last executing test programs:

2m52.075249651s ago: executing program 3 (id=27):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00')
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)="d2", 0x1}], 0x2)
r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103)

2m51.110707803s ago: executing program 3 (id=33):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0)

2m47.757990402s ago: executing program 3 (id=38):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0)
r2 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1)
r3 = syz_open_dev$audion(&(0x7f0000000180), 0x2, 0x2b0e0b4f3effb1f8)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='mask', 0x0, r3)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002000004000000040000000008001b"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1aa2090, &(0x7f0000000240)={[{@metacopy_on}, {@redirect_dir_follow}, {@verity_require}, {@xino_auto}], [{@flag='async'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_role}, {@appraise}, {@dont_hash}, {@dont_measure}]})

2m47.659780305s ago: executing program 3 (id=40):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x2040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000140)={'hsr0\x00', @random="0100002010ff"})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x28, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xffe8}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000300))

2m47.324144436s ago: executing program 3 (id=43):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xd})
r0 = syz_open_dev$loop(&(0x7f0000000140), 0xf01c, 0x301)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0xfffffff7, [{0x3, 0x4, 0x443}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x3e, 0x61, 0x2e, 0x30, 0x5f]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28)
ioctl$LOOP_CONFIGURE(r0, 0x801070cf, 0x0)

2m46.909184917s ago: executing program 3 (id=46):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0)

2m46.708514856s ago: executing program 32 (id=46):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0)

35.568664796s ago: executing program 4 (id=796):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x174, 0x30, 0x1, 0x0, 0x0, {}, [{0x160, 0x1, [@m_ct={0x44, 0x1c, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x118, 0x19, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="df481a18026d"}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x1c, 0x0, 0x5, 0x79, 0x2b}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0xb2, 0x6, "b2dadc969d1e30b811c76ba17c681e031ff40243a8114ad0eb9972ad6ba605a97c75573041e39be8004e97771f6ac47d3e0d5014cda47a80789268c27d1283b3cfb7601a5ee43a71ebdcfcdbf41338c1674b7d8d52871dd93c9bc3515958f29f0b07c6d9b0b80c85c0f310150ee3e72c568c504709221e3c2874d660abfb127e166326026768d79c482fed668d7a6be657e2adc6a8543a90b1594988f637eb28959efd6e2979625fa1a773afb8b4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_open_dev$tty20(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0)
acct(&(0x7f0000000180)='./file0/file0\x00')
socket$netlink(0x10, 0x3, 0x15)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x5}]}}}]}, 0x3c}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="1f976714746d6f64653d30303030303030493030303030303030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

33.829725233s ago: executing program 4 (id=805):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r0, r0, 0x21) (async)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x9, 0x2003)

33.069230069s ago: executing program 4 (id=810):
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a271930200000003", 0x15}, {&(0x7f0000000600)}, {&(0x7f0000000700)="f8af4e3245", 0x5}], 0x3}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000180))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5)
sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r6, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)

32.077966965s ago: executing program 4 (id=814):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0x0, 0x2}})
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f00000003c0)={0x0, 0x0, 0x800}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000180))
syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x42, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400008d)
syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0)
r7 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7})
chroot(&(0x7f0000000140)='./file0\x00')
mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0)

31.094927264s ago: executing program 4 (id=819):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
rt_sigsuspend(0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x15)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000000, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)

30.087038369s ago: executing program 4 (id=825):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x14, 0xd, 0xa, 0x5}, 0x14}}, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x40}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @exit]}, &(0x7f0000000140)='syzkaller\x00', 0xaa4, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000011c0)={0x4, 0x3, 0x8786, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001240)=[{0x4, 0x4, 0xd}], 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000040)='ext4_unlink_exit\x00', r2, 0x0, 0xd}, 0x18)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f044}) (async)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f044})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001380)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000001480)=0xe4)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x80, 0x33, 0x0, r3}, {0x6, 0x458000, 0xff, 0x1, 0x4, 0x3, 0x7, 0x1}, {0xfffffffffffffffe, 0x4, 0x9, 0x6}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d5, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x8ce0074f2e3adaf2, 0x1, 0x2, 0x0, 0x4, 0x7}}, 0xe4)

14.731072793s ago: executing program 33 (id=825):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x14, 0xd, 0xa, 0x5}, 0x14}}, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x40}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @exit]}, &(0x7f0000000140)='syzkaller\x00', 0xaa4, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000011c0)={0x4, 0x3, 0x8786, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001240)=[{0x4, 0x4, 0xd}], 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000040)='ext4_unlink_exit\x00', r2, 0x0, 0xd}, 0x18)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f044}) (async)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f044})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001380)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000001480)=0xe4)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x80, 0x33, 0x0, r3}, {0x6, 0x458000, 0xff, 0x1, 0x4, 0x3, 0x7, 0x1}, {0xfffffffffffffffe, 0x4, 0x9, 0x6}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d5, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x8ce0074f2e3adaf2, 0x1, 0x2, 0x0, 0x4, 0x7}}, 0xe4)

5.134383829s ago: executing program 1 (id=958):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
mmap(&(0x7f0000622000/0x1000)=nil, 0x1000, 0x8, 0x100010, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='#,d\x00')
setuid(0xee01)
setresgid(0x0, 0xee00, 0x0)
setgroups(0x0, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x31)
openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
statx(r1, &(0x7f0000005b40)='./file0\x00', 0x4000, 0x7ff, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x1}, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="95310000", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf258700000008000300", @ANYRES32=r10, @ANYBLOB="0c009900010000001e000000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20008800)
shmget$private(0x0, 0x7000, 0x4, &(0x7f0000ff8000/0x7000)=nil)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x54, r6, 0x1, 0x0, 0x25dfdbbf, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x2, 0x6ae}}, 0x3b, @val={0x8c, 0xfffffffffffffe17, {0x679, "000100", @long="c4979b7b2bd6e0a3da5cbc5fb5189bb3"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x200c40d0)
getdents64(r1, &(0x7f0000000240)=""/131, 0x83)
r11 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x0, 0x149000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r11)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x13c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb3f}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "40596105d93627a96f053c851d7d33fbd6b988d4d320118a9ec1b3cb4ef923b675f4bb2d2071c71e4d8ee3096320b1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb9f7}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "b1a0e5a63ff2ab2fb4bed6dfb6d4e721cc0e62be6320472adb688d0faa92f373912de5c600bb2fbd77ab6ee6c5cfd01931a265268cf9bd94d813e6dcda1c9406b83c74c317c37a248c34ecc381073a86098bc2890c14b60081ea0e8fd2d10130730cd725cae2e185c819a57125559dcf3a9a25b029c673f346cd80b4d4fd7751392cea3a887b6d09f988a8a6b982117f045ccee0ff39078ac92fed1f3b95a02fcdb9f9d754a977af056af16a6ac3be97db09362a9531016403109c393196995d3a133da20a86b773fb385c6f74a4be3b28d732"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x88d6}, 0x20000040)

4.973554889s ago: executing program 1 (id=959):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3502, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) (async)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
socket$packet(0x11, 0x3, 0x300)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff003f}]})
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f00000000c0)=0x2, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f00000000c0)=0x2, 0x4)
chdir(0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
copy_file_range(r5, &(0x7f00000001c0)=0xffffffffffffff7f, 0xffffffffffffffff, 0x0, 0x81, 0x10000000000000) (async)
copy_file_range(r5, &(0x7f00000001c0)=0xffffffffffffff7f, 0xffffffffffffffff, 0x0, 0x81, 0x10000000000000)
socket$inet6(0xa, 0x1, 0x0) (async)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x1, 0x4, 0x0, 0x1}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x1, 0x4, 0x0, 0x1}, 0x20)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0)
write$vga_arbiter(r7, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) (async)
write$vga_arbiter(r7, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x883, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001300)={0x0, 0x6, 0xbe, 0x1, @buffer={0x0, 0x4a, &(0x7f0000001380)=""/74}, &(0x7f0000000200)="d6124e558d910ca73809501ee48e959983c477757373bd235271af799326320192b9199c86e4f845c1bee659f9c527117e482b6a4f20bafae0cd85dea7da2c5722bc4971ef791d7e4556abc055cd2860d8cf432358a76daca011a18a98943f1c6b750845885ff2d55ebf370aeef59ffc359ae3f4a34cefb110f9083b45698aa19e4340fc8644d10c11cedfc02232d3ef046754a3e3d637a9e4562f65442c09f993ac7794bcabaa1818cfc9eeb6f75218d88a7c1bbab6cb49953d1698370b", &(0x7f0000000300)=""/4096, 0x3, 0x10000, 0x6, &(0x7f0000001340)})

4.673588134s ago: executing program 1 (id=960):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
openat2$dir(0xffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
syz_init_net_socket$ax25(0x3, 0x7, 0xcc)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0xf)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x2000000000000006, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4ad24bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}})
ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000280))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="93", 0x1}], 0x1}}], 0x2, 0x1404c894)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0xc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"})

4.461689691s ago: executing program 0 (id=962):
clock_settime(0xfffffffb, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448c9, 0x0)

3.573213301s ago: executing program 0 (id=968):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x4, <r1=>r0, 'id1\x00'})
mq_notify(r1, &(0x7f00000001c0)={0x0, 0x23, 0x2, @thr={&(0x7f00000000c0)="6732e450684b339644de44a3c175ca894790e65ab9cd6f", &(0x7f0000000100)="e6129cddf85e39a27f8deddca27f986f900c25b28f24339ed1ceb090bcb53bc4e3bfb8356504b489f29e781ab988c2bd4264482f4eaa3d64a247e3568b43ba6619da212056faa7a4bf6a7b73ad2fbe5fa081c7fecf81559f190c4aa2c768961b"}})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@typed={0x4, 0xf, 0x0, 0x0, @binary}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

3.570451519s ago: executing program 0 (id=969):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0xa, 0x2, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x8000, 0x1, 0x0, 0x8}}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000140)})
munlock(&(0x7f00002de000/0x8000)=nil, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async)
r1 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
syz_usbip_server_init(0x6) (async)
socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) (async)
getpid() (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) (async)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r5, &(0x7f0000006f80)={0x23, 0x0, 0x8}, 0x10) (async)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000001400110076657468305f6d6163767461700000009b0bc89274c0b206ee2370d3366f6dbd1721e2a28b4ef7f14306fd7930691580142b18edbe3f6f78c85c027362fc7cf5d8861fed860539bc5baaac1c0b3daa152f3891f190cd7695c9201ce7cc8be77e555879a6c694aba6050fd166928e93bba39b432552922651ba66d0d8614b44dd165dab3f02718fe5e5"], 0x30}}, 0x48850)

2.983549161s ago: executing program 1 (id=970):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfffffffffffffceb, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x9, 0x0, &(0x7f00000006c0)="ccf95f497eb30b9d5b", 0x0}, 0x50)
r1 = openat$null(0xffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
getgroups(0x2, &(0x7f0000000240)=[0x0, <r2=>0xffffffffffffffff])
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x0, 0xb5}, 0x48)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10040, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize}, {@cache_loose}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@seclabel}]}})

2.983225605s ago: executing program 1 (id=971):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@ptr={0xa, 0x0, 0x0, 0x2, 0x5}, @const={0x5, 0x0, 0x0, 0xa, 0x3}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @const={0x10, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x5f, 0x0, 0x5f, 0x30]}}, &(0x7f0000000240)=""/214, 0x4e, 0xd6, 0x1, 0x100, 0x10000}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6e8d, 0x2, 0x9, 0x40005, r1, 0x10000, '\x00', r2, r3, 0x1, 0x5, 0x2, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4}, 0x38)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000100)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_retopts={{0x10}}], 0x10}, 0x40010)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xd1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

2.872602544s ago: executing program 1 (id=972):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r1, @ANYBLOB="010025bd2d3eab6cc96b92d0000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4854)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1bc, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_FRAME_MATCH={0x101, 0x5b, "6a74b9877982c37e81842cefa6f8352e99094b8d8895025f5e819198fcd1034f1316d3d4974b9e8ee978dc92c18b4728797394e4c814e3501215ebcf780acc5ac578eb218224bb56713d10a9612f17d3bf7e55a300b5f18ed833d2a0d47e84ab6365b5008c5736bc336bc2ac1193d1d3e9709e73a397bdba6890d0b5830bba536087d5b935dc694a5bdd5007c9d32f2e469fd08b20b1e3ab7e254d42d0f4dd279adc670c4d8c5dec40692d2a9a3abcb4c03e6f296e486f14286d4827111f1b1277dfe5c3596d7eea4d0afdb2c085d1ae4d86a45efcf645b9c5642b7e769ff9f881e6904a1658fa105ee58c6787f25030418c2d2518cb2576ec505e9b78"}, @NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "3e66b2ea316cc39c7ec770edd35a0877219b360ad8f185e617ae7f226ad2af98575ab78462340e5492044a3f8d9b9a3c4b889fb3b0b93c62b058727041d7fadd5087314bc9bde9fb1e88d295b3a0b422e255dcb0e3e2e3404f8d51487a6de3a8071eb3bcda38cb3ba3e3e600d57aaba2b6d257c990ba47d28a0f1ed167954a67d82bbdcab30127cdf0c2"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x30000011}, 0x20000005)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
fsopen(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
symlink(0x0, 0x0) (async)
symlink(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1)
r9 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, 0x0)
r10 = socket(0xa, 0x801, 0x0)
getsockopt(r10, 0x0, 0x50, 0x0, &(0x7f0000001ffc))

2.131960614s ago: executing program 0 (id=976):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x1)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
io_setup(0x222, &(0x7f0000000180))
syz_80211_join_ibss(&(0x7f0000000300)='wlan0\x00', &(0x7f0000000340)=@random="941bc472910b234667220d62fbf34f4c54121ab5", 0x14, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="00d04a4c5d79580b69dc9d4ac8", @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000)
r5 = dup2(r4, r4)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x10000})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r5, &(0x7f0000004d80)={0x2020}, 0x2020)
write$vhost_msg_v2(r5, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xfd86, 0x0, 0x0, 0x2}}, 0x48)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4)

1.868962277s ago: executing program 5 (id=977):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000bb76921b00000000030000008500000027000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080))
r1 = socket(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x44}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x4, 0xffffdff8, 0xbf, 0x8, 0x1a0055ee, 0x401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x5, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x6, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x40007, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x8, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x80, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0xf33, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x3ff, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x6, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x1be3}}]}}]}, 0x45c}}, 0x8840)

1.841187594s ago: executing program 2 (id=978):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
r5 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x40a0, 0x4)
write$binfmt_script(r5, &(0x7f00000000c0), 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

1.731637845s ago: executing program 5 (id=979):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') (async)
capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340))
fchown(r0, 0x0, 0xee01) (async)
openat$nullb(0xffffff9c, &(0x7f0000000040), 0x4440, 0x0)

1.671459835s ago: executing program 5 (id=980):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
splice(r0, 0x0, r2, 0x0, 0x6, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x6, 0x7)
close(0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@ipv6_delroute={0x38, 0x19, 0x1, 0x800, 0x25dfdbfd, {0xa, 0x0, 0x1c, 0x0, 0xff, 0x1, 0x0, 0xb, 0x2a00}, [@RTA_OIF={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000001}, 0x20000800)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)

