last executing test programs:

25.429689265s ago: executing program 4 (id=902):
io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @null, 0x0, [@default, @rose, @netrom, @bcast, @bcast, @null]}, &(0x7f0000000500)=0x40, 0x800)
listen(r0, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='wbt_timer\x00', r1}, 0x18)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
prctl$PR_SET_THP_DISABLE(0x29, 0x400000000000000)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=','])
syz_fuse_handle_req(r3, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114cfa48d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243f43787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f5896d42c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc62a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x8, 0x5, 0x0, {0x5, 0x7, 0x0, 0x80000001, 0x40000000000003, 0x1, 0x9ec, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0x9e7, 0xffffffffffffffff, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x110021, 0x0)
write$FUSE_INIT(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004000000040b00002a0000000000350ba9a729f36c0000d4ce3766e9219d430cd7e8999e029a53ac2287d610420d0961e0094976e2f6d618ddae0f701bb3ba69d8d50775840c2d203c5cdca695eb6e7ebcee68d96598231eb105a7617428e906c58f826ea74b55d84f18f508721061fbf726099708492b62f574d6e791ea7e37b7b91f8d265c71cadf26c77cc1b8666b2c8ed433fb838fcaa534a34ab9d7cb2236acdd2198153faf4f480614e3ee", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16=r1], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
rename(0x0, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c)
r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0x0)
r8 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r8, 0xc0046d00, &(0x7f0000001500))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000003fb900850000000c000000b700000000000000950000000000000046be2df23cdbe5a4edf238e9a05760e03b9836409c6c9c8304b65f8f4043bb5057ee51316e6575379334057e9d"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)

24.191413459s ago: executing program 5 (id=906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{0x0}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000040)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecd", 0x19}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0)

23.693215144s ago: executing program 5 (id=907):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048051}, 0x2c008088)
fsopen(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x8015625}]}}]}, 0x3c}}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9, 0xfff8}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1625eb43203f8fb6}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

21.27488968s ago: executing program 4 (id=916):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r1, 0x0, 0xc19)

20.40037478s ago: executing program 4 (id=917):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

19.244442929s ago: executing program 5 (id=920):
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc"], &(0x7f0000000140)='syzkaller\x00'}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb", 0x1d}], 0x2)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r5, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/53, 0x35, 0x0, 0x7f, 0xfffffffe, 0x0, 0x803}}, 0x11c)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f0000000880)=""/242, 0xf2}, {&(0x7f0000000980)=""/84, 0x54}], 0x8, &(0x7f0000000d00)=[@rdma_args={0x48, 0x114, 0x1, {{0x2a, 0x3fffff}, {&(0x7f0000000a00)=""/197, 0xc5}, &(0x7f0000000440)=[{&(0x7f0000000b00)=""/224, 0xe0}], 0x1, 0x44, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x400, 0x81}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xc}, &(0x7f0000000800)=0x3, &(0x7f0000000cc0)=0x5, 0x6, 0x578d, 0x8, 0x5, 0x58, 0x8001}}], 0xb8, 0x40008080}, 0x20040080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000800)='contention_end\x00', r0}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)

19.229385909s ago: executing program 4 (id=921):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x416400)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x5e00, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x4, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffd4e, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="ec002cbd700205000000050000000600016feedaef924f5a25c82226000000000008000c00ac0a000008000900020000000500120006"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)

18.821840208s ago: executing program 2 (id=936):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046})

17.944769657s ago: executing program 2 (id=923):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]})
mkdir(0x0, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40048820)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setrlimit(0x1e3d50de03aa3d1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x200000000000000)

16.224586174s ago: executing program 2 (id=924):
fsopen(&(0x7f0000000080)='squashfs\x00', 0x1)
fsopen(&(0x7f0000000680)='erofs\x00', 0x1)
openat$nvram(0xffffffffffffff9c, &(0x7f0000002080), 0x8ac3094c6a9c458c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x14cd)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x7f})
r3 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
ptrace$peekuser(0x3, 0x0, 0x9)
r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002)
sendfile(r5, r5, 0x0, 0x200000)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x1, 0x65, 0x80, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

12.668441456s ago: executing program 0 (id=931):
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x87)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)

11.049114732s ago: executing program 2 (id=932):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x0, 0x100000000000000, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x5, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)

11.048541604s ago: executing program 3 (id=934):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000631000000000000062000200000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe64}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000038e8ce58970012800e000200697036657273706100050000000000000000000000000000000001040012000500040000000000"], 0x58}}, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)

11.048156848s ago: executing program 4 (id=935):
fsopen(&(0x7f0000000080)='squashfs\x00', 0x1)
fsopen(&(0x7f0000000680)='erofs\x00', 0x1)
openat$nvram(0xffffffffffffff9c, &(0x7f0000002080), 0x8ac3094c6a9c458c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x14cd)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x7f})
r3 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
ptrace$peekuser(0x3, 0x0, 0x9)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r4, 0x0, 0x200000)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x1, 0x65, 0x80, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

9.858602143s ago: executing program 0 (id=937):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000018000100fdffffff00000000020000000002030900000000080005000a01010108001e0047f80000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
r3 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000024, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

9.858009683s ago: executing program 5 (id=938):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00')
lseek(r2, 0x9, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r7, 0x4b46, &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)
sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0)

9.72222808s ago: executing program 3 (id=939):
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x1400037e)
timerfd_create(0x7, 0x800)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x30, 0x0, 0x1}, 0x28)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10)
pipe2$watch_queue(&(0x7f0000002000), 0x80)
r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', 0x0)
userfaultfd(0x80801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00')
pread64(r2, &(0x7f0000002140)=""/1, 0x1, 0x80000001)

