607.059071][T16790] lo speed is unknown, defaulting to 1000
[  607.408987][   T54] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  607.423626][   T54] hid-generic 0000:0000:0000.0015: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  608.161499][T16808] 9pnet_fd: Insufficient options for proto=fd
[  608.221789][T16811] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3227'.
[  608.951134][T16815] lo speed is unknown, defaulting to 1000
[  609.121096][T16823] vlan1: entered promiscuous mode
[  609.124369][T16823] vlan1: entered allmulticast mode
[  609.125939][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  609.126317][T16823] veth0_vlan: entered allmulticast mode
[  609.134192][T16815] lo speed is unknown, defaulting to 1000
[  609.260912][ T1027] usb 10-1: USB disconnect, device number 12
[  609.727658][T16822] syz.4.3229 (16822) used greatest stack depth: 18760 bytes left
[  610.033311][T16839] 9pnet_fd: Insufficient options for proto=fd
[  612.225570][T16857] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3236'.
[  612.229828][T16857] hsr_slave_1: entered allmulticast mode
[  612.447196][T16862] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  612.450106][T16862] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  612.463994][T16862] vhci_hcd vhci_hcd.0: Device attached
[  612.747540][   T54] usb 50-1: SetAddress Request (30) to port 0
[  612.749686][   T54] usb 50-1: new SuperSpeed USB device number 30 using vhci_hcd
[  612.827137][T16871] lo speed is unknown, defaulting to 1000
[  612.829830][T16871] lo speed is unknown, defaulting to 1000
[  612.987823][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  613.543701][T16863] vhci_hcd: connection reset by peer
[  613.546345][   T91] vhci_hcd: stop threads
[  613.547877][   T91] vhci_hcd: release socket
[  613.549610][   T91] vhci_hcd: disconnect device
[  613.908462][T14006] wlan0: Trigger new scan to find an IBSS to join
[  614.261904][T16893] kAFS: unable to lookup cell '(,c��L'
[  615.339239][ T5949] Bluetooth: hci4: command 0x0406 tx timeout
[  615.341605][T16880] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  616.074958][T16914] lo speed is unknown, defaulting to 1000
[  616.077624][T16914] lo speed is unknown, defaulting to 1000
[  617.028743][ T4126] wlan0: Trigger new scan to find an IBSS to join
[  618.103090][   T54] usb 50-1: device descriptor read/8, error -110
[  618.203924][T16939] lo speed is unknown, defaulting to 1000
[  618.206598][T16939] lo speed is unknown, defaulting to 1000
[  618.821850][   T54] usb usb50-port1: attempt power cycle
[  619.203946][T16956] loop6: detected capacity change from 0 to 524287999
[  619.210963][T16956] buffer_io_error: 6546 callbacks suppressed
[  619.211025][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.245115][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.288149][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.292255][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.296178][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.299695][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.310263][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.341119][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.363918][T16956] ldm_validate_partition_table(): Disk read failed.
[  619.418967][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.422316][T16956] Buffer I/O error on dev loop6, logical block 0, async page read
[  619.425225][T16956] Dev loop6: unable to read RDB block 0
[  619.428196][T16956]  loop6: unable to read partition table
[  619.441522][T16415] ldm_validate_partition_table(): Disk read failed.
[  619.442167][   T54] usb usb50-port1: unable to enumerate USB device
[  619.445830][T16956] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  619.449131][T16415] Dev loop6: unable to read RDB block 0
[  619.451117][T16415]  loop6: unable to read partition table
[  619.488609][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3261'.
[  619.495449][T16961] ldm_validate_partition_table(): Disk read failed.
[  619.498639][T16961] Dev loop6: unable to read RDB block 0
[  619.508053][T16961]  loop6: unable to read partition table
[  619.510674][T16961] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  619.519027][T16956] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3261'.
[  619.574204][T16956] batadv2: entered allmulticast mode
[  621.517342][   T40] kauditd_printk_skb: 424 callbacks suppressed
[  621.517359][   T40] audit: type=1326 audit(1764685720.972:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.8.3270" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0
[  621.535850][T16991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3268'.
[  621.642347][T16996] netlink: 'syz.6.3271': attribute type 10 has an invalid length.
[  621.652646][T16997] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11)
[  621.656201][T16997] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  621.659083][T16997] vhci_hcd vhci_hcd.0: Device attached
[  621.808029][T17006] netlink: 'syz.5.3268': attribute type 4 has an invalid length.