1.500868457s ago: executing program 2 (id=981):
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x3)
fcntl$setsig(r1, 0xa, 0x11)
fcntl$setlease(r1, 0x400, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030b00000000000400000000000100090000000000030006006c000000020000000000000000000000000000000200010000000000000206fd00000000030005000000000002"], 0x58}, 0x1, 0x7}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = getpid()
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', <r5=>0x0, 0x1, 0x700, 0x1c, 0xc, {{0x2f, 0x4, 0x3, 0x36, 0xbc, 0x66, 0x0, 0x9, 0x29, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x2f, 0x2, [{0x6, 0x2}, {0x5, 0x4, "9e4b"}, {0x5, 0x11, "06155756a3dc3d27a8343348b1a6be"}, {0x0, 0x12, "913ff3d56f59c1c2e99a9c98aa24592e"}]}, @lsrr={0x83, 0x17, 0x98, [@rand_addr=0x64010101, @broadcast, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x23, 0xb2, [@dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, @empty, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, @remote, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xc1, 0x1, 0x4, [{@local, 0x2}]}, @generic={0x94, 0xa, "76130ff1a0e816f4"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x53, 0x1, 0x2, [{@empty, 0x8}, {@multicast2, 0x7}, {@remote, 0xffffffff}, {@multicast1, 0x8d}]}]}}}}})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002040), 0x8, &(0x7f00000021c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/timers\x00', 0x0, 0x0)
read$hiddev(r7, &(0x7f0000000000)=""/4118, 0x1016)
read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, 0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(r7, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff8, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x127, 0x3, 0xa000, 0x0, r8, r9, 0xdbc, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=@getae={0x348, 0x1f, 0x100, 0x70bd28, 0x25dfdbfd, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x2, 0x6c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x34ff}, [@user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in6=@loopback, 0x0, 0xa}}, @address_filter={0x28, 0x1a, {@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0xc, 0x8}}, @lifetime_val={0x24, 0x9, {0x8, 0x1000, 0xfffffffffffffffa, 0x4}}, @sa={0xe0, 0x6, {{@in=@broadcast, @in6=@private1, 0x4e22, 0x7f, 0x4e21, 0x1, 0xa, 0x20, 0x80, 0x2e, r5, r8}, {@in=@multicast1, 0x4d2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x17}, {0x100000001, 0xfffffffffffffffe, 0x7, 0xc1, 0x6713, 0xffffffffffffffff, 0x8, 0x2}, {0x1, 0xaad, 0x0, 0x9}, {0x8, 0x6, 0x5}, 0x70bd29, 0x34ff, 0x2, 0x4, 0x40, 0x81}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd2d, 0x70bd28, 0x70bd28, 0x1ff, [0x7]}}, @etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @migrate={0x180, 0x11, [{@in6=@private2, @in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x33, 0x0, 0x0, 0x3501, 0x2, 0xa}, {@in=@multicast2, @in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, 0x0, 0x2, 0x0, 0x3507, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010101, @in6=@mcast1, 0x6c, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00', @in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x2b, 0x0, 0x0, 0x3501, 0xa, 0x2}, {@in6=@private2, @in=@rand_addr=0x64010101, @in=@private=0xa010102, @in=@remote, 0x33, 0x4, 0x0, 0x0, 0x2, 0xa}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x40}, 0x4044800)
fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4})
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r10=>0x0)
fcntl$setown(r1, 0x8, r10)
truncate(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.429230683s ago: executing program 5 (id=982):
r0 = io_uring_setup(0x1b56, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0)
io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x10, 0x100000, 0x371})
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xab59b9cb5cf3b703)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x637}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xd)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRESDEC=r1])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f0000000800)={0x20000000, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f00000005c0), {0x32}, &(0x7f0000000600)=""/245, 0xf5, &(0x7f0000000400)=""/54, &(0x7f0000000780)=[r2, r2, r2, 0x0, r2, r2, r2], 0x7}, 0x58)
fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000440)=""/155, 0xffffffffffffffd4)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
preadv2(r8, &(0x7f0000000040)=[{0x0}], 0x1, 0x80000, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
socket$alg(0x26, 0x5, 0x0)

1.270641198s ago: executing program 2 (id=983):
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000240)=0x14b)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000003c0)=0x2, 0x12)
timerfd_create(0x8, 0x0)
clock_adjtime(0x4, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_settings={0xb592, 0x6, @cisco=0x0}})
ioctl$sock_proto_private(r4, 0x8b24, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x6904533004bc4e5d, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = syz_io_uring_setup(0x892, &(0x7f0000000440)={0x0, 0x304e, 0x40, 0x2, 0x28d, 0x0, r3}, &(0x7f0000000400)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=<r9=>0x0)
getpriority(0x0, r9)
r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000080)={0x79f4, 0x8ba, 0x2, {0x6, @pix_mp={0x6, 0x0, 0x33424752, 0x6, 0x7, [{0x3, 0x8001}, {0x10000, 0x6}, {0x2, 0x7}, {0x2, 0x200}, {0x9, 0xfffffff7}, {0xe, 0x3}, {0x0, 0x5}, {0x0, 0x8001}], 0x7, 0x10, 0x8, 0x1, 0x1}}, 0x40004})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x108, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00'})
io_uring_enter(r6, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)

1.19086798s ago: executing program 2 (id=984):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x8, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x13, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 32)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32)
mount$9p_virtio(&(0x7f0000000000), 0x0, 0x0, 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB]) (rerun: 32)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') (async)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x408) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64)
chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 64)
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x0) (async)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0)

977.62575ms ago: executing program 0 (id=985):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
io_uring_setup(0x734c, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x0, 0xfff3fffc})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480), 0x281042, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16])
chdir(&(0x7f0000000080)='./file0\x00')

975.023693ms ago: executing program 2 (id=986):
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x280800) (async)
r0 = socket(0x2b, 0x2, 0x2) (async, rerun: 32)
futex_waitv(&(0x7f0000000bc0)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000f40), 0x7f00) (rerun: 32)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

920.478192ms ago: executing program 2 (id=987):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
close_range(r2, 0xffffffffffffffff, 0x0)

528.42268ms ago: executing program 5 (id=988):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000040)='fuse\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x80002, 0x0)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x802, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x1ec)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
socket$kcm(0x10, 0x2, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48881)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)

470.529673ms ago: executing program 5 (id=989):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0)
sendfile64(r0, r1, &(0x7f0000000140)=0x100000001, 0x3) (async)
migrate_pages(0x0, 0x14d2e859, 0x0, &(0x7f0000000280)=0xffffffffffffefff)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x4, <r2=>0xffffffffffffffff, 'id1\x00'})
io_uring_setup(0x1709, &(0x7f0000000080)={0x0, 0xf41d, 0x8, 0x0, 0x1da, 0x0, r2})