9.695851586s ago: executing program 1 (id=940):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4010)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="0524060000000001300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a00000308000000", @ANYRES32=0x0, @ANYBLOB="d447c8ed4c66000cea0069d9e341b2846df9b89836c7b143b2385ed5aec69e13a4d26028c49f175c6747c16d68145da295985113df81ed9483f12ac366db87a065cd416881ccef8540eabaf5780c3919161354d20f5193bc5c3d8bf1907434cf81f26bc862d95e"], 0x1c}}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

9.678085179s ago: executing program 2 (id=941):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x416400)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x5e00, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x4, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffd4e, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x2}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="ec002cbd700205000000050000000600016feedaef924f5a25c82226000000000008000c00ac0a000008000900020000000500120006"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)

7.356045994s ago: executing program 3 (id=942):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000040)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecd", 0x19}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0)

6.902427241s ago: executing program 1 (id=943):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

6.842636892s ago: executing program 0 (id=944):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

6.397206393s ago: executing program 1 (id=945):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

6.27137499s ago: executing program 3 (id=946):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0003bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)

4.913311977s ago: executing program 3 (id=947):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
io_uring_setup(0x14c, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

4.912102708s ago: executing program 0 (id=959):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000631000000000000062000200000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe64}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

4.583759403s ago: executing program 1 (id=948):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000080)=0x3)
ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00'})
socket$netlink(0x10, 0x3, 0x0)

4.517070597s ago: executing program 5 (id=949):
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x3, 0x8, 0x3, 0x3, 0x10001})
r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x8341, 0x0)
write$nbd(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x40)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
getrlimit(0x7, &(0x7f0000000180))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a"], 0x7c}}, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
fstat(r4, &(0x7f0000000500))
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0x6, 0x8, 0x7, 0xa, 0x100, 0x2, 0x4, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x3, 0x81, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

3.741401487s ago: executing program 5 (id=950):
fsopen(&(0x7f0000000080)='squashfs\x00', 0x1)
fsopen(&(0x7f0000000680)='erofs\x00', 0x1)
openat$nvram(0xffffffffffffff9c, &(0x7f0000002080), 0x8ac3094c6a9c458c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x14cd)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x7f})
r3 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
ptrace$peekuser(0x3, 0x0, 0x9)
r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002)
sendfile(r5, r5, 0x0, 0x200000)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x1, 0x65, 0x80, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

3.740119609s ago: executing program 3 (id=963):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)

3.737686641s ago: executing program 4 (id=951):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00')
lseek(r2, 0x9, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x64000ba6)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r6, 0x4b46, &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)
sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0)

3.699688048s ago: executing program 0 (id=952):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
r3 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000024, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1.593978838s ago: executing program 0 (id=953):
fsopen(&(0x7f0000000080)='squashfs\x00', 0x1)
fsopen(&(0x7f0000000680)='erofs\x00', 0x1)
openat$nvram(0xffffffffffffff9c, &(0x7f0000002080), 0x8ac3094c6a9c458c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x14cd)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x7f})
socket$nl_generic(0x11, 0x3, 0x10)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
ptrace$peekuser(0x3, 0x0, 0x9)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r3, 0x0, 0x200000)
socket$inet_mptcp(0x2, 0x1, 0x106)

968.79104ms ago: executing program 1 (id=954):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ff7f0000000000000d00000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20)

473.137647ms ago: executing program 2 (id=955):
openat$sndseq(0xffffff9c, &(0x7f0000000380), 0x181400)
syz_io_uring_setup(0x890, 0x0, &(0x7f00000000c0), &(0x7f0000000040))
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)

0s ago: executing program 1 (id=956):
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc"], &(0x7f0000000140)='syzkaller\x00'}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb", 0x1d}], 0x2)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/53, 0x35, 0x0, 0x7f, 0xfffffffe, 0x0, 0x803}}, 0x11c)

kernel console output (not intermixed with test programs):