[  621.810550][T17006] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3268'.
[  621.816113][T17006] wlan1: mtu less than device minimum
[  621.913604][   T54] usb 53-1: new high-speed USB device number 5 using vhci_hcd
[  622.825850][T16998] vhci_hcd: connection reset by peer
[  622.865773][ T1145] vhci_hcd: stop threads
[  622.867302][ T1145] vhci_hcd: release socket
[  622.903605][ T1145] vhci_hcd: disconnect device
[  623.524927][T17023] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  623.527150][T17023] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  623.529876][T17023] vhci_hcd vhci_hcd.0: Device attached
[  623.988306][ T7708] usb 50-1: SetAddress Request (34) to port 0
[  624.000705][ T7708] usb 50-1: new SuperSpeed USB device number 34 using vhci_hcd
[  624.173689][T17024] vhci_hcd: connection reset by peer
[  624.177363][ T4126] vhci_hcd: stop threads
[  624.180713][ T4126] vhci_hcd: release socket
[  624.182526][ T4126] vhci_hcd: disconnect device
[  624.235558][T17035] lo speed is unknown, defaulting to 1000
[  624.238662][T17035] lo speed is unknown, defaulting to 1000
[  625.044495][T17049] netlink: 134788 bytes leftover after parsing attributes in process `syz.5.3281'.
[  626.425743][T17065] netlink: 'syz.8.3283': attribute type 1 has an invalid length.
[  626.520761][T17071] lo speed is unknown, defaulting to 1000
[  626.524644][T17071] lo speed is unknown, defaulting to 1000
[  626.676621][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  626.723048][T17076] x_tables: duplicate underflow at hook 3
[  627.026374][  T229] wlan0: Trigger new scan to find an IBSS to join
[  627.030526][   T54] vhci_hcd: vhci_device speed not set
[  627.890072][T17096] kvm: requested 16761 ns i8254 timer period limited to 200000 ns
[  627.980006][T17096] kvm: requested 75428 ns i8254 timer period limited to 200000 ns
[  627.988119][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3293'.
[  627.991805][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3293'.
[  628.006203][T17096] kvm: requested 111466 ns i8254 timer period limited to 200000 ns
[  628.011818][T17096] kvm: requested 9219 ns i8254 timer period limited to 200000 ns
[  628.022934][T17109] lo speed is unknown, defaulting to 1000
[  628.025992][T17109] lo speed is unknown, defaulting to 1000
[  628.030013][T17096] kvm: requested 18438 ns i8254 timer period limited to 200000 ns
[  628.040834][T17096] kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[  628.120580][T17096] kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[  628.154748][T17096] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[  628.160324][T17096] kvm: requested 58666 ns i8254 timer period limited to 200000 ns
[  628.167235][T17096] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[  628.422825][T17120] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  628.425209][T17120] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  628.428388][T17120] vhci_hcd vhci_hcd.0: Device attached
[  628.632882][ T1419] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  628.676815][T17123] 9p: Unknown Cache mode or invalid value Smap
[  628.707359][ T6009] usb 54-1: SetAddress Request (34) to port 0
[  628.716488][ T6009] usb 54-1: new SuperSpeed USB device number 34 using vhci_hcd
[  628.911767][T17131] lo speed is unknown, defaulting to 1000
[  628.914772][T17131] lo speed is unknown, defaulting to 1000
[  629.067627][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  629.618861][ T7708] usb 50-1: device descriptor read/8, error -110
[  629.799537][T17121] vhci_hcd: connection reset by peer
[  629.804121][   T12] vhci_hcd: stop threads
[  629.805656][   T12] vhci_hcd: release socket
[  629.811745][   T12] vhci_hcd: disconnect device
[  629.889026][T17144] nvme_fabrics: missing parameter 'transport=%s'
[  629.898074][T17144] nvme_fabrics: missing parameter 'nqn=%s'
[  630.018642][ T7708] usb usb50-port1: attempt power cycle
[  630.423694][T17149] nvme_fabrics: missing parameter 'transport=%s'
[  630.425903][T17149] nvme_fabrics: missing parameter 'nqn=%s'
[  631.085487][ T7708] usb usb50-port1: unable to enumerate USB device
[  631.907329][T17173] ksmbd: Unknown IPC event: 0, ignore.