0s ago: executing program 0 (id=990):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x7}, 0x4c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
socket(0xa, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20)
r5 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5)
fallocate(r5, 0x3, 0x0, 0x200000)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000014c0)=""/115, 0x73}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400000083afd5a770f1c0a9f196e22be8d4680c8a8736f42f9fe88213a864ea569a36778c24816f7e5bb61ef7870ef9ef2a00803f798308bf1e6b0340c85c68"], 0x60}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffff581000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180c9fe0140ffffffff050007008400000006000400000000000c00028008000140ac1414aaba5414ab6af4ed6be2595842bd91fac19761da1dcabecbddc8f54d32bf2e95751bd8300cd52a7d076d9be17819a9d5f94da3d9fdab4b41329a5b1ac6ec13fc417448000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
close_range(r3, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 dequeue, screwing up backlog
[  149.317290][   T40] audit: type=1326 audit(1766079449.147:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.0.470" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x0
[  149.327646][ T8107] lo speed is unknown, defaulting to 1000
[  149.331576][ T8107] wlan0 speed is unknown, defaulting to 1000
[  149.504463][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.507313][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.824535][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.355637][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'.
[  150.411408][ T8144] veth1_to_batadv: entered promiscuous mode
[  150.411731][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.478'.
[  150.414256][ T8144] macsec1: entered promiscuous mode
[  150.673634][ T8155] syzkaller0: entered promiscuous mode
[  150.675967][ T8155] syzkaller0: entered allmulticast mode
[  150.692088][ T8155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.066197][ T8169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  151.068825][ T8169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  151.103784][ T8169] vhci_hcd vhci_hcd.0: Device attached
[  151.414344][ T6138] usb 46-1: SetAddress Request (10) to port 0
[  151.416272][ T6138] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd
[  151.423423][ T8180] comedi comedi0: Minor 3 could not be opened
[  151.430129][ T8180] trusted_key: encrypted_key: insufficient parameters specified
[  151.676735][ T8170] vhci_hcd: connection reset by peer
[  151.681169][   T12] vhci_hcd vhci_hcd.4: stop threads
[  151.683430][   T12] vhci_hcd vhci_hcd.4: release socket
[  151.686246][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  151.956094][ T8201] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  151.958296][ T8201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  151.961166][ T8201] vhci_hcd vhci_hcd.0: Device attached
[  152.029687][ T8204] fuse: Bad value for 'fd'
[  152.246548][ T7027] usb 38-1: SetAddress Request (18) to port 0
[  152.248869][ T7027] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd
[  152.555616][ T5950] Bluetooth: hci2: ACL packet too small
[  152.558050][ T6452] net_ratelimit: 10 callbacks suppressed
[  152.558061][ T6452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.563051][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.594247][ T8202] vhci_hcd: connection reset by peer
[  152.596405][ T6202] vhci_hcd vhci_hcd.0: stop threads
[  152.598500][ T6202] vhci_hcd vhci_hcd.0: release socket
[  152.602037][ T6202] vhci_hcd vhci_hcd.0: disconnect device
[  152.628547][ T8224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'.
[  152.824503][ T6452] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  152.984540][ T6452] usb 6-1: Using ep0 maxpacket: 8
[  152.987369][ T6452] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  152.991183][ T6452] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  152.994447][ T6452] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  152.997484][ T6452] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  153.001504][ T6452] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  153.004462][ T6452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.025882][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.114575][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.216711][ T6452] usb 6-1: GET_CAPABILITIES returned 0
[  153.219819][ T6452] usbtmc 6-1:16.0: can't read capabilities
[  153.422548][ T6452] usb 6-1: USB disconnect, device number 11
[  153.484317][ T6027] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  153.664224][ T6027] usb 5-1: Using ep0 maxpacket: 16
[  153.667280][ T6027] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  153.671306][ T6027] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  153.674224][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.681699][ T6027] usb 5-1: config 0 descriptor??
[  153.686647][ T6027] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  154.064527][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.156018][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.241525][ T8245] random: crng reseeded on system resumption
[  154.323069][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'.
[  154.704655][ T1246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.707379][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.001487][  T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.107733][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.384596][ T8266] Invalid logical block size (74)
[  156.224905][ T6020] usb 5-1: USB disconnect, device number 12
[  156.474379][ T6138] usb 46-1: device descriptor read/8, error -110
[  156.696327][ T8321] program syz.2.521 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.744647][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  156.749548][ T1112] ata1.00: irq_stat 0x40000000
[  156.754033][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT
[  156.766715][ T8324] lo speed is unknown, defaulting to 1000
[  156.769477][ T8324] wlan0 speed is unknown, defaulting to 1000
[  156.864222][ T1112] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 23
[  156.864222][ T1112]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  156.869270][ T1112] ata1.00: status: { DRDY ERR }
[  156.871044][ T1112] ata1.00: error: { ABRT }
[  156.872582][ T1112] ata1.00: device reported invalid CHS sector 0
[  156.898520][ T6138] usb usb46-port1: attempt power cycle
[  156.916556][ T8288] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  156.918583][ T8288] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  156.937130][ T8288] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  156.939089][ T8288] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  156.948415][ T8288] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  156.950347][ T8288] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  156.982302][ T5989] wlan0 speed is unknown, defaulting to 1000
[  156.985808][ T5989] syz
: Port: 1 Link DOWN
[  157.300594][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'.
[  157.344398][ T7027] usb 38-1: device descriptor read/8, error -110
[  157.465138][ T6138] usb usb46-port1: unable to enumerate USB device
[  157.500748][ T8358] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.503889][ T8358] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.521428][    C3] ata1: illegal qc_active transition (00000000->80000000)
[  157.567842][ T8358] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.568066][ T8363] netlink: 188 bytes leftover after parsing attributes in process `syz.4.531'.
[  157.570875][ T8358] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.578409][ T8364] netlink: 188 bytes leftover after parsing attributes in process `syz.4.531'.
[  157.628297][ T8358] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.634276][ T8358] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.652854][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'.
[  157.666883][  T828] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  157.711419][ T8377] lo speed is unknown, defaulting to 1000
[  157.713993][ T8377] wlan0 speed is unknown, defaulting to 1000
[  157.735955][ T7027] usb usb38-port1: attempt power cycle
[  157.744625][   T53] net_ratelimit: 9 callbacks suppressed
[  157.744637][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.749164][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.762447][ T8358] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.767998][ T8358] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.778894][ T8380] lo speed is unknown, defaulting to 1000
[  157.781395][ T8380] wlan0 speed is unknown, defaulting to 1000
[  157.833084][ T8388] 9pnet_virtio: no channels available for device syz
[  157.834292][  T828] usb 5-1: Using ep0 maxpacket: 16
[  157.842076][  T828] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  157.853650][ T1112] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  157.858086][ T1112] ata1.00: configured for UDMA/100
[  157.861489][  T828] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  157.869019][  T828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.876077][  T828] usb 5-1: config 0 descriptor??
[  157.883120][  T828] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  157.940979][ T1246] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.943890][ T1246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.958900][ T1246] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.961692][ T1246] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.970132][ T1246] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.972762][ T1246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.992227][ T1246] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.994865][ T1246] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.064414][  T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.138492][ T8395] netlink: 'syz.2.538': attribute type 15 has an invalid length.
[  158.141138][ T8395] netlink: 666 bytes leftover after parsing attributes in process `syz.2.538'.
[  158.194355][    T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  158.234609][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.304436][ T7062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.307644][ T7027] usb usb38-port1: unable to enumerate USB device
[  158.348212][    T9] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  158.351166][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.353933][    T9] usb 9-1: Product: syz
[  158.355494][    T9] usb 9-1: Manufacturer: syz
[  158.357034][    T9] usb 9-1: SerialNumber: syz
[  158.438172][ T8399] random: crng reseeded on system resumption
[  158.566304][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.570186][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.650524][    T9] rtl8150 9-1:1.0: couldn't reset the device
[  158.652671][    T9] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5
[  158.659169][    T9] usb 9-1: USB disconnect, device number 16
[  158.758026][ T8401] loop2: detected capacity change from 0 to 7
[  158.762907][    C3] blk_print_req_error: 5 callbacks suppressed
[  158.762918][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.768063][    C3] buffer_io_error: 5 callbacks suppressed
[  158.768073][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.772574][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.775736][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.779105][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.782475][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.785921][    C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.790239][    C2] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.793315][    C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.797099][    C2] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.800414][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.803551][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.806462][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.809588][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.812297][ T6038] ldm_validate_partition_table(): Disk read failed.
[  158.812463][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.818619][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.822098][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.825623][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.828332][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  158.831470][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  158.834890][ T6038] Dev loop2: unable to read RDB block 0
[  158.837786][ T6038]  loop2: unable to read partition table
[  158.839675][ T6038] loop2: partition table beyond EOD, truncated
[  158.845613][ T8401] ldm_validate_partition_table(): Disk read failed.
[  158.848154][ T8401] Dev loop2: unable to read RDB block 0
[  158.850348][ T8401]  loop2: unable to read partition table
[  158.852207][ T8401] loop2: partition table beyond EOD, truncated
[  158.854333][ T8401] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  158.917332][ T8407] netlink: 'syz.1.541': attribute type 10 has an invalid length.
[  158.919893][ T8407] netlink: 55 bytes leftover after parsing attributes in process `syz.1.541'.
[  158.951947][ T8409] support for cryptoloop has been removed.  Use dm-crypt instead.
[  159.031987][ T8417] hsr0: entered promiscuous mode
[  159.035593][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'.
[  159.038952][ T8417] hsr_slave_0: left promiscuous mode
[  159.041497][ T8417] hsr_slave_1: left promiscuous mode
[  159.053944][ T8417] hsr0 (unregistering): left promiscuous mode
[  159.106300][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'.
[  159.140252][ T8421] netlink: 'syz.1.546': attribute type 2 has an invalid length.
[  159.143003][ T8421] netlink: 'syz.1.546': attribute type 1 has an invalid length.
[  159.264384][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.354684][ T6138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.315654][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.394440][ T6138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.415612][   T29] usb 5-1: USB disconnect, device number 13
[  160.475651][ T6202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.505900][ T8440] netlink: 'syz.0.553': attribute type 1 has an invalid length.
[  160.652723][ T8444] input: syz0 as /devices/virtual/input/input15
[  160.679530][ T8444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.682722][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.687477][ T8444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.690662][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.874289][  T828] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  161.972146][ T8470] sp0: Synchronizing with TNC
[  161.976352][ T8469] [U] è
[  162.034315][  T828] usb 6-1: Using ep0 maxpacket: 16
[  162.037945][  T828] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  162.043049][  T828] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  162.046969][  T828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.052676][  T828] usb 6-1: config 0 descriptor??
[  162.058288][  T828] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  162.473018][ T8481] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.558666][ T8481] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.627948][ T8481] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.637985][ T8488] random: crng reseeded on system resumption
[  162.698787][ T8481] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.772136][ T1246] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.780008][ T1246] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.791727][ T1246] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.798405][ T1246] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.230291][ T8507] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿtmpfs'
[  163.243357][ T8506] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  163.274429][ T7027] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  163.424364][ T5989] net_ratelimit: 9 callbacks suppressed
[  163.424379][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.436918][ T7027] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  163.439470][ T7027] usb 5-1: config 1 has no interface number 0
[  163.441803][ T7027] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16
[  163.445795][ T7027] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 16
[  163.449160][ T7027] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  163.496013][ T7027] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  163.499053][ T7027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.502290][ T7027] usb 5-1: Product: syz
[  163.504033][ T7027] usb 5-1: Manufacturer: syz
[  163.504572][ T6138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.507168][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.512049][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.524311][ T7027] usb 5-1: SerialNumber: syz
[  163.527837][ T8499] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  163.530394][ T8499] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  163.534796][ T7027] usb 5-1: Expected 3 endpoints, found: 2
[  164.144606][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.150066][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.153815][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.466147][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.545032][ T7062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.696047][    T9] usb 6-1: USB disconnect, device number 12
[  165.567815][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.594530][ T6138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.724055][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'.
[  165.971443][ T8538] comedi comedi1: rti802: I/O port conflict (0x1,4)
[  166.120578][ T6138] usb 5-1: USB disconnect, device number 14
[  166.184682][ T8541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.366662][ T8541] netlink: 6 bytes leftover after parsing attributes in process `syz.0.583'.
[  166.664602][ T5989] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  166.824502][ T5989] usb 5-1: Using ep0 maxpacket: 16
[  166.846052][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.850854][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  166.856827][ T5989] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  166.860832][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.908038][ T5989] usb 5-1: config 0 descriptor??
[  166.965820][ T5989] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  167.477268][ T8578] random: crng reseeded on system resumption
[  167.942078][ T8593] netlink: 'syz.4.595': attribute type 27 has an invalid length.
[  168.000239][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.003255][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.118631][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.130789][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.188231][ T8593] batadv1: left promiscuous mode
[  168.192137][  T249] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.196395][  T249] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.199856][  T249] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.202694][  T249] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.378110][ T8596] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4Ï€!F€õïVl‘uc'f`å”Þ†’;�œ1µ