nux-mm@kvack.org if you depend on this functionality.
[  112.343304][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.355111][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.365375][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.380424][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.383015][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.393916][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.521349][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.550610][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.598726][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[  112.610397][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.618647][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.629542][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  112.691934][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.731831][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  112.750547][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.019578][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.029015][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.037750][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.046627][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  113.255966][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.303187][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.378993][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.423829][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.468976][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.495500][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.614213][ T5869] veth0_macvtap: entered promiscuous mode
[  113.624531][ T5874] veth0_vlan: entered promiscuous mode
[  113.657805][ T5869] veth1_macvtap: entered promiscuous mode
[  113.719936][ T5874] veth1_vlan: entered promiscuous mode
[  113.813056][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.875810][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.987558][ T6007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.990361][ T5972] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  114.000065][ T6007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.026660][ T5874] veth0_macvtap: entered promiscuous mode
[  114.043163][ T6007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.062491][ T6007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.088757][ T5874] veth1_macvtap: entered promiscuous mode
[  114.098528][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.125133][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.180801][ T5972] usb 1-1: Using ep0 maxpacket: 8
[  114.195225][ T5972] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  114.211836][ T5972] usb 1-1: config 0 has no interface number 0
[  114.218126][ T5972] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  114.229755][ T5972] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  114.293211][ T5972] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  114.310620][ T5972] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  114.324396][ T5972] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  114.334297][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.355756][ T5972] usb 1-1: config 0 descriptor??
[  114.416072][ T6018] debugfs: 'ttyS3' already exists in 'caif_serial'
[  114.456299][ T5972] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  114.642903][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.672996][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.686966][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.728070][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.830588][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.985875][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.299282][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.344864][  T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.360858][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.376841][  T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.429128][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.568366][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.589662][ T6033] debugfs: 'ttyS3' already exists in 'caif_serial'
[  116.288591][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.313117][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.423619][ T6049] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.684668][ T6054] bond_slave_0: entered promiscuous mode
[  116.690494][ T6054] bond_slave_1: entered promiscuous mode
[  116.754399][ T6054] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  116.765279][ T6054] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  116.879906][ T5940] usb 1-1: USB disconnect, device number 2
[  116.990478][ T5966] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  116.994413][ T5940] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  117.177495][ T5966] usb 3-1: Using ep0 maxpacket: 8
[  117.209249][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.227654][ T5966] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  117.281843][ T5966] usb 3-1: config 0 has no interface number 0
[  117.287957][ T5966] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  117.310004][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.428355][ T6071] loop0: detected capacity change from 0 to 256
[  117.443111][ T6071] =======================================================
[  117.443111][ T6071] WARNING: The mand mount option has been deprecated and
[  117.443111][ T6071]          and is ignored by this kernel. Remove the mand
[  117.443111][ T6071]          option from the mount to silence this warning.
[  117.443111][ T6071] =======================================================
[  118.196836][ T5966] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  118.209449][ T5966] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  118.220468][ T5966] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  118.233879][ T5966] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  118.243207][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.254936][ T5966] usb 3-1: config 0 descriptor??
[  118.305699][ T5966] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  118.490310][ T6077] loop4: detected capacity change from 0 to 256
[  119.390422][ T5940] usb 3-1: USB disconnect, device number 2
[  119.639065][ T5940] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  119.744868][ T6084] loop1: detected capacity change from 0 to 128
[  120.452482][ T6084] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  120.600858][ T6084] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  121.666272][ T6094] 9pnet_virtio: no channels available for device syz
[  124.318938][ T6126] Zero length message leads to an empty skb
[  124.360749][ T6126] netlink: 76 bytes leftover after parsing attributes in process `syz.4.26'.
[  124.390528][ T5919] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  125.557814][ T6128] comedi comedi3: reset error (fatal)
[  125.596072][ T5919] usb 6-1: Using ep0 maxpacket: 8
[  125.664800][ T5919] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  125.748351][ T5919] usb 6-1: config 0 has no interface number 0
[  125.760683][ T5919] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  125.801395][ T5919] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  125.920783][ T5919] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  126.050726][ T6140] loop3: detected capacity change from 0 to 256
[  126.860221][ T5919] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  126.881329][ T6141] Invalid ELF header type: 3 != 1
[  126.946572][ T5919] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  127.027851][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.120506][ T5919] usb 6-1: config 0 descriptor??
[  127.202415][ T6145] netlink: 56 bytes leftover after parsing attributes in process `syz.2.30'.
[  127.245313][ T5919] usb 6-1: can't set config #0, error -71
[  127.298977][ T5919] usb 6-1: USB disconnect, device number 2
[  127.522071][ T6149] bpq0: entered promiscuous mode
[  127.552925][ T6151] netlink: 'syz.5.33': attribute type 10 has an invalid length.
[  128.078531][ T6151] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  131.800209][ T6186] comedi comedi3: reset error (fatal)