[  631.985893][T17175] lo speed is unknown, defaulting to 1000
[  631.988484][T17175] lo speed is unknown, defaulting to 1000
[  631.990877][   T13] wlan0: Trigger new scan to find an IBSS to join
[  632.119401][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  632.945305][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  633.105109][T17185] kAFS: No cell specified
[  633.118211][T17185] lo speed is unknown, defaulting to 1000
[  633.121396][T17185] lo speed is unknown, defaulting to 1000
[  633.659230][T17195] netlink: 'syz.5.3310': attribute type 13 has an invalid length.
[  633.753692][ T6009] usb 54-1: device descriptor read/8, error -110
[  633.912932][T17195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  634.171086][ T6009] usb usb54-port1: attempt power cycle
[  634.754989][ T6009] usb usb54-port1: unable to enumerate USB device
[  635.613712][T17222] lo speed is unknown, defaulting to 1000
[  635.616407][T17222] lo speed is unknown, defaulting to 1000
[  635.771617][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  636.171466][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3319'.
[  636.903348][T17250] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  636.905822][T17250] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  636.915084][T17250] vhci_hcd vhci_hcd.0: Device attached
[  637.013133][T17238] ubi31: attaching mtd0
[  637.016083][T17238] ubi31: scanning is finished
[  637.017681][T17238] ubi31: empty MTD device detected
[  637.152614][T17238] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  637.155724][T17238] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  637.158593][T17238] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  637.161380][T17238] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  637.164603][T17238] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  637.167377][T17238] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  637.170670][T17238] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2153422904
[  637.175215][T17238] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  637.179880][T17258] ubi31: background thread "ubi_bgt31d" started, PID 17258
[  637.252394][ T6009] usb 48-1: SetAddress Request (22) to port 0
[  637.261626][ T6009] usb 48-1: new SuperSpeed USB device number 22 using vhci_hcd
[  637.833559][ T1027] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  637.959420][T17251] vhci_hcd: connection reset by peer
[  637.967420][T14006] vhci_hcd: stop threads
[  637.969324][T14006] vhci_hcd: release socket
[  637.972398][T14006] vhci_hcd: disconnect device
[  638.002824][ T1027] usb 11-1: Using ep0 maxpacket: 8
[  638.007003][ T1027] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  638.010441][ T1027] usb 11-1: config 0 has no interfaces?
[  638.012467][ T1027] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  638.015660][ T1027] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.019823][ T1027] usb 11-1: config 0 descriptor??
[  638.307239][ T1027] usb 11-1: USB disconnect, device number 9
[  638.701613][T17273] lo speed is unknown, defaulting to 1000
[  638.707211][T17273] lo speed is unknown, defaulting to 1000
[  638.893450][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  639.283576][   T54] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  640.184316][T17301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  640.314275][   T54] usb 11-1: Using ep0 maxpacket: 8
[  640.336887][   T54] usb 11-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16
[  640.341059][   T54] usb 11-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64
[  640.354222][   T54] usb 11-1: config 1 interface 0 has no altsetting 0
[  640.364395][   T54] usb 11-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  640.367546][   T54] usb 11-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3
[  640.370483][   T54] usb 11-1: Product: syz
[  640.371925][   T54] usb 11-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ﾈ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺
[  640.769114][   T54] usb 11-1: SerialNumber: syz
[  640.862945][T17283] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  640.866043][T17283] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  641.401869][T17283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.405936][T17283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.435231][   T54] usblp0: Disabling reads from problematic bidirectional printer
[  641.450759][   T54] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004
[  641.466959][   T54] usb 11-1: USB disconnect, device number 10
[  641.480867][   T54] usblp0: removed
[  641.642714][T17325] lo speed is unknown, defaulting to 1000
[  641.645579][T17325] lo speed is unknown, defaulting to 1000
[  642.015666][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  642.192059][T14726] libceph: connect (1)[c::]:6789 error -101
[  642.194311][T14726] libceph: mon0 (1)[c::]:6789 connect error
[  642.276095][T17336] ceph: No mds server is up or the cluster is laggy
[  642.325421][ T6009] usb 48-1: device descriptor read/8, error -110
[  642.736032][ T6009] usb usb48-port1: attempt power cycle
[  643.307068][ T6009] usb usb48-port1: unable to enumerate USB device
[  643.311583][ T5949] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  643.384845][T17372] lo speed is unknown, defaulting to 1000
[  643.390545][T17372] lo speed is unknown, defaulting to 1000
[  643.696206][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  644.894622][T17408] lo speed is unknown, defaulting to 1000
[  644.899624][T17408] lo speed is unknown, defaulting to 1000