[  168.582876][ T8609] netlink: 'syz.1.597': attribute type 1 has an invalid length.
[  168.610914][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.711907][ T5989] net_ratelimit: 10 callbacks suppressed
[  168.711923][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.265847][ T7027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.268797][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.423708][ T5989] usb 5-1: USB disconnect, device number 15
[  169.466827][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.604'.
[  169.478920][ T8651] netlink: 'syz.2.604': attribute type 10 has an invalid length.
[  169.492306][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.498369][ T8651] team0: Port device bond0 added
[  169.512583][ T8648] netlink: 2180 bytes leftover after parsing attributes in process `syz.2.604'.
[  169.559970][ T8658] comedi: valid board names for 8255 driver are:
[  169.562057][ T8658]  8255
[  169.562958][ T8658] comedi: valid board names for vmk80xx driver are:
[  169.565094][ T8658]  vmk80xx
[  169.566097][ T8658] comedi: valid board names for usbduxsigma driver are:
[  169.568225][ T8658]  usbduxsigma
[  169.569363][ T8658] comedi: valid board names for usbduxfast driver are:
[  169.571507][ T8658]  usbduxfast
[  169.572567][ T8658] comedi: valid board names for usbdux driver are:
[  169.574639][ T8658]  usbdux
[  169.575569][ T8658] comedi: valid board names for ni6501 driver are:
[  169.577585][ T8658]  ni6501
[  169.578555][ T8658] comedi: valid board names for dt9812 driver are:
[  169.580602][ T8658]  dt9812
[  169.581575][ T8658] comedi: valid board names for ni_labpc_cs driver are:
[  169.583822][ T8658]  ni_labpc_cs
[  169.588052][ T8658] comedi: valid board names for ni_daq_700 driver are:
[  169.590325][ T8658]  ni_daq_700
[  169.591434][ T8658] comedi: valid board names for labpc_pci driver are:
[  169.593599][ T8658]  labpc_pci
[  169.594986][ T8658] comedi: valid board names for adl_pci9118 driver are:
[  169.597184][ T8658]  pci9118dg
[  169.598255][ T8658]  pci9118hg
[  169.599336][ T8658]  pci9118hr
[  169.600486][ T8658] comedi: valid board names for 8255_pci driver are:
[  169.602663][ T8658]  8255_pci
[  169.603732][ T8658] comedi: valid board names for s526 driver are:
[  169.605810][ T8658]  s526
[  169.606727][ T8658] comedi: valid board names for multiq3 driver are:
[  169.608814][ T8658]  multiq3
[  169.609867][ T8658] comedi: valid board names for pcmuio driver are:
[  169.612535][ T8658]  pcmuio48
[  169.613656][ T8658]  pcmuio96
[  169.614792][ T8658] comedi: valid board names for pcmmio driver are:
[  169.616915][ T8658]  pcmmio
[  169.617906][ T8658] comedi: valid board names for pcmda12 driver are:
[  169.620021][ T8658]  pcmda12
[  169.621112][ T8658] comedi: valid board names for pcmad driver are:
[  169.623243][ T8658]  pcmad12
[  169.624419][ T8658]  pcmad16
[  169.625511][ T8658] comedi: valid board names for ni_labpc driver are:
[  169.627632][ T8658]  lab-pc-1200
[  169.628744][ T8658]  lab-pc-1200ai
[  169.629955][ T8658]  lab-pc+
[  169.630968][ T8658] comedi: valid board names for atmio16 driver are:
[  169.633113][ T8658]  atmio16
[  169.634159][ T8658]  atmio16d
[  169.635282][ T8658] comedi: valid board names for ni_at_ao driver are:
[  169.637404][ T8658]  at-ao-6
[  169.638445][ T8658]  at-ao-10
[  169.639519][ T8658] comedi: valid board names for ni_at_a2150 driver are:
[  169.641755][ T8658]  ni_at_a2150
[  169.642885][ T8658] comedi: valid board names for adq12b driver are:
[  169.645056][ T8658]  adq12b
[  169.646067][ T8658] comedi: valid board names for mpc624 driver are:
[  169.648168][ T8658]  mpc624
[  169.649207][ T8658] comedi: valid board names for c6xdigio driver are:
[  169.651377][ T8658]  c6xdigio
[  169.652413][ T8658] comedi: valid board names for aio_iiro_16 driver are:
[  169.654667][ T8658]  aio_iiro_16
[  169.655778][ T8658] comedi: valid board names for aio_aio12_8 driver are:
[  169.657968][ T8658]  aio_aio12_8
[  169.659109][ T8658]  aio_ai12_8
[  169.660204][ T8658]  aio_ao12_4
[  169.661314][ T8658] comedi: valid board names for fl512 driver are:
[  169.663470][ T8658]  fl512
[  169.664494][ T8658] comedi: valid board names for dmm32at driver are:
[  169.666612][ T8658]  dmm32at
[  169.667627][ T8658] comedi: valid board names for dt282x driver are:
[  169.669713][ T8658]  dt2821
[  169.670681][ T8658]  dt2821-f
[  169.671727][ T8658]  dt2821-g
[  169.672760][ T8658]  dt2823
[  169.673760][ T8658]  dt2824-pgh
[  169.674909][ T8658]  dt2824-pgl
[  169.676082][ T8658]  dt2825
[  169.677070][ T8658]  dt2827
[  169.678053][ T8658]  dt2828
[  169.679065][ T8658]  dt2829
[  169.680040][ T8658]  dt21-ez
[  169.681090][ T8658]  dt23-ez
[  169.682139][ T8658]  dt24-ez
[  169.683157][ T8658]  dt24-ez-pgl
[  169.684369][ T8658] comedi: valid board names for dt2817 driver are:
[  169.686435][ T8658]  dt2817
[  169.687403][ T8658] comedi: valid board names for dt2815 driver are:
[  169.689588][ T8658]  dt2815
[  169.690626][ T8658] comedi: valid board names for dt2814 driver are:
[  169.692748][ T8658]  dt2814
[  169.693765][ T8658] comedi: valid board names for dt2811 driver are:
[  169.695946][ T8658]  dt2811-pgh
[  169.697041][ T8658]  dt2811-pgl
[  169.698148][ T8658] comedi: valid board names for dt2801 driver are:
[  169.700238][ T8658]  dt2801
[  169.701224][ T8658] comedi: valid board names for das6402 driver are:
[  169.703349][ T8658]  das6402-12
[  169.704513][ T8658]  das6402-16
[  169.705613][ T8658] comedi: valid board names for das1800 driver are:
[  169.707740][ T8658]  das-1701st
[  169.708886][ T8658]  das-1701st-da
[  169.710148][ T8658]  das-1702st
[  169.711255][ T8658]  das-1702st-da
[  169.712427][ T8658]  das-1702hr
[  169.713515][ T8658]  das-1702hr-da
[  169.714747][ T8658]  das-1701ao
[  169.715841][ T8658]  das-1702ao
[  169.716927][ T8658]  das-1801st
[  169.718022][ T8658]  das-1801st-da
[  169.719193][ T8658]  das-1802st
[  169.720308][ T8658]  das-1802st-da
[  169.721515][ T8658]  das-1802hr
[  169.722618][ T8658]  das-1802hr-da
[  169.723818][ T8658]  das-1801hc
[  169.724990][ T8658]  das-1802hc
[  169.726120][ T8658]  das-1801ao
[  169.727208][ T8658]  das-1802ao
[  169.728300][ T8658] comedi: valid board names for das800 driver are:
[  169.730413][ T8658]  das-800
[  169.731448][ T8658]  cio-das800
[  169.732540][ T8658]  das-801
[  169.733554][ T8658]  cio-das801
[  169.734791][ T8658]  das-802
[  169.735813][ T8658]  cio-das802
[  169.736906][ T8658]  cio-das802/16
[  169.738093][ T8658] comedi: valid board names for isa-das08 driver are:
[  169.740273][ T8658]  isa-das08
[  169.741390][ T8658]  das08-pgm
[  169.742503][ T8658]  das08-pgh
[  169.743571][ T8658]  das08-pgl
[  169.744372][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.744758][ T8658]  das08-aoh
[  169.748672][ T8658]  das08-aol
[  169.749797][ T8658]  das08-aom
[  169.750870][ T8658]  das08/jr-ao
[  169.751996][ T8658]  das08jr-16-ao
[  169.753165][ T8658]  pc104-das08
[  169.754380][ T8658]  das08jr/16
[  169.755484][ T8658] comedi: valid board names for das16m1 driver are:
[  169.757648][ T8658]  das16m1
[  169.758672][ T8658] comedi: valid board names for dac02 driver are:
[  169.760736][ T8658]  dac02
[  169.761744][ T8658] comedi: valid board names for rti802 driver are:
[  169.763885][ T8658]  rti802
[  169.764990][ T8658] comedi: valid board names for rti800 driver are:
[  169.767075][ T8658]  rti800
[  169.768048][ T8658]  rti815
[  169.769013][ T8658] comedi: valid board names for pcm3724 driver are:
[  169.771170][ T8658]  pcm3724
[  169.772228][ T8658] comedi: valid board names for pcl818 driver are:
[  169.774404][ T8658]  pcl818l
[  169.775428][ T8658]  pcl818h
[  169.776450][ T8658]  pcl818hd
[  169.777498][ T8658]  pcl818hg
[  169.778564][ T8658]  pcl818
[  169.779555][ T8658]  pcl718
[  169.780575][ T8658]  pcm3718
[  169.781611][ T8658] comedi: valid board names for pcl816 driver are:
[  169.783711][ T8658]  pcl816
[  169.784737][ T8658]  pcl814b
[  169.785780][ T8658] comedi: valid board names for pcl812 driver are:
[  169.787903][ T8658]  pcl812
[  169.788890][ T8658]  pcl812pg
[  169.790005][ T8658]  acl8112pg
[  169.791090][ T8658]  acl8112dg
[  169.792182][ T8658]  acl8112hg
[  169.793256][ T8658]  a821pgl
[  169.794348][ T8658]  a821pglnda
[  169.795459][ T8658]  a821pgh
[  169.796481][ T8658]  a822pgl
[  169.797497][ T8658]  a822pgh
[  169.798526][ T8658]  a823pgl
[  169.799545][ T8658]  a823pgh
[  169.800497][ T8658]  pcl813
[  169.801534][ T8658]  pcl813b
[  169.802560][ T8658]  acl8113
[  169.803571][ T8658]  iso813
[  169.804358][ T5989] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  169.804603][ T8658]  acl8216
[  169.808804][ T8658]  a826pg
[  169.809813][ T8658] comedi: valid board names for pcl730 driver are:
[  169.811929][ T8658]  pcl730
[  169.812889][ T8658]  iso730
[  169.813892][ T8658]  acl7130
[  169.814950][ T8658]  pcm3730
[  169.815956][ T8658]  pcl725
[  169.816919][ T8658]  p8r8dio
[  169.817950][ T8658]  acl7225b
[  169.819036][ T8658]  p16r16dio
[  169.820122][ T8658]  pcl733
[  169.821077][ T8658]  pcl734
[  169.822082][ T8658]  opmm-1616-xt
[  169.823240][ T8658]  pearl-mm-p
[  169.824407][ T8658]  ir104-pbf
[  169.825519][ T8658] comedi: valid board names for pcl726 driver are:
[  169.827660][ T8658]  pcl726
[  169.828590][ T8658]  pcl727
[  169.829570][ T8658]  pcl728
[  169.830556][ T8658]  acl6126
[  169.831579][ T8658]  acl6128
[  169.832592][ T8658] comedi: valid board names for pcl724 driver are:
[  169.834717][ T8658]  pcl724
[  169.835695][ T8658]  pcl722
[  169.836628][ T8658]  pcl731
[  169.837564][ T8658]  acl7122
[  169.838869][ T8658]  acl7124
[  169.839906][ T8658]  pet48dio
[  169.840948][ T8658]  pcmio48
[  169.842031][ T8658]  onyx-mm-dio
[  169.843138][ T8658] comedi: valid board names for pcl711 driver are:
[  169.845335][ T8658]  pcl711
[  169.846334][ T8658]  pcl711b
[  169.847301][ T8658]  acl8112hg
[  169.848326][ T8658]  acl8112dg
[  169.849424][ T8658] comedi: valid board names for amplc_pc263 driver are:
[  169.851620][ T8658]  pc263
[  169.852524][ T8658] comedi: valid board names for amplc_pc236 driver are:
[  169.854804][ T8658]  pc36at
[  169.855764][ T8658] comedi: valid board names for amplc_dio200 driver are:
[  169.857939][ T8658]  pc212e
[  169.858867][ T8658]  pc214e
[  169.859833][ T8658]  pc215e
[  169.860780][ T8658]  pc218e
[  169.861748][ T8658]  pc272e
[  169.862688][ T8658] comedi: valid board names for comedi_parport driver are:
[  169.865018][ T8658]  comedi_parport
[  169.866252][ T8658] comedi: valid board names for comedi_test driver are:
[  169.868357][ T8658]  comedi_test
[  169.869444][ T8658] comedi: valid board names for comedi_bond driver are:
[  169.871626][ T8658]  comedi_bond
[  169.956720][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  169.960472][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  169.965182][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  169.968686][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  169.972800][ T5989] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  169.976031][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.981840][ T5989] usb 5-1: config 0 descriptor??
[  170.037184][ T8665] netlink: 'syz.1.608': attribute type 7 has an invalid length.
[  170.039956][ T8665] netlink: 'syz.1.608': attribute type 8 has an invalid length.
[  170.047462][ T8665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.051294][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.209586][ T5989] hid_parser_main: 33 callbacks suppressed
[  171.209605][ T5989] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  171.244800][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'.
[  171.247833][ T8653] netlink: 'syz.0.606': attribute type 5 has an invalid length.
[  171.257716][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.633060][ T5989] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  171.663981][ T5989] usb 5-1: USB disconnect, device number 16
[  171.733675][ T8676] netlink: 'syz.1.611': attribute type 1 has an invalid length.
[  171.737057][ T8676] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  171.840932][ T8682] binder: 8681:8682 ioctl c0306201 80001440 returned -11
[  171.914603][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.918577][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.979597][ T8703] Cannot find del_set index 2 as target
[  171.985431][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.174408][ T7027] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  172.184348][ T6020] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  172.242165][   T40] audit: type=1326 audit(1766079472.067:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.621" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d579 code=0x0
[  172.337062][ T7027] usb 9-1: Using ep0 maxpacket: 16
[  172.347439][ T7027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.353411][ T7027] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  172.358782][ T6020] usb 6-1: Using ep0 maxpacket: 32
[  172.361120][ T7027] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  172.368501][ T7027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.373196][ T6020] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  172.378031][ T7027] usb 9-1: config 0 descriptor??
[  172.379042][ T8714] XFS (nullb0): Invalid superblock magic number
[  172.380251][ T6020] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  172.385592][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  172.389436][ T7027] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  172.392757][ T6020] usb 6-1: Product: syz
[  172.394139][ T6020] usb 6-1: Manufacturer: syz
[  172.396128][ T6020] usb 6-1: SerialNumber: syz
[  172.399260][ T6020] usb 6-1: config 0 descriptor??
[  172.401773][ T8699] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  172.411132][ T6020] hub 6-1:0.0: bad descriptor, ignoring hub
[  172.413467][ T6020] hub 6-1:0.0: probe with driver hub failed with error -5
[  172.819145][ T6002] usb 6-1: USB disconnect, device number 13
[  172.827181][ T8739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.629'.
[  172.830658][ T8739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.629'.
[  172.857194][ T8737] ALSA: mixer_oss: invalid OSS volume ''
[  172.939261][ T8744] random: crng reseeded on system resumption
[  172.988892][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'.
[  173.678104][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'.
[  173.766391][ T8756] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  173.821151][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.823989][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.037270][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.042874][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.141788][ T8752] tipc: Resetting bearer <eth:syzkaller0>
[  174.152580][ T1246] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.155852][ T1246] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.158727][ T1246] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.161637][ T1246] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.165114][ T1246] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.168120][ T1246] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.170967][ T1246] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.174723][ T1246] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.177009][ T8760] 9pnet_virtio: no channels available for device syz
[  174.388747][ T5989] net_ratelimit: 5 callbacks suppressed
[  174.388759][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.754029][ T8780] capability: warning: `syz.1.639' uses 32-bit capabilities (legacy support in use)
[  174.791347][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.796545][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.799392][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.802360][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.807552][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.845974][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.848588][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.896368][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.902626][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.978575][    T9] usb 9-1: USB disconnect, device number 17
[  175.074949][ T8787] sit1: left allmulticast mode
[  175.077347][ T8787] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  175.079779][ T8787] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  175.082711][ T8787] macsec1: left promiscuous mode
[  175.089801][ T8798] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.092813][ T8798] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.095872][ T8798] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.105150][ T8807] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.180395][ T8825] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  175.182775][ T8825] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  175.189025][ T8825] vhci_hcd vhci_hcd.0: Device attached
[  175.260485][ T8830] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  175.260527][ T8830] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  175.260821][ T8830] vhci_hcd vhci_hcd.0: Device attached
[  175.274500][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'.
[  175.467717][ T8838] binder: 8837:8838 ioctl c0306201 800001c0 returned -14
[  175.486609][ T6007] usb 38-1: SetAddress Request (22) to port 0
[  175.486911][ T6007] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd
[  175.525012][ T6020] usb 46-1: SetAddress Request (14) to port 0
[  175.525048][ T6020] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd
[  175.589393][ T8840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'.
[  175.916970][ T8831] vhci_hcd: connection reset by peer
[  175.917097][ T8835] lo speed is unknown, defaulting to 1000
[  175.932741][ T8793] vhci_hcd vhci_hcd.4: stop threads
[  175.932760][ T8793] vhci_hcd vhci_hcd.4: release socket
[  175.934286][ T8793] vhci_hcd vhci_hcd.4: disconnect device
[  175.946040][ T8835] wlan0 speed is unknown, defaulting to 1000
[  175.972642][ T8826] vhci_hcd: connection reset by peer
[  175.972959][ T8793] vhci_hcd vhci_hcd.0: stop threads
[  175.972980][ T8793] vhci_hcd vhci_hcd.0: release socket
[  175.973209][ T8793] vhci_hcd vhci_hcd.0: disconnect device
[  176.085001][ T8850] netlink: 3 bytes leftover after parsing attributes in process `syz.2.648'.
[  176.090710][ T8850] batadv1: entered allmulticast mode
[  176.494271][ T6138] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  176.644277][ T6138] usb 6-1: Using ep0 maxpacket: 32
[  176.648626][ T6138] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  176.653935][ T6138] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  176.656969][ T6138] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  176.659586][ T6138] usb 6-1: Product: syz
[  176.660948][ T6138] usb 6-1: Manufacturer: syz
[  176.662566][ T6138] usb 6-1: SerialNumber: syz
[  176.668084][ T6138] usb 6-1: config 0 descriptor??
[  176.670247][ T8853] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  176.673784][ T6138] hub 6-1:0.0: bad descriptor, ignoring hub
[  176.677296][ T6138] hub 6-1:0.0: probe with driver hub failed with error -5
[  176.734293][ T7062] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  176.884336][ T7062] usb 9-1: Using ep0 maxpacket: 16