[  132.579472][ T6197] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  132.745524][ T6200] loop2: detected capacity change from 0 to 256
[  133.574400][ T6197] Bluetooth: MGMT ver 1.23
[  133.582877][ T6197] netlink: 'syz.0.46': attribute type 1 has an invalid length.
[  133.637093][ T6203] netlink: 56 bytes leftover after parsing attributes in process `syz.5.48'.
[  134.556503][ T6206] C: renamed from team_slave_0 (while UP)
[  134.619664][ T6206] netlink: 'syz.0.46': attribute type 3 has an invalid length.
[  134.714036][ T6206] netlink: 152 bytes leftover after parsing attributes in process `syz.0.46'.
[  134.724186][ T6206] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  134.951076][ T6214] netlink: 'syz.3.51': attribute type 10 has an invalid length.
[  136.553344][ T6214] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  137.930225][ T6238] comedi comedi3: reset error (fatal)
[  138.524107][ T6253] Invalid ELF header type: 3 != 1
[  138.705461][ T6258] loop2: detected capacity change from 0 to 256
[  140.221863][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'.
[  140.335158][ T6265] vxlan0: entered promiscuous mode
[  140.413258][ T6046] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.571124][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  140.611157][   T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.669111][   T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.717876][   T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.770315][   T10] usb 4-1: Using ep0 maxpacket: 8
[  140.782719][   T10] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  140.792369][   T10] usb 4-1: config 0 has no interface number 0
[  140.799698][   T10] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  140.843290][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  140.852890][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.863410][   T10] usb 4-1: Product: syz
[  140.873900][   T10] usb 4-1: Manufacturer: syz
[  140.907263][   T10] usb 4-1: SerialNumber: syz
[  141.014557][   T10] usb 4-1: config 0 descriptor??
[  141.449500][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'.
[  142.651305][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  142.657755][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  142.746570][   T10] msi2500 4-1:0.246: Registered as swradio24
[  142.756154][   T10] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  142.997315][ T6288] netlink: 'syz.1.70': attribute type 10 has an invalid length.
[  143.443605][ T6288] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  144.422603][ T6308] fuse: Bad value for 'fd'
[  144.605010][   T10] usb 4-1: USB disconnect, device number 2
[  145.070774][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'.
[  146.931419][ T6332] netlink: 'syz.4.80': attribute type 4 has an invalid length.
[  146.975720][ T6332] netlink: 17 bytes leftover after parsing attributes in process `syz.4.80'.
[  149.094876][ T6360] netlink: 'syz.5.87': attribute type 10 has an invalid length.
[  149.223638][ T6363] fuse: Bad value for 'fd'
[  149.281146][ T6368] Invalid ELF header type: 3 != 1
[  150.258426][ T6380] loop2: detected capacity change from 0 to 256
[  151.548762][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'.
[  151.583933][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[  151.847364][ T6393] vxlan0: entered promiscuous mode
[  151.880996][ T5971] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.925318][ T5971] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.008752][ T5971] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.051281][ T5971] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  153.253554][ T6404] comedi comedi3: reset error (fatal)
[  154.633886][ T6427] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  154.740486][ T6427] block device autoloading is deprecated and will be removed.
[  154.916530][ T6432] loop1: detected capacity change from 0 to 128
[  154.986997][ T6432] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  155.050524][ T6432] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  156.397122][ T5951] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  156.637140][ T6445] loop5: detected capacity change from 0 to 256
[  157.510316][ T5951] usb 3-1: Using ep0 maxpacket: 8
[  157.536256][ T5951] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  157.574858][ T5951] usb 3-1: config 0 has no interface number 0
[  157.628488][ T5951] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  157.717830][ T5951] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  157.789626][ T5951] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  158.018743][ T5951] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  158.148447][ T5951] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  158.230469][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.281509][ T5951] usb 3-1: config 0 descriptor??
[  158.309045][ T5951] usb 3-1: can't set config #0, error -71
[  158.389616][ T5951] usb 3-1: USB disconnect, device number 3
[  159.530217][ T6458] comedi comedi3: reset error (fatal)
[  161.828826][ T6487] loop3: detected capacity change from 0 to 128
[  161.903347][ T6487] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  161.942110][ T6487] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  162.287364][ T6483] md2: using deprecated bitmap file support
[  162.362405][ T6483] md2: error: failed to get bitmap file
[  162.503146][ T6495] loop5: detected capacity change from 0 to 256
[  164.326963][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'.
[  164.917144][  T915] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  164.940509][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.123'.
[  164.989170][  T915] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  165.122890][  T915] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  166.220236][ T6508] comedi comedi3: reset error (fatal)
[  166.348015][  T915] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  166.366769][ T5972] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  166.382282][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.127'.
[  166.410347][  T915] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  166.419277][ T5972] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  166.429497][  T915] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  166.508526][ T5972] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  166.553985][  T915] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  166.674170][ T5972] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  166.696073][  T915] hid-generic 0000:007F:FFFFFFFE.0001: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  169.598160][ T6532] loop1: detected capacity change from 0 to 256
[  172.132294][ T6552] bpq0: left promiscuous mode
[  172.467410][ T6557] loop5: detected capacity change from 0 to 128
[  172.660934][ T6557] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  172.778037][ T6557] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  174.241925][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout
[  174.431790][ T6546] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  174.548152][ T6546] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  174.800823][ T6546] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  174.985814][ T6546] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  176.040208][ T6578] comedi comedi3: reset error (fatal)
[  176.069957][ T6546] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  176.275185][ T6546] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  176.432817][ T6546] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  176.489844][ T6546] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  176.575224][ T6546] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  176.600364][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout
[  176.686331][ T6546] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  176.709822][ T6546] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  176.761751][ T6546] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  176.790517][ T6546] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  176.816490][ T6546] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  176.886955][ T6546] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  176.954099][ T6546] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  176.983254][ T6546] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  177.001223][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout
[  177.094722][ T6546] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  177.562914][ T5955] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  177.812597][ T6600] 9pnet_virtio: no channels available for device syz
[  178.670340][ T5955] usb 1-1: device not accepting address 3, error -71
[  178.710519][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout
[  178.727611][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout
[  178.750293][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout
[  178.853250][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout
[  179.012409][ T5870] Bluetooth: hci5: command 0x0c1a tx timeout
[  179.080307][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout
[  179.167348][ T5954] hid_parser_main: 96 callbacks suppressed
[  179.167378][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  179.193494][ T6615] devpts: Bad value for 'max'
[  179.232575][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.148'.
[  179.290305][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  179.305373][ T6615] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  179.360847][ T6615] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  179.489588][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  179.534754][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  179.636558][ T6615] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  179.683097][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  179.702760][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  179.720416][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  179.728158][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  179.777534][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  179.888914][ T6615] overlayfs: failed to look up (tracing) for ino (-66)
[  180.072348][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  180.130291][ T5951] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  180.381840][ T5954] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  180.481125][ T5951] usb 2-1: Using ep0 maxpacket: 8
[  180.701835][ T5951] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  180.710039][ T5951] usb 2-1: config 0 has no interface number 0
[  180.760472][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout
[  180.840296][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout
[  180.931931][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout
[  181.083045][ T6638] loop5: detected capacity change from 0 to 128
[  181.099841][ T5870] Bluetooth: hci5: command 0x0c1a tx timeout
[  181.133096][ T6638] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  181.170678][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout
[  181.200324][  T915] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  181.349184][ T5951] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  181.349672][ T6638] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  181.502362][ T5951] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  182.507265][  T915] usb 4-1: Using ep0 maxpacket: 8
[  182.550239][ T6642] comedi comedi3: reset error (fatal)
[  182.798087][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.816420][ T5951] usb 2-1: Product: syz
[  182.826528][ T5951] usb 2-1: Manufacturer: syz
[  182.872243][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout
[  182.930256][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout
[  182.957725][  T915] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  183.009643][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout
[  183.160900][ T5870] Bluetooth: hci5: command 0x0c1a tx timeout
[  183.250341][  T915] usb 4-1: config 0 has no interface number 0
[  183.256490][  T915] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  183.267948][ T5951] usb 2-1: SerialNumber: syz
[  183.287614][ T5951] usb 2-1: config 0 descriptor??
[  183.607971][ T6648] netlink: 'syz.4.157': attribute type 4 has an invalid length.
[  183.615687][ T6648] netlink: 17 bytes leftover after parsing attributes in process `syz.4.157'.
[  184.540296][ T5954] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  184.861048][ T5954] usb 3-1: Using ep0 maxpacket: 8
[  185.954632][  T915] usb 4-1: string descriptor 0 read error: -71
[  185.984490][  T915] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  186.040364][  T915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.203188][  T915] usb 4-1: config 0 descriptor??
[  186.251200][  T915] usb 4-1: can't set config #0, error -71
[  186.304088][ T5951] usb 2-1: can't set config #0, error -71
[  186.320386][  T915] usb 4-1: USB disconnect, device number 3
[  186.347944][ T5951] usb 2-1: USB disconnect, device number 2
[  187.022089][ T6671] 9pnet_virtio: no channels available for device syz
[  188.297663][ T6684] 9pnet_virtio: no channels available for device syz
[  188.593233][ T6687] loop0: detected capacity change from 0 to 256
[  189.795735][ T5954] usb 3-1: device descriptor read/all, error -71
[  189.966151][ T6689] 9pnet_virtio: no channels available for device syz
[  190.491751][ T6693] loop1: detected capacity change from 0 to 128
[  190.556730][ T6693] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  190.667243][ T6699] Invalid ELF header type: 3 != 1
[  190.723255][ T6693] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  191.960237][ T6703] comedi comedi3: reset error (fatal)
[  192.080474][ T6706] netlink: 'syz.4.174': attribute type 10 has an invalid length.
[  192.347924][ T6706] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  192.431180][ T6706] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  193.960916][ T5963] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  194.241701][ T5963] usb 3-1: Using ep0 maxpacket: 8
[  194.283173][ T5963] usb 3-1: config 0 has an invalid interface number: 246 but max is 0
[  194.310414][ T5963] usb 3-1: config 0 has no interface number 0
[  194.346801][ T5963] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  194.464961][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'.
[  195.049161][ T5963] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  195.058757][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.067442][ T5963] usb 3-1: Product: syz
[  195.071899][ T5963] usb 3-1: Manufacturer: syz
[  195.076501][ T5963] usb 3-1: SerialNumber: syz
[  195.168397][ T5963] usb 3-1: config 0 descriptor??
[  195.294356][ T6735] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  195.550023][ T6743] loop5: detected capacity change from 0 to 256
[  196.772157][ T6753] netlink: 'syz.3.182': attribute type 4 has an invalid length.
[  196.779827][ T6753] netlink: 17 bytes leftover after parsing attributes in process `syz.3.182'.
[  197.371005][ T5963] msi2500 3-1:0.246: Registered as swradio24
[  197.377043][ T5963] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  198.540349][ T5963] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  198.738841][ T5963] usb 2-1: Using ep0 maxpacket: 8
[  198.752874][ T5963] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  198.795377][ T5963] usb 2-1: config 0 has no interface number 0
[  198.860671][ T5963] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  198.907817][ T5963] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  198.928103][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.953125][ T5963] usb 2-1: Product: syz
[  198.957321][ T5963] usb 2-1: Manufacturer: syz
[  198.980303][ T5963] usb 2-1: SerialNumber: syz
[  199.002116][ T5963] usb 2-1: config 0 descriptor??
[  199.471026][ T5963] videodev: could not get a free minor
[  199.487698][ T5963] msi2500 2-1:0.246: Failed to register as video device (-23)
[  199.536246][   T24] usb 3-1: USB disconnect, device number 6
[  199.607401][ T5963] msi2500 2-1:0.246: probe with driver msi2500 failed with error -23
[  201.520678][ T6786] bpq0: entered promiscuous mode
[  203.525759][ T6816] netlink: 'syz.5.199': attribute type 4 has an invalid length.
[  203.533542][ T6816] netlink: 17 bytes leftover after parsing attributes in process `syz.5.199'.