[  645.069916][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  646.160763][   T40] audit: type=1326 audit(1764685745.597:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17445 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000
[  646.170507][   T40] audit: type=1326 audit(1764685745.597:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17445 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000
[  646.188898][T17448] lo speed is unknown, defaulting to 1000
[  646.191729][T17448] lo speed is unknown, defaulting to 1000
[  646.197752][   T40] audit: type=1326 audit(1764685745.607:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17445 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf701d579 code=0x7ffc0000
[  646.204972][   T40] audit: type=1326 audit(1764685745.607:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17445 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000
[  646.213143][   T40] audit: type=1326 audit(1764685745.607:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17445 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000
[  646.507910][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  647.792157][T17494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  648.959287][   T91] wlan0: Trigger new scan to find an IBSS to join
[  649.185348][T17505] lo speed is unknown, defaulting to 1000
[  649.189736][T17505] lo speed is unknown, defaulting to 1000
[  649.730295][T14726] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  649.923470][  T229] wlan0: Trigger new scan to find an IBSS to join
[  650.098768][T17537] loop6: detected capacity change from 0 to 524287999
[  650.103413][T17537] buffer_io_error: 40 callbacks suppressed
[  650.103501][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.110294][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.115286][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.121130][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.126074][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.135552][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.479248][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3416'.
[  650.483416][T17539] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3416'.
[  650.492759][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.496164][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.499341][T17537] ldm_validate_partition_table(): Disk read failed.
[  650.502045][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.504952][T17537] Buffer I/O error on dev loop6, logical block 0, async page read
[  650.508014][T17537] Dev loop6: unable to read RDB block 0
[  650.512434][T17537]  loop6: unable to read partition table
[  650.516696][T17537] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  650.521804][T16415] ldm_validate_partition_table(): Disk read failed.
[  650.524297][T16415] Dev loop6: unable to read RDB block 0
[  650.526350][T16415]  loop6: unable to read partition table
[  650.533155][ T5354] ldm_validate_partition_table(): Disk read failed.
[  650.537957][ T5354] Dev loop6: unable to read RDB block 0
[  650.539810][T17539] batadv1: entered allmulticast mode
[  650.541034][ T5354]  loop6: unable to read partition table
[  650.548388][T17538] ldm_validate_partition_table(): Disk read failed.
[  650.552419][T17538] Dev loop6: unable to read RDB block 0
[  650.557437][T17538]  loop6: unable to read partition table
[  650.560480][T17538] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  650.588310][ T5354] ldm_validate_partition_table(): Disk read failed.
[  650.590984][ T5354] Dev loop6: unable to read RDB block 0
[  650.593093][ T5354]  loop6: unable to read partition table
[  650.867436][   T40] audit: type=1326 audit(1764685750.304:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  650.881430][   T40] audit: type=1326 audit(1764685750.304:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  650.907940][   T40] audit: type=1326 audit(1764685750.314:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3422" exe="/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf709d579 code=0x7ffc0000
[  650.918440][   T40] audit: type=1326 audit(1764685750.314:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  650.931591][   T40] audit: type=1326 audit(1764685750.314:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  650.953161][T17557] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  650.972415][T17559] lo speed is unknown, defaulting to 1000
[  650.975482][T17559] lo speed is unknown, defaulting to 1000
[  650.985474][T17554] create_pit_timer: 4 callbacks suppressed
[  650.985491][T17554] kvm: requested 16761 ns i8254 timer period limited to 200000 ns
[  651.002854][T17554] kvm: requested 75428 ns i8254 timer period limited to 200000 ns
[  651.012660][T17554] kvm: requested 111466 ns i8254 timer period limited to 200000 ns
[  651.137431][T17554] kvm: requested 9219 ns i8254 timer period limited to 200000 ns
[  651.157691][T17554] kvm: requested 18438 ns i8254 timer period limited to 200000 ns
[  651.166862][T17554] kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[  651.183750][T17554] kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[  651.215617][T17554] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[  651.222878][T17554] kvm: requested 58666 ns i8254 timer period limited to 200000 ns
[  651.229853][T17554] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[  651.817354][T17584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  651.854935][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3437'.
[  651.922807][   T91] wlan0: Trigger new scan to find an IBSS to join
[  652.669191][T17631] loop6: detected capacity change from 0 to 524287999
[  652.675101][T10840] ldm_validate_partition_table(): Disk read failed.