[  176.890452][ T7062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.894094][ T7062] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  176.904277][ T7062] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  176.907577][ T7062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.918347][ T7062] usb 9-1: config 0 descriptor??
[  176.925358][ T7062] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  177.009902][    C2] hpet: Lost 2 RTC interrupts
[  177.228470][ T8867] lo speed is unknown, defaulting to 1000
[  177.231008][ T8867] wlan0 speed is unknown, defaulting to 1000
[  177.472978][ T8869] random: crng reseeded on system resumption
[  177.895046][ T8882] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  177.930975][ T8862] siw: device registration error -23
[  178.518964][ T7027] usb 6-1: USB disconnect, device number 14
[  179.640480][ T8903] netlink: 'syz.0.662': attribute type 13 has an invalid length.
[  180.152117][ T8903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.169676][ T5989] usb 9-1: USB disconnect, device number 18
[  180.445658][ T8905] afs: Unknown parameter '#7dyn'
[  180.453201][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'.
[  180.544297][ T6007] usb 38-1: device descriptor read/8, error -110
[  180.624646][ T6020] usb 46-1: device descriptor read/8, error -110
[  180.741344][ T8910] lo speed is unknown, defaulting to 1000
[  180.755299][ T8910] wlan0 speed is unknown, defaulting to 1000
[  180.986065][ T6007] usb usb38-port1: attempt power cycle
[  181.030778][ T6020] usb usb46-port1: attempt power cycle
[  181.459119][ T8933] ntfs3(nullb0): Primary boot signature is not NTFS.
[  181.462823][ T8933] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  181.574322][ T6007] usb usb38-port1: unable to enumerate USB device
[  181.605200][ T6020] usb usb46-port1: unable to enumerate USB device
[  181.994815][   T40] audit: type=1326 audit(1766079481.817:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.014319][   T40] audit: type=1326 audit(1766079481.817:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.024384][   T40] audit: type=1326 audit(1766079481.817:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.030975][   T40] audit: type=1326 audit(1766079481.817:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.072533][   T40] audit: type=1326 audit(1766079481.817:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.081648][   T40] audit: type=1326 audit(1766079481.817:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.081824][ T8940] lo speed is unknown, defaulting to 1000
[  182.089876][   T40] audit: type=1326 audit(1766079481.837:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.092389][ T8940] wlan0 speed is unknown, defaulting to 1000
[  182.099849][   T40] audit: type=1326 audit(1766079481.837:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.108794][   T40] audit: type=1326 audit(1766079481.837:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.118205][   T40] audit: type=1326 audit(1766079481.907:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  182.504367][ T8967] usb usb7: usbfs: process 8967 (syz.2.677) did not claim interface 0 before use
[  182.587068][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'.
[  182.920010][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  183.004470][ T8983] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  183.006832][ T8983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  183.022041][ T8983] vhci_hcd vhci_hcd.0: Device attached
[  183.125326][    T9] usb 6-1: device descriptor read/64, error -71
[  183.285186][ T6020] usb 38-1: SetAddress Request (26) to port 0
[  183.287251][ T6020] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd
[  183.384928][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  183.462619][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'.
[  183.524277][    T9] usb 6-1: device descriptor read/64, error -71
[  183.538615][ T8985] vhci_hcd: connection reset by peer
[  183.540636][ T8794] vhci_hcd vhci_hcd.0: stop threads
[  183.542728][ T8794] vhci_hcd vhci_hcd.0: release socket
[  183.545443][ T8794] vhci_hcd vhci_hcd.0: disconnect device
[  183.636292][    T9] usb usb6-port1: attempt power cycle
[  183.849548][ T8997] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  183.851809][ T8997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  183.854620][ T8997] vhci_hcd vhci_hcd.0: Device attached
[  183.984297][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  184.004859][    T9] usb 6-1: device descriptor read/8, error -71
[  184.136516][   T53] usb 42-1: SetAddress Request (10) to port 0
[  184.141701][   T53] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd
[  184.244386][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  184.264759][    T9] usb 6-1: device descriptor read/8, error -71
[  184.375448][    T9] usb usb6-port1: unable to enumerate USB device
[  184.466368][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'.
[  184.469816][ T9004] program syz.0.685 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  184.474340][ T6138] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  184.478127][ T8998] vhci_hcd: connection reset by peer
[  184.481934][ T8792] vhci_hcd vhci_hcd.2: stop threads
[  184.483674][ T8792] vhci_hcd vhci_hcd.2: release socket
[  184.485559][ T8792] vhci_hcd vhci_hcd.2: disconnect device
[  184.524698][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  184.527004][ T1112] ata1.00: irq_stat 0x40000000
[  184.528511][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT
[  184.530445][ T1112] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 17
[  184.530445][ T1112]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  184.535342][ T1112] ata1.00: status: { DRDY ERR }
[  184.537235][ T1112] ata1.00: error: { ABRT }
[  184.539248][ T1112] ata1.00: device reported invalid CHS sector 0
[  184.542545][    C3] ata1: illegal qc_active transition (00000000->00100000)
[  184.624256][ T6138] usb 9-1: Using ep0 maxpacket: 16
[  184.627849][ T6138] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.631433][ T6138] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.634713][ T6138] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  184.638873][ T6138] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  184.641937][ T6138] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.645536][ T6138] usb 9-1: config 0 descriptor??
[  184.868530][ T1112] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  184.873460][ T1112] ata1.00: configured for UDMA/100
[  185.054985][ T6138] input: HID 0955:7214 Haptics as /devices/virtual/input/input18
[  185.073572][ T6138] shield 0003:0955:7214.0008: Registered Thunderstrike controller
[  185.077505][ T6138] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  185.138370][ T9017] cgroup: release_agent respecified
[  185.141366][ T9017] xt_hashlimit: invalid rate
[  185.145382][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'.
[  185.262193][ T6027] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  185.262329][ T7027] usb 9-1: USB disconnect, device number 19
[  185.275622][ T6027] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  185.280319][ T6027] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  185.284648][ T6027] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  185.464461][ T6027] IPVS: starting estimator thread 0...
[  185.574431][ T9025] IPVS: using max 46 ests per chain, 110400 per kthread
[  185.869861][ T9036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.691'.
[  186.663620][ T9035] orangefs_mount: mount request failed with -4
[  186.697693][ T9048] netlink: 'syz.4.696': attribute type 9 has an invalid length.
[  186.700206][ T9048] netlink: 'syz.4.696': attribute type 11 has an invalid length.
[  186.702687][ T9048] netlink: 'syz.4.696': attribute type 12 has an invalid length.
[  186.705236][ T9048] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.696'.
[  186.708264][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'.
[  186.780437][ T9052] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[  186.782652][ T9052] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  186.785793][ T9052] vhci_hcd vhci_hcd.0: Device attached
[  186.975328][ T6027] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  187.037876][ T6027] usb 39-1: new full-speed USB device number 3 using vhci_hcd
[  187.147666][ T9059] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  187.149820][ T9059] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  187.153036][ T9059] vhci_hcd vhci_hcd.0: Device attached
[  187.160340][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  187.163220][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  187.166014][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  187.169217][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  187.172082][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  187.175646][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  187.179040][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  187.441144][ T9053] vhci_hcd: connection reset by peer
[  187.443706][ T8794] vhci_hcd vhci_hcd.1: stop threads
[  187.445920][ T8794] vhci_hcd vhci_hcd.1: release socket
[  187.448102][ T8794] vhci_hcd vhci_hcd.1: disconnect device
[  187.674302][ T7027] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  187.825029][ T7027] usb 5-1: Using ep0 maxpacket: 16
[  187.830603][ T7027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.835641][ T7027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.839567][ T7027] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  187.844854][ T7027] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  187.848524][ T7027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.855274][ T7027] usb 5-1: config 0 descriptor??
[  187.881574][ T9062] vhci_hcd: connection closed
[  187.881887][ T8795] vhci_hcd vhci_hcd.2: stop threads
[  187.885165][ T8795] vhci_hcd vhci_hcd.2: release socket
[  187.887505][ T8795] vhci_hcd vhci_hcd.2: disconnect device
[  188.061864][ T9074] input: syz1 as /devices/virtual/input/input19
[  188.268818][ T7027] input: HID 0955:7214 Haptics as /devices/virtual/input/input20
[  188.277938][ T7027] shield 0003:0955:7214.0009: Registered Thunderstrike controller
[  188.280441][ T7027] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  188.384908][ T6020] usb 38-1: device descriptor read/8, error -110
[  188.472844][ T6021] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  188.476929][ T6452] usb 5-1: USB disconnect, device number 17
[  188.481904][ T6021] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  188.485350][ T6021] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  188.488618][ T6021] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  188.785806][ T6020] usb usb38-port1: attempt power cycle
[  189.195909][   T53] usb 42-1: device descriptor read/8, error -110
[  189.244797][ T9113] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  189.247347][ T9113] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  189.251373][ T9113] vhci_hcd vhci_hcd.0: Device attached
[  189.271087][ T9114] vhci_hcd: connection closed
[  189.271318][ T8795] vhci_hcd vhci_hcd.0: stop threads
[  189.276002][ T8795] vhci_hcd vhci_hcd.0: release socket
[  189.277889][ T8795] vhci_hcd vhci_hcd.0: disconnect device
[  189.353592][ T6020] usb usb38-port1: unable to enumerate USB device
[  189.393727][ T9117] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  189.396428][ T9117] overlayfs: failed to set xattr on upper
[  189.398544][ T9117] overlayfs: ...falling back to redirect_dir=nofollow.
[  189.400794][ T9117] overlayfs: ...falling back to index=off.
[  189.402726][ T9117] overlayfs: ...falling back to uuid=null.
[  189.608829][   T53] usb usb42-port1: attempt power cycle
[  189.646647][ T9123] openvswitch: netlink: VXLAN extension 30 out of range max 1
[  189.649842][ T9123] openvswitch: netlink: VXLAN extension 30 out of range max 1
[  189.652884][ T9123] openvswitch: netlink: VXLAN extension 30 out of range max 1
[  189.799986][ T9133] netlink: 'syz.0.719': attribute type 4 has an invalid length.
[  189.860249][    T9] lo speed is unknown, defaulting to 1000
[  189.862154][    T9] syz0: Port: 1 Link DOWN
[  190.010258][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  190.010355][   T40] audit: type=1326 audit(1766079745.823:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.036285][   T40] audit: type=1326 audit(1766079745.823:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.043651][   T40] audit: type=1326 audit(1766079745.823:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.051102][   T40] audit: type=1326 audit(1766079745.823:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.060326][   T40] audit: type=1326 audit(1766079745.823:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.071084][   T40] audit: type=1326 audit(1766079745.823:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.082384][   T40] audit: type=1326 audit(1766079745.823:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.093769][   T40] audit: type=1326 audit(1766079745.833:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.102914][   T40] audit: type=1326 audit(1766079745.833:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.112181][   T40] audit: type=1326 audit(1766079745.833:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000
[  190.166816][   T53] usb usb42-port1: unable to enumerate USB device
[  190.626733][    T9] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  190.813886][    T9] usb 6-1: config 0 has no interfaces?
[  190.816076][    T9] usb 6-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00
[  190.819698][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.835239][    T9] usb 6-1: config 0 descriptor??
[  190.883684][ T9166] netlink: 'syz.4.727': attribute type 10 has an invalid length.
[  190.887160][ T9166] __nla_validate_parse: 61 callbacks suppressed
[  190.887175][ T9166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.727'.
[  190.893541][ T9166] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  190.897610][ T9166] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  190.901257][ T9166] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  190.916474][ T9166] faux_driver vgem: [drm] Unknown color mode 65545; guessing buffer size.
[  191.008023][ T9166] netlink: 'syz.4.727': attribute type 1 has an invalid length.
[  191.010522][ T9166] netlink: 224 bytes leftover after parsing attributes in process `syz.4.727'.
[  191.479603][    T9] usb 6-1: USB disconnect, device number 19
[  191.782216][ T6007] libceph: connect (1)[c::]:6789 error -101
[  191.785842][ T6007] libceph: mon0 (1)[c::]:6789 connect error
[  191.794104][ T6007] libceph: connect (1)[c::]:6789 error -101
[  191.797816][ T6007] libceph: mon0 (1)[c::]:6789 connect error
[  191.816593][ T9178] ceph: No mds server is up or the cluster is laggy
[  191.820659][ T9181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.730'.
[  192.138270][ T6027] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  192.242930][ T9195] FAULT_INJECTION: forcing a failure.
[  192.242930][ T9195] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  192.248831][ T9195] CPU: 0 UID: 0 PID: 9195 Comm: syz.4.734 Not tainted syzkaller #0 PREEMPT(full) 
[  192.248855][ T9195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  192.248866][ T9195] Call Trace:
[  192.248873][ T9195]  <TASK>
[  192.248881][ T9195]  dump_stack_lvl+0x16c/0x1f0
[  192.248937][ T9195]  should_fail_ex+0x512/0x640
[  192.248966][ T9195]  _copy_to_user+0x32/0xd0
[  192.248987][ T9195]  simple_read_from_buffer+0xcb/0x170
[  192.249013][ T9195]  proc_fail_nth_read+0x197/0x240
[  192.249042][ T9195]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  192.249070][ T9195]  ? rw_verify_area+0xcf/0x6c0
[  192.249092][ T9195]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  192.249119][ T9195]  vfs_read+0x1e4/0xcf0
[  192.249143][ T9195]  ? __pfx___mutex_lock+0x10/0x10
[  192.249170][ T9195]  ? __pfx_vfs_read+0x10/0x10
[  192.249190][ T9195]  ? find_held_lock+0x2b/0x80
[  192.249218][ T9195]  ? __fget_files+0x20e/0x3c0
[  192.249240][ T9195]  ? __fget_files+0x1a0/0x3c0
[  192.249269][ T9195]  ksys_read+0x12a/0x250
[  192.249292][ T9195]  ? __pfx_ksys_read+0x10/0x10
[  192.249316][ T9195]  ? fdget+0x187/0x210
[  192.249343][ T9195]  __do_fast_syscall_32+0xe8/0x680
[  192.249388][ T9195]  do_fast_syscall_32+0x32/0x80
[  192.249413][ T9195]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  192.249452][ T9195] RIP: 0023:0xf707d579
[  192.249467][ T9195] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  192.249482][ T9195] RSP: 002b:00000000f544c590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  192.249499][ T9195] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f544c620
[  192.249510][ T9195] RDX: 000000000000000f RSI: 00000000f7416ff4 RDI: 0000000000000000
[  192.249519][ T9195] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  192.249529][ T9195] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  192.249538][ T9195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  192.249561][ T9195]  </TASK>
[  192.991225][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'.
[  193.410399][   T53] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  193.579723][   T53] usb 6-1: Using ep0 maxpacket: 16
[  193.585129][   T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.588538][   T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.596354][   T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  193.600908][   T53] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  193.603770][   T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.608095][   T53] usb 6-1: config 0 descriptor??
[  193.659233][ T9239] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  193.661814][ T9239] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  193.665135][ T9239] vhci_hcd vhci_hcd.0: Device attached
[  193.850050][ T6020] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  193.920107][ T6020] usb 41-1: new low-speed USB device number 5 using vhci_hcd
[  194.013598][ T9217] random: crng reseeded on system resumption
[  194.022445][   T53] usbhid 6-1:0.0: can't add hid device: -71
[  194.026063][   T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  194.033217][   T53] usb 6-1: USB disconnect, device number 20
[  194.291474][ T9240] vhci_hcd: connection reset by peer
[  194.293786][ T8795] vhci_hcd vhci_hcd.2: stop threads
[  194.295437][ T8795] vhci_hcd vhci_hcd.2: release socket
[  194.297253][ T8795] vhci_hcd vhci_hcd.2: disconnect device
[  194.812988][ T9248] sp0: Synchronizing with TNC
[  194.986172][ T9246] [U] è
[  194.999123][ T9261] loop2: detected capacity change from 0 to 7
[  195.002183][    C0] blk_print_req_error: 25 callbacks suppressed
[  195.002193][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.007434][    C0] buffer_io_error: 25 callbacks suppressed
[  195.007444][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.012304][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.015368][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.018051][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.021474][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.024772][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.028144][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.032519][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.036486][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.039881][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.043154][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.050044][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.053491][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.056180][ T9261] ldm_validate_partition_table(): Disk read failed.