[  203.870842][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  203.889972][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  203.901213][   T24] hid_parser_main: 43 callbacks suppressed
[  203.901234][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  204.140412][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.198'.
[  204.333862][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  205.756445][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  205.785549][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  205.828035][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  205.904978][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  205.949527][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  205.989015][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  206.056492][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  206.070324][   T24] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  206.100416][   T24] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  206.100723][ T5963] usb 2-1: USB disconnect, device number 3
[  206.555007][ T6830] fido_id[6830]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  206.696508][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.204'.
[  206.760734][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'.
[  209.059696][ T6858] loop5: detected capacity change from 0 to 256
[  210.378483][ T6864] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  210.453255][ T6866] netlink: 'syz.4.215': attribute type 10 has an invalid length.
[  210.660409][ T5951] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  210.794495][ T6869] debugfs: 'ttyS3' already exists in 'caif_serial'
[  210.902433][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.931109][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.023789][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  211.058479][ T5951] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  211.091275][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.129952][ T5951] usb 3-1: config 0 descriptor??
[  212.400215][ T6872] comedi comedi3: reset error (fatal)
[  212.521527][ T5951] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  212.714777][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'.
[  212.798211][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'.
[  214.261953][ T5951] usb 3-1: reset high-speed USB device number 7 using dummy_hcd
[  214.558732][ T6897] Invalid ELF header type: 3 != 1
[  215.428472][   T24] usb 3-1: USB disconnect, device number 7
[  215.490838][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  215.670585][ T5955] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  215.678156][   T10] usb 2-1: Using ep0 maxpacket: 8
[  215.691131][   T10] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  215.699469][   T10] usb 2-1: config 0 has no interface number 0
[  215.740138][   T10] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  215.779966][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  215.809546][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.828255][   T10] usb 2-1: Product: syz
[  215.868378][   T10] usb 2-1: Manufacturer: syz
[  215.873418][ T5955] usb 1-1: Using ep0 maxpacket: 8
[  215.896595][ T5955] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  215.907349][ T5955] usb 1-1: config 0 has no interface number 0
[  215.930408][ T5955] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  215.941681][   T10] usb 2-1: SerialNumber: syz
[  215.968674][   T10] usb 2-1: config 0 descriptor??
[  215.979721][ T5955] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  216.036896][ T5955] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  216.087344][ T5955] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  216.151117][ T5955] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  216.292344][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.369431][ T5955] usb 1-1: config 0 descriptor??
[  216.383469][   T10] msi2500 2-1:0.246: Registered as swradio24
[  216.426484][ T5955] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  216.441496][   T10] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  216.850698][   T10] usb 1-1: USB disconnect, device number 5
[  216.927303][   T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  217.804064][ T5972] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  218.309328][   T10] usb 2-1: USB disconnect, device number 4
[  218.334046][ T5972] usb 4-1: Using ep0 maxpacket: 8
[  218.395793][ T5972] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  218.420242][ T5972] usb 4-1: config 0 has no interface number 0
[  218.426957][ T5972] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  218.629970][ T6927] loop5: detected capacity change from 0 to 256
[  219.483212][ T5972] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  219.560292][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.598272][ T5972] usb 4-1: Product: syz
[  219.609577][ T5972] usb 4-1: Manufacturer: syz
[  219.630494][ T5972] usb 4-1: SerialNumber: syz
[  219.656554][ T6929] netlink: 'syz.0.230': attribute type 10 has an invalid length.
[  219.670170][ T5972] usb 4-1: config 0 descriptor??
[  220.019106][ T6929] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  221.081830][ T6936] comedi comedi3: reset error (fatal)
[  221.793224][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'.
[  221.872041][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[  222.925196][ T6950] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  222.934186][ T6950] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  222.940833][ T6950] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  222.951783][ T6950] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  223.140684][ T6950] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  223.164765][ T6950] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  223.298510][ T6956] bpq0: left promiscuous mode
[  224.677611][ T5972] usb 4-1: can't set config #0, error -71
[  224.692800][ T5972] usb 4-1: USB disconnect, device number 4
[  225.096463][ T6972] 9pnet_virtio: no channels available for device syz
[  225.131798][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout
[  225.138002][ T5859] Bluetooth: hci2: command 0x0c1a tx timeout
[  225.144259][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout
[  225.144422][ T5177] Bluetooth: hci0: command 0x0c1a tx timeout
[  225.256268][ T5177] Bluetooth: hci5: command 0x0c1a tx timeout
[  225.263020][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout
[  225.289237][ T6971] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  226.172435][ T6978] bpq0: entered promiscuous mode
[  227.452524][ T6989] loop1: detected capacity change from 0 to 256
[  228.740230][ T6991] comedi comedi3: reset error (fatal)
[  229.167282][ T6997] netlink: 'syz.2.248': attribute type 10 has an invalid length.
[  229.168746][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'.
[  229.184182][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'.
[  229.424216][ T7010] 9pnet_virtio: no channels available for device syz
[  229.864207][ T6997] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  230.538463][ T7018] bpq0: left promiscuous mode
[  231.660914][ T7035] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  233.370945][ T7048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.258'.
[  233.394567][ T5954] hid_parser_main: 43 callbacks suppressed
[  233.394589][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  233.500858][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  233.725649][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  233.865213][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  234.130061][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  234.350289][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  234.440837][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  234.731062][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  234.840642][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  234.990316][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0
[  235.150894][ T5954] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  237.130249][ T7072] comedi comedi3: reset error (fatal)