[  652.681091][T10840] Dev loop6: unable to read RDB block 0
[  652.687200][T10840]  loop6: unable to read partition table
[  652.697485][T17631] ldm_validate_partition_table(): Disk read failed.
[  652.724399][T17631] Dev loop6: unable to read RDB block 0
[  652.728874][T17631]  loop6: unable to read partition table
[  652.745711][T17631] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  652.798036][ T5354] ldm_validate_partition_table(): Disk read failed.
[  652.800510][ T5354] Dev loop6: unable to read RDB block 0
[  652.803320][ T5354]  loop6: unable to read partition table
[  652.822836][T17634] ldm_validate_partition_table(): Disk read failed.
[  652.839531][T17634] Dev loop6: unable to read RDB block 0
[  652.856691][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3442'.
[  652.860199][T17631] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3442'.
[  652.869526][T17634]  loop6: unable to read partition table
[  652.872422][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.897154][T17634] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  652.931022][ T5354] ldm_validate_partition_table(): Disk read failed.
[  652.942339][ T5354] Dev loop6: unable to read RDB block 0
[  652.946173][ T5354]  loop6: unable to read partition table
[  652.961769][T14006] wlan0: Trigger new scan to find an IBSS to join
[  652.969185][T17631] batadv2: entered allmulticast mode
[  653.140480][ T5354] ldm_validate_partition_table(): Disk read failed.
[  653.143437][ T5354] Dev loop6: unable to read RDB block 0
[  653.147914][ T5354]  loop6: unable to read partition table
[  653.253641][ T5354] ldm_validate_partition_table(): Disk read failed.
[  653.257007][ T5354] Dev loop6: unable to read RDB block 0
[  653.259925][ T5354]  loop6: unable to read partition table
[  653.588889][ T5354] ldm_validate_partition_table(): Disk read failed.
[  653.591512][ T5354] Dev loop6: unable to read RDB block 0
[  653.594682][ T5354]  loop6: unable to read partition table
[  653.891928][   T40] audit: type=1326 audit(1764685753.322:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.8.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  653.900468][   T40] audit: type=1326 audit(1764685753.332:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.8.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  653.909544][   T40] audit: type=1326 audit(1764685753.332:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.8.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  653.932158][   T40] audit: type=1326 audit(1764685753.332:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.8.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  653.939610][   T40] audit: type=1326 audit(1764685753.342:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.8.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=398 compat=1 ip=0xf709d579 code=0x7ffc0000
[  653.951001][   T40] audit: type=1326 audit(1764685753.342:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.8.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000
[  653.959652][   T40] audit: type=1326 audit(1764685753.342:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.8.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709d579 code=0x7ffc0000
[  653.969897][   T40] audit: type=1326 audit(1764685753.342:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.8.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x7ffc0000
[  654.134422][T17672] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI
[  654.139551][T17672] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  654.143251][T17672] CPU: 3 UID: 0 PID: 17672 Comm: syz.4.3463 Not tainted syzkaller #0 PREEMPT(full) 
[  654.146804][T17672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  654.150785][T17672] RIP: 0010:handshake_complete+0x31/0x390
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  654.153425][T17672] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 d4 fc 6f f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 dc 23 0e 00 48 b8 00
[  654.160953][T17672] RSP: 0018:ffffc9000c1a74e8 EFLAGS: 00010206
[  654.163168][T17672] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9002beca000
[  654.166649][T17672] RDX: 0000000000000005 RSI: ffffffff8b4d245c RDI: 0000000000000028
[  654.170102][T17672] RBP: ffffc9000c1a75b0 R08: 0000000000000000 R09: ffffed100d1cb750
[  654.173571][T17672] R10: ffff888068e5ba83 R11: 000000000000001e R12: 00000000fffffffb