[  195.058660][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.061759][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.062933][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.067695][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.072022][    C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  195.075028][    C2] Buffer I/O error on dev loop2, logical block 0, async page read
[  195.078714][ T9261] Dev loop2: unable to read RDB block 0
[  195.084072][ T9261]  loop2: unable to read partition table
[  195.086067][ T9261] loop2: partition table beyond EOD, truncated
[  195.088452][ T9261] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  195.091618][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'.
[  195.481625][   T53] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  195.641512][   T53] usb 6-1: Using ep0 maxpacket: 16
[  195.644765][   T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.649223][   T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.652804][   T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  195.657120][   T53] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  195.660153][   T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.666095][   T53] usb 6-1: config 0 descriptor??
[  195.850144][ T9296] afs: Unknown parameter '#7dyn'
[  195.853646][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.760'.
[  196.072229][ T9276] random: crng reseeded on system resumption
[  196.131566][   T53] usbhid 6-1:0.0: can't add hid device: -71
[  196.180600][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'.
[  196.245887][ T9299] team0: entered allmulticast mode
[  196.248092][ T9299] team_slave_0: entered allmulticast mode
[  196.250455][ T9299] team_slave_1: entered allmulticast mode
[  196.252898][ T9299] bond0: entered allmulticast mode
[  196.255207][ T9299] bond_slave_0: entered allmulticast mode
[  196.257635][ T9299] bond_slave_1: entered allmulticast mode
[  196.260040][ T9299] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  196.265418][ T9299] team0: left allmulticast mode
[  196.267499][ T9299] team_slave_0: left allmulticast mode
[  196.269791][ T9299] team_slave_1: left allmulticast mode
[  196.271988][ T9299] bond0: left allmulticast mode
[  196.274190][ T9299] bond_slave_0: left allmulticast mode
[  196.276612][ T9299] bond_slave_1: left allmulticast mode
[  196.278917][ T9299] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  196.605551][   T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  196.610472][   T53] usb 6-1: USB disconnect, device number 21
[  196.622543][ T9305] netlink: 'syz.0.762': attribute type 9 has an invalid length.
[  196.626638][ T9305] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.762'.
[  196.701376][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'.
[  197.163041][ T6027] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  197.313145][ T6027] usb 6-1: device descriptor read/64, error -71
[  197.463468][   T53] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  197.563466][ T6027] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  197.583661][ T9334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.769'.
[  197.586531][ T9334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.769'.
[  197.603646][ T9334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.769'.
[  197.613533][   T53] usb 7-1: Using ep0 maxpacket: 16
[  197.617844][   T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.621339][   T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.624762][   T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  197.629716][   T53] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  197.634208][   T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.648912][   T53] usb 7-1: config 0 descriptor??
[  197.703587][ T6027] usb 6-1: device descriptor read/64, error -71
[  197.823858][ T6027] usb usb6-port1: attempt power cycle
[  198.066550][ T9340] random: crng reseeded on system resumption
[  198.087050][ T9347] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  198.089321][ T9347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  198.092902][ T9347] vhci_hcd vhci_hcd.0: Device attached
[  198.141897][ T9351] netlink: 'syz.4.773': attribute type 13 has an invalid length.
[  198.183981][ T6027] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  198.227175][   T53] usbhid 7-1:0.0: can't add hid device: -71
[  198.229160][   T53] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  198.238954][ T6027] usb 6-1: device descriptor read/8, error -71
[  198.345162][ T9351] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.354398][ T6007] usb 38-1: SetAddress Request (30) to port 0
[  198.357242][ T6007] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd
[  198.361234][ T9351] 8021q: adding VLAN 0 to HW filter on device team0
[  198.390301][ T9351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.499162][ T6027] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  198.526444][ T6027] usb 6-1: device descriptor read/8, error -71
[  198.537546][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.550957][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.581049][ T9351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  198.585442][ T9351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.613955][ T9351] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  198.628578][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.631855][ T8792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.635322][ T6027] usb usb6-port1: unable to enumerate USB device
[  198.637334][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.641947][ T8792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.781027][ T9349] vhci_hcd: connection reset by peer
[  198.790570][ T8793] vhci_hcd vhci_hcd.0: stop threads
[  198.792309][ T8793] vhci_hcd vhci_hcd.0: release socket
[  198.795124][ T8793] vhci_hcd vhci_hcd.0: disconnect device
[  198.887844][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  198.890110][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  199.223507][   T53] usb 7-1: USB disconnect, device number 7
[  199.255787][ T6020] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  199.423940][ T9365] netlink: 48 bytes leftover after parsing attributes in process `syz.0.779'.
[  199.516176][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'.
[  199.772417][ T9375] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  199.774697][ T9375] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  199.778001][ T9375] vhci_hcd vhci_hcd.0: Device attached
[  199.887523][ T9376] vhci_hcd: connection closed
[  199.914236][ T8794] vhci_hcd vhci_hcd.0: stop threads
[  199.923204][ T8794] vhci_hcd vhci_hcd.0: release socket
[  199.927926][ T8794] vhci_hcd vhci_hcd.0: disconnect device
[  200.476197][ T6138] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  200.637621][ T6138] usb 6-1: Using ep0 maxpacket: 16
[  200.641481][ T6138] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.646402][ T6138] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.650375][ T6138] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  200.656402][ T6138] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  200.661115][ T6138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.673183][ T6138] usb 6-1: config 0 descriptor??
[  201.079764][ T9387] random: crng reseeded on system resumption
[  201.186229][ T6138] usbhid 6-1:0.0: can't add hid device: -71
[  201.429445][ T9401] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  201.431535][ T9401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  201.434786][ T9401] vhci_hcd vhci_hcd.0: Device attached
[  201.704325][ T6138] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  201.793472][ T9410] netlink: 'syz.1.788': attribute type 13 has an invalid length.
[  202.472971][ T6138] usb 6-1: USB disconnect, device number 26
[  202.715845][ T9402] vhci_hcd: connection closed
[  202.795633][ T8816] vhci_hcd vhci_hcd.0: stop threads
[  202.799492][ T8816] vhci_hcd vhci_hcd.0: release socket
[  202.801258][ T8816] vhci_hcd vhci_hcd.0: disconnect device
[  203.120671][ T9410] 8021q: adding VLAN 0 to HW filter on device .`
[  203.129544][ T9410] 8021q: adding VLAN 0 to HW filter on device team0
[  203.143098][ T9410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.414728][   T40] kauditd_printk_skb: 429 callbacks suppressed
[  203.414739][   T40] audit: type=1326 audit(1766079759.230:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.425096][   T40] audit: type=1326 audit(1766079759.240:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.433449][   T40] audit: type=1326 audit(1766079759.250:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.439180][ T6007] usb 38-1: device descriptor read/8, error -110
[  203.447100][   T40] audit: type=1326 audit(1766079759.250:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.455255][   T40] audit: type=1326 audit(1766079759.250:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.464263][   T40] audit: type=1326 audit(1766079759.260:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.471539][   T40] audit: type=1326 audit(1766079759.260:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.479611][   T40] audit: type=1326 audit(1766079759.260:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.486119][   T40] audit: type=1326 audit(1766079759.260:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.493071][   T40] audit: type=1326 audit(1766079759.260:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.1.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  203.761923][ T9428] vlan2: entered promiscuous mode
[  203.900485][ T9428] hsr_slave_1: entered promiscuous mode
[  203.905361][ T9428] vlan2: entered allmulticast mode
[  203.907443][ T9428] hsr_slave_1: entered allmulticast mode
[  203.907620][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'.
[  203.918281][ T9430] netlink: 104 bytes leftover after parsing attributes in process `syz.0.795'.
[  203.921949][ T9430] netlink: 104 bytes leftover after parsing attributes in process `syz.0.795'.
[  203.981143][ T6007] usb usb38-port1: attempt power cycle
[  204.049554][   T53] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  204.496534][ T9441] netlink: 'syz.1.799': attribute type 1 has an invalid length.
[  204.580856][ T9445] dvmrp1: entered allmulticast mode
[  204.590088][ T6027] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  204.605980][ T9445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  204.611857][ T9446] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  204.614603][ T9446] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  204.620882][ T9446] vhci_hcd vhci_hcd.0: Device attached
[  204.726004][ T9450] fuse: Bad value for 'fd'
[  204.780250][ T6027] usb 5-1: Using ep0 maxpacket: 16
[  204.784965][ T6027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.794612][ T6027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.798668][ T6027] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  204.815242][ T6027] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  204.818240][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.824667][ T6027] usb 5-1: config 0 descriptor??
[  204.890384][ T6021] usb 46-1: SetAddress Request (18) to port 0
[  204.892662][ T6021] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd
[  205.108566][ T9448] vhci_hcd: connection reset by peer
[  205.111328][ T8795] vhci_hcd vhci_hcd.4: stop threads
[  205.114535][ T8795] vhci_hcd vhci_hcd.4: release socket
[  205.120892][ T8795] vhci_hcd vhci_hcd.4: disconnect device
[  205.280549][ T9435] random: crng reseeded on system resumption
[  205.313650][ T6007] usb usb38-port1: unable to enumerate USB device
[  205.320537][ T6027] usbhid 5-1:0.0: can't add hid device: -71
[  205.322915][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.802'.
[  205.682705][ T9470] ubi: mtd0 is already attached to ubi31
[  205.695715][ T6027] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  206.631491][ T6027] usb 5-1: USB disconnect, device number 18
[  206.857589][ T9490] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  206.859905][ T9490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.986553][ T9484] lo speed is unknown, defaulting to 1000
[  206.989029][ T9484] wlan0 speed is unknown, defaulting to 1000
[  208.895809][ T9541] xt_CT: You must specify a L4 protocol and not use inversions on it
[  209.674927][ T6138] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  209.839511][ T6138] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  209.843214][ T6138] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.848197][ T6138] usb 7-1: Product: syz
[  209.850057][ T6138] usb 7-1: Manufacturer: syz
[  209.851945][ T6138] usb 7-1: SerialNumber: syz
[  209.857490][ T6138] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  209.922467][ T6027] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  209.925449][ T6021] usb 46-1: device descriptor read/8, error -110
[  209.938457][ T9557] lo speed is unknown, defaulting to 1000
[  209.940982][ T9557] wlan0 speed is unknown, defaulting to 1000
[  209.973937][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'.
[  209.998421][ T9559] binder_alloc: 9558: binder_alloc_buf, no vma
[  210.001611][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.826'.
[  210.037785][ T9556] can0: slcan on ptm0.
[  210.237919][ T9569] netlink: 'syz.0.830': attribute type 10 has an invalid length.
[  210.240530][ T9569] netlink: 2 bytes leftover after parsing attributes in process `syz.0.830'.
[  210.243493][ T9569] team0: entered promiscuous mode
[  210.245175][ T9569] team_slave_0: entered promiscuous mode
[  210.247473][ T9569] team_slave_1: entered promiscuous mode
[  210.249667][ T9569] bridge0: port 3(team0) entered blocking state
[  210.251797][ T9569] bridge0: port 3(team0) entered disabled state
[  210.254094][ T9569] team0: entered allmulticast mode
[  210.256336][ T9569] team_slave_0: entered allmulticast mode
[  210.258683][ T9569] team_slave_1: entered allmulticast mode
[  210.262974][ T9569] bridge0: port 3(team0) entered blocking state
[  210.265145][ T9569] bridge0: port 3(team0) entered forwarding state
[  210.275562][ T6138] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  210.335989][ T6021] usb usb46-port1: attempt power cycle
[  210.425547][ T6138] usb 6-1: Using ep0 maxpacket: 16
[  210.428721][ T6138] usb 6-1: config 0 has no interfaces?
[  210.431427][ T6138] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  210.434472][ T6138] usb 6-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0
[  210.437205][ T6138] usb 6-1: Product: syz
[  210.440281][ T6138] usb 6-1: config 0 descriptor??
[  210.542067][ T9553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.545047][ T9553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.646719][  T828] usb 6-1: USB disconnect, device number 27
[  210.717836][ T9555] can0 (unregistered): slcan off ptm0.
[  210.897410][ T6021] usb usb46-port1: unable to enumerate USB device
[  210.966059][ T6027] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  210.968540][ T6027] ath9k_htc: Failed to initialize the device
[  210.988340][ T6027] usb 7-1: ath9k_htc: USB layer deinitialized
[  211.707941][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.711008][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.118631][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.121667][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.186366][   T53] usb 7-1: USB disconnect, device number 8
[  213.229654][   T40] kauditd_printk_skb: 223 callbacks suppressed
[  213.229668][   T40] audit: type=1326 audit(1766079769.041:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.239739][   T40] audit: type=1326 audit(1766079769.041:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.247410][   T40] audit: type=1326 audit(1766079769.051:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.294405][   T40] audit: type=1326 audit(1766079769.051:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.308875][   T40] audit: type=1326 audit(1766079769.051:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.316638][   T40] audit: type=1326 audit(1766079769.051:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.326144][   T40] audit: type=1326 audit(1766079769.051:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.334322][   T40] audit: type=1326 audit(1766079769.051:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.341984][   T40] audit: type=1326 audit(1766079769.051:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.350460][   T40] audit: type=1326 audit(1766079769.051:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.1.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000
[  213.388922][ T9607] fuse: Bad value for 'user_id'
[  213.390858][ T9607] fuse: Bad value for 'user_id'
[  213.393598][ T9607] usb usb8: usbfs: process 9607 (syz.2.842) did not claim interface 0 before use
[  213.469554][ T9609] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  213.472357][ T9609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  213.475923][ T9609] vhci_hcd vhci_hcd.0: Device attached
[  213.718930][ T6027] usb 37-1: new low-speed USB device number 3 using vhci_hcd
[  214.259372][ T9614] vhci_hcd: connection reset by peer
[  214.262242][ T8795] vhci_hcd vhci_hcd.0: stop threads
[  214.264797][ T8795] vhci_hcd vhci_hcd.0: release socket
[  214.267355][ T8795] vhci_hcd vhci_hcd.0: disconnect device
[  214.330224][ T9623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.845'.
[  215.085135][ T9635] macsec1: entered promiscuous mode
[  215.087624][ T9635] veth1_to_batadv: entered promiscuous mode
[  215.104524][ T9635] bridge0: port 3(erspan0) entered blocking state
[  215.112931][ T9635] bridge0: port 3(erspan0) entered disabled state
[  215.122143][ T9635] erspan0: entered allmulticast mode
[  215.138253][ T9635] erspan0: entered promiscuous mode
[  215.860991][ T9643] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  215.863475][ T9643] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  215.867465][ T9643] vhci_hcd vhci_hcd.0: Device attached
[  215.917936][ T9644] vhci_hcd: connection closed
[  215.920981][ T8816] vhci_hcd vhci_hcd.0: stop threads
[  215.925119][ T8816] vhci_hcd vhci_hcd.0: release socket
[  215.928518][ T8816] vhci_hcd vhci_hcd.0: disconnect device
[  216.479136][ T9656] fuse: Unknown parameter 'óÏñSj²¹dp®'
[  216.769401][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'.
[  216.782239][ T9664] mkiss: ax0: crc mode is auto.
[  216.795350][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'.
[  216.904116][ T9665] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  216.906722][ T9665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  216.909642][ T9665] vhci_hcd vhci_hcd.0: Device attached
[  217.047161][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'.
[  217.141887][   T53] usb 39-1: new low-speed USB device number 4 using vhci_hcd