[  237.543372][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'.
[  237.590391][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[  237.791152][ T7082] netlink: 'syz.4.267': attribute type 10 has an invalid length.
[  237.996247][ T7087] bpq0: entered promiscuous mode
[  238.440502][ T5954] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  238.710859][ T7093] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  238.717501][ T7093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  238.735140][ T5954] usb 6-1: Using ep0 maxpacket: 8
[  238.746560][ T5954] usb 6-1: config 0 has an invalid interface number: 246 but max is 0
[  238.768504][ T5954] usb 6-1: config 0 has no interface number 0
[  238.805650][ T5954] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  238.825731][ T7093] vhci_hcd vhci_hcd.0: Device attached
[  238.875800][ T5954] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  238.925772][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.983379][ T5954] usb 6-1: Product: syz
[  238.987545][ T5954] usb 6-1: Manufacturer: syz
[  239.012723][ T5954] usb 6-1: SerialNumber: syz
[  239.030370][ T5919] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  239.032053][ T5954] usb 6-1: config 0 descriptor??
[  239.038582][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  239.402706][ T5954] msi2500 6-1:0.246: Registered as swradio24
[  239.422104][ T5954] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  239.594085][   T10] usb 3-1: Using ep0 maxpacket: 16
[  239.831475][ T7106] 8021q: adding VLAN 0 to HW filter on device bond1
[  239.859713][   T10] usb 3-1: config 0 has no interfaces?
[  239.876015][   T10] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  239.898607][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.945101][   T10] usb 3-1: config 0 descriptor??
[  240.036284][ T7110] fuse: Bad value for 'fd'
[  241.349034][ T7095] vhci_hcd: connection closed
[  241.349356][ T5955] usb 3-1: USB disconnect, device number 8
[  241.361171][  T192] vhci_hcd: stop threads
[  241.365693][  T192] vhci_hcd: release socket
[  241.427991][  T192] vhci_hcd: disconnect device
[  241.428070][ T7116] bpq0: left promiscuous mode
[  242.776926][ T7138] loop3: detected capacity change from 0 to 256
[  243.995500][ T7142] debugfs: 'ttyS3' already exists in 'caif_serial'
[  244.039945][ T7146] netlink: 'syz.1.282': attribute type 10 has an invalid length.
[  245.158829][ T7152] bpq0: entered promiscuous mode
[  245.242125][ T5954] usb 6-1: USB disconnect, device number 3
[  245.334545][ T7153] debugfs: 'ttyS3' already exists in 'caif_serial'
[  246.001134][ T7162] fuse: Bad value for 'fd'
[  247.802159][ T7175] fuse: Bad value for 'fd'
[  250.581720][ T7199] binder_alloc: 7197: binder_alloc_buf, no vma
[  250.776403][ T7208] loop5: detected capacity change from 0 to 256
[  251.685034][ T7205] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  251.691566][ T7205] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  251.699634][ T7205] vhci_hcd vhci_hcd.0: Device attached
[  251.975174][ T5951] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  251.985479][ T5919] usb 37-1: new low-speed USB device number 3 using vhci_hcd
[  252.981676][ T5951] usb 3-1: Using ep0 maxpacket: 16
[  253.022518][ T7232] 9pnet_virtio: no channels available for device syz
[  253.100448][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  253.111554][ T5951] usb 3-1: config 0 has no interfaces?
[  253.133187][ T5951] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  253.584264][ T7210] vhci_hcd: connection reset by peer
[  253.606834][ T1161] vhci_hcd: stop threads
[  253.617242][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.635676][ T1161] vhci_hcd: release socket
[  253.679741][ T1161] vhci_hcd: disconnect device
[  253.691574][ T5951] usb 3-1: config 0 descriptor??
[  253.714022][ T5951] usb 3-1: can't set config #0, error -71
[  253.740343][   T24] usb 4-1: Using ep0 maxpacket: 8
[  253.748686][ T5951] usb 3-1: USB disconnect, device number 9
[  253.819157][   T24] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  253.908697][   T24] usb 4-1: config 0 has no interface number 0
[  253.947121][   T24] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  254.117531][ T7236] debugfs: 'ttyS3' already exists in 'caif_serial'
[  254.216117][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  254.400446][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.405058][ T7251] 9pnet_virtio: no channels available for device syz
[  254.416493][   T24] usb 4-1: Product: syz
[  254.430339][   T24] usb 4-1: Manufacturer: syz
[  254.435116][   T24] usb 4-1: SerialNumber: syz
[  254.500627][   T24] usb 4-1: config 0 descriptor??
[  255.332977][ T7235] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  255.340365][ T7235] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  255.349640][ T7235] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  255.357558][ T7235] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  255.364772][ T7235] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  255.371963][ T7235] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  257.630257][ T5868] Bluetooth: hci5: command 0x0c1a tx timeout
[  257.630294][ T5177] Bluetooth: hci4: command 0x0c1a tx timeout
[  257.636322][ T5868] Bluetooth: hci3: command 0x0c1a tx timeout
[  257.642387][ T5177] Bluetooth: hci2: command 0x0c1a tx timeout
[  257.642439][ T5177] Bluetooth: hci1: command 0x0c1a tx timeout
[  257.648749][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout
[  258.700393][ T5919] vhci_hcd: vhci_device speed not set
[  259.139806][ T7288] Invalid ELF header type: 3 != 1
[  259.948478][ T7287] loop2: detected capacity change from 0 to 256
[  259.963326][   T24] usb 4-1: can't set config #0, error -110
[  261.224712][   T24] usb 4-1: USB disconnect, device number 5
[  262.005039][ T7296] binder_alloc: 7295: binder_alloc_buf, no vma
[  262.237809][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'.
[  264.096265][   T24] hid_parser_main: 43 callbacks suppressed
[  264.096288][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  264.156219][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  264.269172][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  264.352599][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  264.379215][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  264.553587][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  264.587180][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.318'.
[  264.628429][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  264.923426][ T7325] devpts: Bad value for 'max'
[  264.983878][ T7325] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  265.086748][ T7325] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  265.130737][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  265.138484][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  265.192768][   T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  265.248136][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  265.249765][   T24] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  265.255083][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  267.527625][ T7353] Invalid ELF header type: 3 != 1
[  267.880689][ T7346] debugfs: 'ttyS3' already exists in 'caif_serial'
[  268.450634][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.5.324'.
[  268.504357][  T915] hid-generic 0000:007F:FFFFFFFE.0008: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  270.571207][ T7378] binder_alloc: 7377: binder_alloc_buf, no vma
[  270.940753][ T7385] loop2: detected capacity change from 0 to 256
[  272.021258][ T7386] 9pnet_virtio: no channels available for device syz
[  272.557453][ T7392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.335'.
[  274.362799][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.338'.
[  274.416885][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'.
[  274.535827][ T7409] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  274.729270][ T7414] loop3: detected capacity change from 0 to 256
[  277.639667][ T7438] loop3: detected capacity change from 0 to 256
[  278.810333][ T5963] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  280.239816][ T5963] usb 6-1: Using ep0 maxpacket: 8
[  281.763435][ T7468] fuse: Bad value for 'fd'