[  654.176806][T17672] R13: 0000000000000000 R14: ffff888050ae4680 R15: ffff8880243b2500
[  654.179405][T17672] FS:  0000000000000000(0000) GS:ffff888097ca8000(0063) knlGS:00000000f540db40
[  654.182320][T17672] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  654.184752][T17672] CR2: 00000000f72c4d88 CR3: 0000000073eeb000 CR4: 0000000000352ef0
[  654.187509][T17672] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  654.190183][T17672] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  654.192911][T17672] Call Trace:
[  654.194116][T17672]  <TASK>
[  654.195174][T17672]  handshake_nl_accept_doit+0x2dc/0x910
[  654.197075][T17672]  genl_family_rcv_msg_doit+0x209/0x2f0
[  654.199354][T17672]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  654.202277][T17672]  ? __dev_queue_xmit+0xaf1/0x4330
[  654.204124][T17672]  ? genl_get_cmd+0x194/0x580
[  654.205815][T17672]  ? bpf_lsm_capable+0x9/0x10
[  654.207559][T17672]  ? security_capable+0x7e/0x260
[  654.209278][T17672]  genl_rcv_msg+0x55c/0x800
[  654.211022][T17672]  ? __pfx_genl_rcv_msg+0x10/0x10
[  654.212915][T17672]  ? __pfx_handshake_nl_accept_doit+0x10/0x10
[  654.215145][T17672]  netlink_rcv_skb+0x158/0x420
[  654.216748][T17672]  ? __pfx_genl_rcv_msg+0x10/0x10
[  654.218818][T17672]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  654.220647][T17672]  ? netlink_deliver_tap+0x1ae/0xd30
[  654.222540][T17672]  genl_rcv+0x28/0x40
[  654.224045][T17672]  netlink_unicast+0x5aa/0x870
[  654.225889][T17672]  ? __pfx_netlink_unicast+0x10/0x10
[  654.228084][T17672]  netlink_sendmsg+0x8c8/0xdd0
[  654.230023][T17672]  ? __pfx_netlink_sendmsg+0x10/0x10
[  654.231825][T17672]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  654.233845][T17672]  ____sys_sendmsg+0xa5d/0xc30
[  654.235449][T17672]  ? __pfx_____sys_sendmsg+0x10/0x10
[  654.237215][T17672]  ? get_compat_msghdr+0x11a/0x170
[  654.238956][T17672]  ? __pfx_futex_wake_mark+0x10/0x10
[  654.240711][T17672]  ___sys_sendmsg+0x134/0x1d0
[  654.242327][T17672]  ? __pfx____sys_sendmsg+0x10/0x10
[  654.244088][T17672]  ? find_held_lock+0x2b/0x80
[  654.245690][T17672]  __sys_sendmsg+0x16d/0x220
[  654.247268][T17672]  ? __pfx___sys_sendmsg+0x10/0x10
[  654.248961][T17672]  ? __ia32_sys_futex_time32+0x1d9/0x460
[  654.250834][T17672]  ? rcu_is_watching+0x12/0xc0
[  654.252441][T17672]  __do_fast_syscall_32+0x7c/0x370
[  654.254140][T17672]  do_fast_syscall_32+0x32/0x80
[  654.255784][T17672]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  654.257873][T17672] RIP: 0023:0xf701d579
[  654.259255][T17672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  654.265623][T17672] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  654.268386][T17672] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  654.271012][T17672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  654.273649][T17672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  654.276280][T17672] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  654.278893][T17672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  654.281452][T17672]  </TASK>
[  654.282605][T17672] Modules linked in:
[  654.284618][T17672] ---[ end trace 0000000000000000 ]---
[  654.288699][T17672] RIP: 0010:handshake_complete+0x31/0x390
[  654.292617][T17672] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 d4 fc 6f f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 dc 23 0e 00 48 b8 00
[  654.300649][T17672] RSP: 0018:ffffc9000c1a74e8 EFLAGS: 00010206
[  654.303377][T17672] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9002beca000
[  654.306528][T17672] RDX: 0000000000000005 RSI: ffffffff8b4d245c RDI: 0000000000000028
[  654.309919][T17672] RBP: ffffc9000c1a75b0 R08: 0000000000000000 R09: ffffed100d1cb750
[  654.313468][T17672] R10: ffff888068e5ba83 R11: 000000000000001e R12: 00000000fffffffb
[  654.322367][T17672] R13: 0000000000000000 R14: ffff888050ae4680 R15: ffff8880243b2500
[  654.325940][T17672] FS:  0000000000000000(0000) GS:ffff888097ca8000(0063) knlGS:00000000f540db40
[  654.329603][T17672] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  654.376881][T17672] CR2: 00000000584094c0 CR3: 0000000073eeb000 CR4: 0000000000352ef0
[  654.380224][T17672] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  654.399226][T17672] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  654.407299][T17672] Kernel panic - not syncing: Fatal exception
[  654.410705][T17672] Kernel Offset: disabled
[  654.412554][T17672] Rebooting in 86400 seconds..