[  217.168595][ T9672] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[  217.171447][ T9672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  217.174785][ T9672] vhci_hcd vhci_hcd.0: Device attached
[  217.327321][ T9679] netlink: 72 bytes leftover after parsing attributes in process `syz.0.861'.
[  217.432381][  T828] usb 41-1: new low-speed USB device number 6 using vhci_hcd
[  217.456586][ T9666] vhci_hcd: connection reset by peer
[  217.459275][ T8792] vhci_hcd vhci_hcd.1: stop threads
[  217.460509][ T9687] netlink: 'syz.0.864': attribute type 1 has an invalid length.
[  217.461568][ T8792] vhci_hcd vhci_hcd.1: release socket
[  217.462363][ T8792] vhci_hcd vhci_hcd.1: disconnect device
[  217.498139][ T9687] 8021q: adding VLAN 0 to HW filter on device bond1
[  217.532587][ T9687] 8021q: adding VLAN 0 to HW filter on device bond1
[  217.535489][ T9687] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  217.540951][ T9687] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  217.978187][ T9673] vhci_hcd: connection reset by peer
[  217.980737][ T8794] vhci_hcd vhci_hcd.2: stop threads
[  217.983043][ T8794] vhci_hcd vhci_hcd.2: release socket
[  217.992845][ T8794] vhci_hcd vhci_hcd.2: disconnect device
[  218.635180][ T6002] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  218.716295][ T9706] block device autoloading is deprecated and will be removed.
[  218.803444][ T6002] usb 6-1: Using ep0 maxpacket: 16
[  218.803472][ T6027] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  218.807314][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.812514][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.816610][ T6002] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  218.821614][ T6002] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  218.824994][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.829486][ T6002] usb 6-1: config 0 descriptor??
[  219.235103][ T9691] random: crng reseeded on system resumption
[  219.244246][ T6002] input: HID 0955:7214 Haptics as /devices/virtual/input/input21
[  219.254167][ T6002] shield 0003:0955:7214.000A: Registered Thunderstrike controller
[  219.256777][ T6002] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  219.442900][ T5952] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  219.446860][ T5952] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  219.452274][ T6002] usb 6-1: USB disconnect, device number 28
[  219.455410][ T5952] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  219.460739][ T5952] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  219.653930][ T9717] fuse: Bad value for 'rootmode'
[  219.857717][   T40] kauditd_printk_skb: 13 callbacks suppressed
[  219.857733][   T40] audit: type=1326 audit(1766079775.664:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  219.869466][   T40] audit: type=1326 audit(1766079775.664:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  219.878354][   T40] audit: type=1326 audit(1766079775.664:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf702d579 code=0x7ffc0000
[  219.886141][   T40] audit: type=1326 audit(1766079775.664:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  219.892814][   T40] audit: type=1326 audit(1766079775.664:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000
[  219.899791][   T40] audit: type=1326 audit(1766079775.664:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d579 code=0x7ffc0000
[  219.906550][   T40] audit: type=1326 audit(1766079775.674:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf702d579 code=0x7ffc0000
[  219.913223][   T40] audit: type=1326 audit(1766079775.674:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d579 code=0x7ffc0000
[  219.921288][   T40] audit: type=1326 audit(1766079775.674:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf702d579 code=0x7ffc0000
[  219.928042][   T40] audit: type=1326 audit(1766079775.674:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.872" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf702d579 code=0x7ffc0000
[  220.140687][ T9733] netlink: 'syz.2.876': attribute type 5 has an invalid length.
[  220.344884][ T6027] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  220.530980][ T6027] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  220.534882][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.538676][ T6027] usb 6-1: Product: syz
[  220.541510][ T6027] usb 6-1: Manufacturer: syz
[  220.543723][ T6027] usb 6-1: SerialNumber: syz
[  220.550779][ T6027] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  220.567517][ T9748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.575409][ T6138] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  221.020735][ T9758] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(72)
[  221.022919][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  221.026541][ T9758] vhci_hcd vhci_hcd.0: Device attached
[  221.030536][ T9758] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(74)
[  221.033372][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  221.036908][ T9758] vhci_hcd vhci_hcd.0: Device attached
[  221.041353][ T9758] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(76)
[  221.044167][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  221.046981][ T9758] vhci_hcd vhci_hcd.0: Device attached
[  221.050143][ T9758] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(78)
[  221.052288][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  221.054844][ T9758] vhci_hcd vhci_hcd.0: Device attached
[  221.057885][ T9758] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(80)
[  221.059974][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  221.062546][ T9758] vhci_hcd vhci_hcd.0: Device attached
[  221.095880][ T9758] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(82)
[  221.098268][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  221.101061][ T9758] vhci_hcd vhci_hcd.0: Device attached
[  221.104563][ T9758] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(84)
[  221.106846][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  221.109960][ T9758] vhci_hcd vhci_hcd.0: Device attached
[  221.145824][ T9758] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(86)
[  221.147969][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  221.150617][ T9758] vhci_hcd vhci_hcd.0: Device attached
[  221.196208][ T9758] vhci_hcd vhci_hcd.0: port 0 already used
[  221.235646][ T9731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.240063][ T9731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.325630][ T6002] usb 38-1: SetAddress Request (34) to port 0
[  221.327582][ T6002] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd
[  221.342750][ T9775] vhci_hcd: connection closed
[  221.342818][ T9773] vhci_hcd: connection closed
[  221.346090][ T8812] vhci_hcd vhci_hcd.0: stop threads
[  221.349659][ T8812] vhci_hcd vhci_hcd.0: release socket
[  221.351831][ T9771] vhci_hcd: connection closed
[  221.352237][ T9769] vhci_hcd: connection closed
[  221.352585][ T9763] vhci_hcd: connection closed
[  221.353888][ T9767] vhci_hcd: connection closed
[  221.356048][ T8812] vhci_hcd vhci_hcd.0: disconnect device
[  221.356282][ T9761] vhci_hcd: connection reset by peer
[  221.357944][ T9765] vhci_hcd: connection closed
[  221.359660][ T8812] vhci_hcd vhci_hcd.0: stop threads
[  221.380175][ T8812] vhci_hcd vhci_hcd.0: release socket
[  221.382320][ T8812] vhci_hcd vhci_hcd.0: disconnect device
[  221.384713][ T8812] vhci_hcd vhci_hcd.0: stop threads
[  221.390740][ T8812] vhci_hcd vhci_hcd.0: release socket
[  221.392891][ T8812] vhci_hcd vhci_hcd.0: disconnect device
[  221.395186][ T8812] vhci_hcd vhci_hcd.0: stop threads
[  221.402524][ T8812] vhci_hcd vhci_hcd.0: release socket
[  221.404893][ T8812] vhci_hcd vhci_hcd.0: disconnect device
[  221.407881][ T8812] vhci_hcd vhci_hcd.0: stop threads
[  221.410138][ T8812] vhci_hcd vhci_hcd.0: release socket
[  221.412600][ T8812] vhci_hcd vhci_hcd.0: disconnect device
[  221.415223][ T8812] vhci_hcd vhci_hcd.0: stop threads
[  221.418071][ T8812] vhci_hcd vhci_hcd.0: release socket
[  221.420503][ T8812] vhci_hcd vhci_hcd.0: disconnect device
[  221.422462][ T8812] vhci_hcd vhci_hcd.0: stop threads
[  221.424133][ T8812] vhci_hcd vhci_hcd.0: release socket
[  221.426267][ T8812] vhci_hcd vhci_hcd.0: disconnect device
[  221.428877][ T8812] vhci_hcd vhci_hcd.0: stop threads
[  221.430910][ T8812] vhci_hcd vhci_hcd.0: release socket
[  221.433011][ T8812] vhci_hcd vhci_hcd.0: disconnect device
[  221.626342][ T6138] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  221.630021][ T6138] ath9k_htc: Failed to initialize the device
[  221.657075][ T6138] usb 6-1: ath9k_htc: USB layer deinitialized
[  221.686008][ T6027] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  221.718740][ T9789] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  221.836166][ T6027] usb 7-1: Using ep0 maxpacket: 8
[  221.841502][ T6027] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  221.845458][ T6027] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  221.849943][ T6027] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  221.854240][ T6027] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  221.858625][ T6027] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.864633][ T6027] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  221.869130][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.246652][   T53] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  222.516568][ T9792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.521723][ T9792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.566830][  T828] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  223.032454][ T9792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.036801][ T9792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.125387][ T6007] usb 6-1: USB disconnect, device number 29
[  224.469980][ T6027] usb 7-1: usb_control_msg returned -71
[  224.472656][ T6027] usbtmc 7-1:16.0: can't read capabilities
[  224.485891][ T6027] usb 7-1: USB disconnect, device number 9
[  224.879881][ T9823] overlay: Unknown parameter 'context'
[  224.890541][ T9823] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  224.944113][ T9823] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  224.948203][ T9823] overlayfs: failed to look up (tracing) for ino (-66)
[  224.962244][ T9823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.890'.
[  225.180131][ T9827] lo speed is unknown, defaulting to 1000
[  225.197779][ T9827] wlan0 speed is unknown, defaulting to 1000
[  225.229298][ T9826] netlink: 72 bytes leftover after parsing attributes in process `syz.1.892'.
[  225.264113][ T9828] lo speed is unknown, defaulting to 1000
[  225.305690][ T9828] wlan0 speed is unknown, defaulting to 1000
[  225.373993][ T5298] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  225.395780][ T5298] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  225.399724][ T5298] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  225.405271][ T5298] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  225.407986][ T5298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  225.420651][ T5950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  225.430724][ T5950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  225.433173][ T5950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  225.435688][ T5950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  225.438109][ T5950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  225.511820][ T9831] lo speed is unknown, defaulting to 1000
[  225.523380][ T9831] wlan0 speed is unknown, defaulting to 1000
[  225.751125][ T9831] chnl_net:caif_netlink_parms(): no params data found
[  225.840673][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.848311][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.852049][ T9831] bridge_slave_0: entered allmulticast mode
[  225.856752][ T9831] bridge_slave_0: entered promiscuous mode
[  225.867760][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.875040][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.878009][ T9831] bridge_slave_1: entered allmulticast mode
[  225.881869][ T9831] bridge_slave_1: entered promiscuous mode
[  225.947321][ T9831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.954372][ T9831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.994517][   T40] kauditd_printk_skb: 32 callbacks suppressed
[  225.994528][   T40] audit: type=1804 audit(1766079781.789:1944): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.896" name="/newroot/227/bus/bus" dev="overlay" ino=1242 res=1 errno=0
[  226.009657][ T9831] team0: Port device team_slave_0 added
[  226.014636][ T9831] team0: Port device team_slave_1 added
[  226.055205][ T9831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.058036][ T9831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.079990][ T9831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.097922][ T9831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.101947][ T9831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.150165][   T40] audit: type=1804 audit(1766079781.909:1945): pid=9851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.896" name="/newroot/227/bus/bus" dev="overlay" ino=1242 res=1 errno=0
[  226.156675][   T40] audit: type=1800 audit(1766079781.909:1946): pid=9851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.896" name="bus" dev="overlay" ino=1242 res=0 errno=0
[  226.296990][ T9831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.368308][ T9831] hsr_slave_0: entered promiscuous mode
[  226.377314][ T9831] hsr_slave_1: entered promiscuous mode
[  226.379928][ T9831] debugfs: 'hsr0' already exists in 'hsr'
[  226.394869][ T9831] Cannot create hsr debugfs directory
[  226.420319][ T6002] usb 38-1: device descriptor read/8, error -110
[  226.580532][ T8816] bridge_slave_1: left allmulticast mode
[  226.582468][ T8816] bridge_slave_1: left promiscuous mode
[  226.585898][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.592065][ T8816] bridge_slave_0: left allmulticast mode
[  226.594070][ T8816] bridge_slave_0: left promiscuous mode
[  226.596051][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.826549][ T6002] usb usb38-port1: attempt power cycle
[  226.874359][  T828] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  226.891131][ T9869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  226.893613][ T9869] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  226.897232][ T9869] vhci_hcd vhci_hcd.0: Device attached
[  226.962668][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'.
[  227.020987][  T828] usb 7-1: Using ep0 maxpacket: 16
[  227.024104][  T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.027667][  T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.030948][  T828] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  227.035243][  T828] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  227.038175][  T828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.042870][  T828] usb 7-1: config 0 descriptor??
[  227.066377][ T8816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.071776][ T8816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.076207][ T8816] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  227.079327][ T8816] bond0 (unregistering): Released all slaves
[  227.129959][ T9831] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  227.135247][ T9831] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  227.141466][ T9831] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  227.147143][ T9831] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  227.171007][   T53] usb 40-1: SetAddress Request (10) to port 0
[  227.178908][   T53] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd
[  227.189068][ T8816] tipc: Disabling bearer <udp:syz0>
[  227.192963][ T8816] tipc: Left network mode
[  227.212833][ T9831] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.227579][ T9831] 8021q: adding VLAN 0 to HW filter on device team0
[  227.247710][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.249975][ T8811] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.257507][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.259753][ T8792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.334101][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'.
[  227.385296][ T6002] usb usb38-port1: unable to enumerate USB device
[  227.434800][ T8816] hsr_slave_0: left promiscuous mode
[  227.437186][ T8816] hsr_slave_1: left promiscuous mode
[  227.439321][ T8816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.442094][ T8816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.445681][ T8816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.448452][ T9861] random: crng reseeded on system resumption
[  227.451423][ T8816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.460912][  T828] input: HID 0955:7214 Haptics as /devices/virtual/input/input23
[  227.472015][ T5950] Bluetooth: hci4: command tx timeout
[  227.472261][  T828] shield 0003:0955:7214.000B: Registered Thunderstrike controller
[  227.482120][  T828] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  227.489155][ T9870] vhci_hcd: connection reset by peer
[  227.495081][ T8811] vhci_hcd vhci_hcd.1: stop threads
[  227.497299][ T8811] vhci_hcd vhci_hcd.1: release socket
[  227.511385][ T8811] vhci_hcd vhci_hcd.1: disconnect device
[  227.662445][    T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  227.668098][    T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  227.671703][ T5952] usb 7-1: USB disconnect, device number 10
[  227.676331][    T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  227.679997][    T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  227.894452][ T8816] team0 (unregistering): Port device team_slave_1 removed
[  227.926815][ T8816] team0 (unregistering): Port device team_slave_0 removed
[  228.240600][ T9927] netlink: 'syz.1.912': attribute type 1 has an invalid length.
[  228.270442][ T8816] dummy0 (unregistering): left allmulticast mode
[  228.380921][   T40] audit: type=1804 audit(1766079784.167:1947): pid=9931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.911" name="/newroot/247/bus/bus" dev="overlay" ino=1326 res=1 errno=0
[  228.410102][ T9831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.434675][   T40] audit: type=1804 audit(1766079784.227:1948): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.911" name="/newroot/247/bus/bus" dev="overlay" ino=1326 res=1 errno=0
[  228.443938][   T40] audit: type=1800 audit(1766079784.227:1949): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.911" name="bus" dev="overlay" ino=1326 res=0 errno=0
[  228.952255][ T9946] binder: Bad value for 'stats'
[  228.970660][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  228.974543][ T9946] netlink: 'syz.0.915': attribute type 21 has an invalid length.
[  229.070767][ T9948] lo speed is unknown, defaulting to 1000
[  229.113940][ T9948] wlan0 speed is unknown, defaulting to 1000
[  229.247914][ T9831] veth0_vlan: entered promiscuous mode
[  229.258977][ T9831] veth1_vlan: entered promiscuous mode
[  229.303693][ T9831] veth0_macvtap: entered promiscuous mode
[  229.312591][ T9831] veth1_macvtap: entered promiscuous mode
[  229.321564][ T9831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.330694][ T9831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.341127][ T8793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.343849][ T9957] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  229.353989][ T8793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.356881][ T8793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.359663][ T8793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.363327][ T9957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'.
[  229.366368][ T9957] openvswitch: netlink: Flow key attr not present in new flow.
[  229.419886][ T9957] XFS (nbd2): SB validate failed with error -5.
[  229.544851][ T8793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.548214][ T8793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.555222][ T5950] Bluetooth: hci4: command 0x041b tx timeout
[  229.605651][ T8792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.612371][ T8792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.773403][ T9967] overlayfs: failed to resolve './file0': -2
[  229.801777][ T9967] overlayfs: failed to resolve './file0': -2
[  229.869187][ T9969] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  229.872262][ T9969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  229.877706][ T9969] vhci_hcd vhci_hcd.0: Device attached
[  230.251908][ T9983] lo speed is unknown, defaulting to 1000
[  230.255095][ T9983] wlan0 speed is unknown, defaulting to 1000
[  230.340863][ T9989] Invalid source name
[  230.342295][ T9989] UBIFS error (pid: 9989): cannot open "ubifs", error -22
[  230.779332][T10017] binder: Bad value for 'stats'
[  230.790750][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'.
[  230.794198][T10017] netlink: 'syz.2.927': attribute type 21 has an invalid length.
[  230.943106][T10018] lo speed is unknown, defaulting to 1000
[  230.950009][T10018] wlan0 speed is unknown, defaulting to 1000
[  231.309523][T10032] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  231.311860][T10032] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  231.335376][T10032] vhci_hcd vhci_hcd.0: Device attached
[  231.635128][ T5950] Bluetooth: hci4: command 0x041b tx timeout
[  232.025587][ T6007] usb 38-1: SetAddress Request (38) to port 0
[  232.028191][ T6007] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd
[  232.357358][ T9970] vhci_hcd: connection reset by peer
[  232.396601][ T8812] vhci_hcd vhci_hcd.1: stop threads
[  232.398471][ T8812] vhci_hcd vhci_hcd.1: release socket
[  232.401733][   T53] usb 40-1: device descriptor read/8, error -110
[  232.403808][ T8812] vhci_hcd vhci_hcd.1: disconnect device
[  232.608950][T10056] netlink: 'syz.1.936': attribute type 12 has an invalid length.
[  232.787151][   T53] usb usb40-port1: attempt power cycle
[  233.033771][T10060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.067596][T10025] netlink: 512 bytes leftover after parsing attributes in process `syz.0.930'.
[  233.073099][T10058] could not allocate digest TFM handle sha3-512-generic
[  233.083066][T10059] could not allocate digest TFM handle sha3-512-generic
[  233.349785][   T53] usb usb40-port1: unable to enumerate USB device
[  233.381497][T10033] vhci_hcd: connection reset by peer
[  233.384585][ T1142] vhci_hcd vhci_hcd.0: stop threads
[  233.387081][ T1142] vhci_hcd vhci_hcd.0: release socket
[  233.391905][ T1142] vhci_hcd vhci_hcd.0: disconnect device
[  233.465208][T10081] ptrace attach of ""[10082] was attempted by "/syz-executor exec"[10081]
[  233.579077][T10085] lo speed is unknown, defaulting to 1000
[  233.582861][T10085] wlan0 speed is unknown, defaulting to 1000
[  233.707438][ T5950] Bluetooth: hci4: command 0x041b tx timeout
[  233.847530][T10098] loop2: detected capacity change from 0 to 7
[  233.850643][T10098] Dev loop2: unable to read RDB block 7
[  233.852478][T10098]  loop2: unable to read partition table
[  233.854505][T10098] loop2: partition table beyond EOD, truncated
[  233.856681][T10098] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  234.073162][   T40] audit: type=1326 audit(1766079789.802:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd598 code=0x7ffc0000
[  234.094476][   T40] audit: type=1326 audit(1766079789.802:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd598 code=0x7ffc0000
[  234.114485][   T40] audit: type=1326 audit(1766079789.802:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000
[  234.157273][   T40] audit: type=1326 audit(1766079789.802:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd598 code=0x7ffc0000
[  234.165581][   T40] audit: type=1326 audit(1766079789.802:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd598 code=0x7ffc0000
[  234.187280][   T40] audit: type=1326 audit(1766079789.802:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf6ffd579 code=0x7ffc0000
[  234.195923][   T40] audit: type=1326 audit(1766079789.802:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd598 code=0x7ffc0000
[  234.217840][   T40] audit: type=1326 audit(1766079789.802:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000
[  234.257483][   T40] audit: type=1326 audit(1766079789.802:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000
[  234.265063][   T40] audit: type=1326 audit(1766079789.802:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.948" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd598 code=0x7ffc0000
[  234.424594][T10119] EXT4-fs (nbd1): unable to read superblock
[  234.476206][T10122] netlink: 'syz.5.953': attribute type 1 has an invalid length.
[  234.645079][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'.
[  234.677841][T10138] syzkaller1: tun_chr_ioctl cmd 1074025672
[  234.680954][T10138] syzkaller1: ignored: set checksum disabled
[  234.697073][T10138] netlink: 'syz.0.956': attribute type 10 has an invalid length.
[  234.701832][T10138] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  234.707615][T10137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.851797][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'.
[  234.895547][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'.
[  234.950805][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'.
[  235.100863][T10148] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  235.457498][T10169] netlink: 27 bytes leftover after parsing attributes in process `syz.2.963'.
[  235.510708][T10172] loop2: detected capacity change from 0 to 7
[  235.539653][T10172] Dev loop2: unable to read RDB block 7
[  235.542379][T10172]  loop2: unable to read partition table
[  235.544981][T10172] loop2: partition table beyond EOD, truncated
[  235.547923][T10172] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  235.788770][ T5950] Bluetooth: hci4: command 0x041b tx timeout
[  235.999016][ T6027] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  236.189142][ T6027] usb 7-1: Using ep0 maxpacket: 32
[  236.192315][ T6027] usb 7-1: config 0 has an invalid interface number: 19 but max is 0
[  236.194949][ T6027] usb 7-1: config 0 has no interface number 0
[  236.196897][ T6027] usb 7-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[  236.201850][T10166] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  236.206710][ T6027] usb 7-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[  236.210625][ T6027] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.219061][ T6027] usb 7-1: Product: syz
[  236.220574][ T6027] usb 7-1: Manufacturer: syz
[  236.222106][ T6027] usb 7-1: SerialNumber: syz
[  236.225011][ T6027] usb 7-1: config 0 descriptor??
[  236.228966][T10176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  236.254694][T10182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.410542][T10180] netlink: 84 bytes leftover after parsing attributes in process `syz.5.967'.
[  236.436360][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.441138][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.445197][ T6020] usb 7-1: USB disconnect, device number 11
[  236.913374][T10185] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  236.915417][T10185] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  236.917943][T10185] vhci_hcd vhci_hcd.0: Device attached
[  236.967318][T10179] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  237.012357][T10199] trusted_key: encrypted_key: insufficient parameters specified
[  237.126129][T10193] vhci_hcd: connection closed
[  237.126360][ T8797] vhci_hcd vhci_hcd.0: stop threads
[  237.131283][ T8797] vhci_hcd vhci_hcd.0: release socket
[  237.133370][ T8797] vhci_hcd vhci_hcd.0: disconnect device
[  237.189674][T10206] netlink: 32 bytes leftover after parsing attributes in process `syz.5.974'.
[  237.193248][T10206] openvswitch: netlink: Flow key attr not present in new flow.
[  237.233287][ T6007] usb 38-1: device descriptor read/8, error -110
[  237.621426][ T6007] usb usb38-port1: attempt power cycle
[  237.702088][ T8816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.704742][ T8816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.188003][ T6007] usb usb38-port1: unable to enumerate USB device
[  238.347173][T10230] lo speed is unknown, defaulting to 1000
[  238.351129][T10230] wlan0 speed is unknown, defaulting to 1000
[  238.588929][T10240] netlink: 'syz.2.983': attribute type 11 has an invalid length.
[  239.191806][ T6027] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  239.342018][ T6027] usb 7-1: Using ep0 maxpacket: 16
[  239.346296][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.351061][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.355343][ T6027] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  239.360634][ T6027] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  239.365211][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.370580][ T6027] usb 7-1: config 0 descriptor??
[  239.779953][T10252] random: crng reseeded on system resumption
[  239.788374][ T6027] input: HID 0955:7214 Haptics as /devices/virtual/input/input24
[  239.796939][ T6027] shield 0003:0955:7214.000C: Registered Thunderstrike controller
[  239.799492][ T6027] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  239.988888][ T7062] usb 7-1: USB disconnect, device number 12
[  239.995707][   T59] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  240.002060][ T7062] ------------[ cut here ]------------
[  240.003905][ T7062] workqueue: work disable count underflowed
[  240.006274][ T7062] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#3: kworker/3:7/7062
[  240.010182][ T7062] Modules linked in:
[  240.012234][ T7062] CPU: 3 UID: 0 PID: 7062 Comm: kworker/3:7 Not tainted syzkaller #0 PREEMPT(full) 
[  240.015931][ T7062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  240.020270][ T7062] Workqueue: usb_hub_wq hub_event
[  240.022457][ T7062] RIP: 0010:enable_work+0x2ca/0x310
[  240.024629][ T7062] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 c7 e6 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d d6 69 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 14 d0 a2 00 e9 f7 fd ff
[  240.032464][ T7062] RSP: 0018:ffffc9000482f348 EFLAGS: 00010093
[  240.035066][ T7062] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846933
[  240.038428][ T7062] RDX: ffff8880230d0000 RSI: ffffffff81846b03 RDI: ffffffff908bd4e0
[  240.041844][ T7062] RBP: ffff88806d22a738 R08: 0000000000000005 R09: 0000000000000000
[  240.045309][ T7062] R10: 0000000000000000 R11: ffff8880230d0b30 R12: 1ffff92000905e6a
[  240.048684][ T7062] R13: ffffffff8fc51cdf R14: ffff88806d22a698 R15: ffff88806d22a730
[  240.052099][ T7062] FS:  0000000000000000(0000) GS:ffff8880979fd000(0000) knlGS:0000000000000000
[  240.055761][ T7062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.058517][ T7062] CR2: 00000000f73445d8 CR3: 000000004c76c000 CR4: 0000000000352ef0
[  240.061521][ T7062] Call Trace:
[  240.062606][ T7062]  <TASK>
[  240.063597][ T7062]  ? __pfx_enable_work+0x10/0x10
[  240.065705][ T7062]  cancel_delayed_work_sync+0x96/0xf0
[  240.068038][ T7062]  thermal_zone_device_unregister+0x28e/0x4d0
[  240.070662][ T7062]  ? __pfx_shield_remove+0x10/0x10
[  240.072767][ T7062]  power_supply_unregister+0x10a/0x150
[  240.074904][ T7062]  shield_remove+0x75/0x130
[  240.076825][ T7062]  ? __pfx_shield_remove+0x10/0x10
[  240.078911][ T7062]  hid_device_remove+0xd1/0x260
[  240.080451][ T7062]  ? __pfx_hid_device_remove+0x10/0x10
[  240.082184][ T7062]  device_remove+0xcb/0x170
[  240.083641][ T7062]  device_release_driver_internal+0x44b/0x620
[  240.085925][ T7062]  bus_remove_device+0x22f/0x450
[  240.088086][ T7062]  device_del+0x396/0x9f0
[  240.089731][ T7062]  ? __pfx_device_del+0x10/0x10
[  240.091270][ T7062]  ? do_raw_spin_lock+0x12c/0x2b0
[  240.092854][ T7062]  hid_destroy_device+0x19c/0x240
[  240.094478][ T7062]  usbhid_disconnect+0xa0/0xe0
[  240.095986][ T7062]  usb_unbind_interface+0x1dd/0x9e0
[  240.097634][ T7062]  ? kernfs_remove_by_name_ns+0xbe/0x100
[  240.099433][ T7062]  ? __pfx_usb_unbind_interface+0x10/0x10
[  240.101216][ T7062]  device_remove+0x125/0x170
[  240.102675][ T7062]  device_release_driver_internal+0x44b/0x620
[  240.104622][ T7062]  bus_remove_device+0x22f/0x450
[  240.106180][ T7062]  device_del+0x396/0x9f0
[  240.107544][ T7062]  ? __pfx_device_del+0x10/0x10
[  240.109091][ T7062]  ? kobject_put+0x218/0x6f0
[  240.110549][ T7062]  usb_disable_device+0x355/0x820
[  240.112134][ T7062]  usb_disconnect+0x2e1/0x9e0
[  240.113645][ T7062]  hub_event+0x1d84/0x52f0
[  240.115099][ T7062]  ? __lock_acquire+0x436/0x2890
[  240.116647][ T7062]  ? do_raw_spin_unlock+0x172/0x230
[  240.118289][ T7062]  ? __pfx_hub_event+0x10/0x10
[  240.119785][ T7062]  ? interval_tree_iter_next+0x1a0/0x2e0
[  240.121559][ T7062]  ? finish_task_switch.isra.0+0x202/0xbd0
[  240.123423][ T7062]  ? rcu_is_watching+0x12/0xc0
[  240.124918][ T7062]  process_one_work+0x9ba/0x1b20
[  240.126488][ T7062]  ? __pfx_process_one_work+0x10/0x10
[  240.128174][ T7062]  ? assign_work+0x1a0/0x250
[  240.129655][ T7062]  worker_thread+0x6c8/0xf10
[  240.131165][ T7062]  ? __kthread_parkme+0x19e/0x250
[  240.132738][ T7062]  ? __pfx_worker_thread+0x10/0x10
[  240.134385][ T7062]  kthread+0x3c5/0x780
[  240.135672][ T7062]  ? __pfx_kthread+0x10/0x10
[  240.137130][ T7062]  ? rcu_is_watching+0x12/0xc0
[  240.138642][ T7062]  ? __pfx_kthread+0x10/0x10
[  240.140096][ T7062]  ret_from_fork+0x983/0xb10
[  240.141587][ T7062]  ? __pfx_ret_from_fork+0x10/0x10
[  240.143211][ T7062]  ? __switch_to+0x7af/0x10d0
[  240.144689][ T7062]  ? __pfx_kthread+0x10/0x10
[  240.146200][ T7062]  ret_from_fork_asm+0x1a/0x30
[  240.147709][ T7062]  </TASK>
[  240.148696][ T7062] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  240.150976][ T7062] CPU: 3 UID: 0 PID: 7062 Comm: kworker/3:7 Not tainted syzkaller #0 PREEMPT(full) 
[  240.153874][ T7062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  240.157201][ T7062] Workqueue: usb_hub_wq hub_event
[  240.158793][ T7062] Call Trace:
[  240.159859][ T7062]  <TASK>
[  240.160804][ T7062]  dump_stack_lvl+0x3d/0x1f0
[  240.162334][ T7062]  vpanic+0x640/0x6f0
[  240.163651][ T7062]  ? enable_work+0x2ca/0x310
[  240.165132][ T7062]  panic+0xca/0xd0
[  240.166335][ T7062]  ? __pfx_panic+0x10/0x10
[  240.167749][ T7062]  ? check_panic_on_warn+0x1f/0xb0
[  240.169314][ T7062]  check_panic_on_warn+0xab/0xb0
[  240.170874][ T7062]  __warn+0x108/0x3c0
[  240.172149][ T7062]  __report_bug+0x2a0/0x520
[  240.173622][ T7062]  ? enable_work+0x2ca/0x310
[  240.175083][ T7062]  ? __pfx___report_bug+0x10/0x10
[  240.176651][ T7062]  ? __wait_for_common+0x1e0/0x4e0
[  240.178320][ T7062]  ? enable_work+0x2c3/0x310
[  240.179777][ T7062]  ? enable_work+0xf3/0x310
[  240.181241][ T7062]  ? find_held_lock+0x2b/0x80
[  240.182728][ T7062]  report_bug_entry+0xe1/0x290
[  240.184258][ T7062]  ? enable_work+0x2ca/0x310
[  240.185731][ T7062]  handle_bug+0x18a/0x260
[  240.187098][ T7062]  exc_invalid_op+0x17/0x50
[  240.188527][ T7062]  asm_exc_invalid_op+0x1a/0x20
[  240.190065][ T7062] RIP: 0010:enable_work+0x2ca/0x310
[  240.191533][ T7062] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 c7 e6 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d d6 69 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 14 d0 a2 00 e9 f7 fd ff
[  240.197414][ T7062] RSP: 0018:ffffc9000482f348 EFLAGS: 00010093
[  240.199311][ T7062] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846933
[  240.201746][ T7062] RDX: ffff8880230d0000 RSI: ffffffff81846b03 RDI: ffffffff908bd4e0
[  240.204219][ T7062] RBP: ffff88806d22a738 R08: 0000000000000005 R09: 0000000000000000
[  240.206727][ T7062] R10: 0000000000000000 R11: ffff8880230d0b30 R12: 1ffff92000905e6a
[  240.209240][ T7062] R13: ffffffff8fc51cdf R14: ffff88806d22a698 R15: ffff88806d22a730
[  240.211705][ T7062]  ? enable_work+0xf3/0x310
[  240.213190][ T7062]  ? enable_work+0x2c3/0x310
[  240.214653][ T7062]  ? enable_work+0x2c3/0x310
[  240.216120][ T7062]  ? __pfx_enable_work+0x10/0x10
[  240.217689][ T7062]  cancel_delayed_work_sync+0x96/0xf0
[  240.219376][ T7062]  thermal_zone_device_unregister+0x28e/0x4d0
[  240.221303][ T7062]  ? __pfx_shield_remove+0x10/0x10
[  240.222915][ T7062]  power_supply_unregister+0x10a/0x150
[  240.224685][ T7062]  shield_remove+0x75/0x130
[  240.226118][ T7062]  ? __pfx_shield_remove+0x10/0x10
[  240.227725][ T7062]  hid_device_remove+0xd1/0x260
[  240.229265][ T7062]  ? __pfx_hid_device_remove+0x10/0x10
[  240.230965][ T7062]  device_remove+0xcb/0x170
[  240.232407][ T7062]  device_release_driver_internal+0x44b/0x620
[  240.234343][ T7062]  bus_remove_device+0x22f/0x450
[  240.235881][ T7062]  device_del+0x396/0x9f0
[  240.237250][ T7062]  ? __pfx_device_del+0x10/0x10
[  240.238776][ T7062]  ? do_raw_spin_lock+0x12c/0x2b0
[  240.240438][ T7062]  hid_destroy_device+0x19c/0x240
[  240.242048][ T7062]  usbhid_disconnect+0xa0/0xe0
[  240.243578][ T7062]  usb_unbind_interface+0x1dd/0x9e0
[  240.245220][ T7062]  ? kernfs_remove_by_name_ns+0xbe/0x100
[  240.246976][ T7062]  ? __pfx_usb_unbind_interface+0x10/0x10
[  240.248756][ T7062]  device_remove+0x125/0x170
[  240.250223][ T7062]  device_release_driver_internal+0x44b/0x620
[  240.252117][ T7062]  bus_remove_device+0x22f/0x450
[  240.253679][ T7062]  device_del+0x396/0x9f0
[  240.255056][ T7062]  ? __pfx_device_del+0x10/0x10
[  240.256622][ T7062]  ? kobject_put+0x218/0x6f0
[  240.258110][ T7062]  usb_disable_device+0x355/0x820
[  240.259730][ T7062]  usb_disconnect+0x2e1/0x9e0
[  240.261248][ T7062]  hub_event+0x1d84/0x52f0
[  240.262656][ T7062]  ? __lock_acquire+0x436/0x2890
[  240.264224][ T7062]  ? do_raw_spin_unlock+0x172/0x230
[  240.265869][ T7062]  ? __pfx_hub_event+0x10/0x10
[  240.267372][ T7062]  ? interval_tree_iter_next+0x1a0/0x2e0
[  240.269130][ T7062]  ? finish_task_switch.isra.0+0x202/0xbd0
[  240.270974][ T7062]  ? rcu_is_watching+0x12/0xc0
[  240.272523][ T7062]  process_one_work+0x9ba/0x1b20
[  240.274130][ T7062]  ? __pfx_process_one_work+0x10/0x10
[  240.275817][ T7062]  ? assign_work+0x1a0/0x250
[  240.277288][ T7062]  worker_thread+0x6c8/0xf10
[  240.278751][ T7062]  ? __kthread_parkme+0x19e/0x250
[  240.280337][ T7062]  ? __pfx_worker_thread+0x10/0x10
[  240.281964][ T7062]  kthread+0x3c5/0x780
[  240.283284][ T7062]  ? __pfx_kthread+0x10/0x10
[  240.284745][ T7062]  ? rcu_is_watching+0x12/0xc0
[  240.286293][ T7062]  ? __pfx_kthread+0x10/0x10
[  240.287756][ T7062]  ret_from_fork+0x983/0xb10
[  240.289216][ T7062]  ? __pfx_ret_from_fork+0x10/0x10
[  240.290810][ T7062]  ? __switch_to+0x7af/0x10d0
[  240.292281][ T7062]  ? __pfx_kthread+0x10/0x10
[  240.293744][ T7062]  ret_from_fork_asm+0x1a/0x30
[  240.295275][ T7062]  </TASK>
[  240.296970][ T7062] Kernel Offset: disabled
[  240.298351][ T7062] Rebooting in 86400 seconds..