[  283.609346][ T7481] 9pnet_virtio: no channels available for device syz
[  285.330594][ T5963] usb 6-1: device descriptor read/all, error -110
[  285.647432][ T7494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'.
[  285.668200][ T7470] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  285.674787][ T7470] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  286.541449][ T7470] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  286.772881][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout
[  287.726491][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout
[  287.794523][ T7470] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  287.957275][ T7470] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  287.989697][ T7470] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  288.209027][  T915] hid_parser_main: 96 callbacks suppressed
[  288.209051][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.266658][ T7506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'.
[  288.290596][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.318739][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.366819][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.397898][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.443297][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.501425][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.549589][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.565524][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.579191][  T915] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0
[  288.613372][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout
[  288.687184][  T915] hid-generic 0000:007F:FFFFFFFE.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  288.920092][ T7511] loop4: detected capacity change from 0 to 256
[  289.800345][ T5868] Bluetooth: hci3: command 0x0c1a tx timeout
[  289.960385][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout
[  290.040700][ T5868] Bluetooth: hci5: command 0x0c1a tx timeout
[  290.731739][  T915] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  290.940270][  T915] usb 1-1: Using ep0 maxpacket: 8
[  290.997073][  T915] usb 1-1: config 0 has an invalid interface number: 246 but max is 0
[  291.046862][  T915] usb 1-1: config 0 has no interface number 0
[  291.093677][  T915] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  291.165238][  T915] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  291.174391][  T915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.195873][ T7524] netlink: 'syz.4.365': attribute type 10 has an invalid length.
[  291.208789][  T915] usb 1-1: Product: syz
[  291.226057][  T915] usb 1-1: Manufacturer: syz
[  291.263198][  T915] usb 1-1: SerialNumber: syz
[  291.294401][  T915] usb 1-1: config 0 descriptor??
[  291.865363][  T915] msi2500 1-1:0.246: Registered as swradio24
[  291.918898][  T915] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  293.295118][ T5951] hid_parser_main: 43 callbacks suppressed
[  293.295150][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  293.558009][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.368'.
[  293.583690][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  293.599017][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  293.626325][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  293.882470][ T7555] loop4: detected capacity change from 0 to 256
[  294.775377][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  294.837863][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  295.027427][ T7560] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  295.051008][ T7559] devpts: Bad value for 'max'
[  295.093921][ T7559] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  295.110435][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  295.118201][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  295.128351][ T7559] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  296.542134][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  296.551117][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0
[  296.563959][ T5951] hid-generic 0000:007F:FFFFFFFE.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  296.761268][ T7570] fuse: Bad value for 'fd'
[  298.101496][   T10] usb 1-1: USB disconnect, device number 6
[  298.717645][ T7584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.382'.
[  298.805091][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'.
[  300.161035][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  300.249520][ T7591] netlink: 'syz.5.383': attribute type 10 has an invalid length.
[  300.591036][   T10] usb 4-1: Using ep0 maxpacket: 8
[  300.667061][   T10] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  300.687775][   T10] usb 4-1: config 0 has no interface number 0
[  300.720135][   T10] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  300.774686][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  300.788974][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.833723][   T10] usb 4-1: Product: syz
[  300.852096][   T10] usb 4-1: Manufacturer: syz
[  300.880421][   T10] usb 4-1: SerialNumber: syz
[  300.910711][   T10] usb 4-1: config 0 descriptor??
[  301.483200][   T10] msi2500 4-1:0.246: Registered as swradio24
[  301.516284][   T10] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  302.350239][ T7614] loop4: detected capacity change from 0 to 256
[  304.925585][  T915] usb 4-1: USB disconnect, device number 6
[  308.052146][ T7639] bpq0: left promiscuous mode
[  308.336137][  T915] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  308.561371][  T915] usb 4-1: not running at top speed; connect to a high speed hub
[  309.389220][  T915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.409508][  T915] usb 4-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  309.435618][  T915] usb 4-1: config 1 interface 0 has no altsetting 0
[  309.464401][  T915] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  309.488694][  T915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.516997][  T915] usb 4-1: Product: syz
[  309.530315][  T915] usb 4-1: Manufacturer: syz
[  309.562408][  T915] usb 4-1: SerialNumber: syz
[  309.654699][ T7654] loop1: detected capacity change from 0 to 256
[  310.549709][  T915] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15
[  310.706650][ T7655] debugfs: 'ttyS3' already exists in 'caif_serial'
[  310.752611][  T915] usb 4-1: USB disconnect, device number 7
[  310.758690][ T5212] bcm5974 4-1:1.0: could not read from device
[  311.432375][ T7675] loop2: detected capacity change from 0 to 256
[  312.578155][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.407'.
[  315.751797][ T7713] loop0: detected capacity change from 0 to 256
[  317.330951][ T7708] debugfs: 'ttyS3' already exists in 'caif_serial'
[  317.730149][ T7727] netlink: 56 bytes leftover after parsing attributes in process `syz.0.417'.
[  318.369502][ T7715] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  318.415667][ T7715] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  318.488296][ T7715] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  318.564633][ T7715] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  318.593852][ T7715] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  318.635170][ T7715] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  319.160400][ T5963] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  319.352101][ T5963] usb 5-1: not running at top speed; connect to a high speed hub
[  319.400343][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout
[  319.424376][ T5963] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.440372][ T5963] usb 5-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  319.514304][ T5963] usb 5-1: config 1 interface 0 has no altsetting 0
[  319.578113][ T5963] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  319.600099][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.653107][ T5963] usb 5-1: Product: syz
[  319.668505][ T5963] usb 5-1: Manufacturer: syz
[  319.782989][ T5963] usb 5-1: SerialNumber: syz
[  319.965881][ T7753] binder: BINDER_SET_CONTEXT_MGR already set
[  319.977467][ T7753] binder: 7752:7753 ioctl 4018620d 200000004a80 returned -16
[  320.026206][ T5963] usb 5-1: USB disconnect, device number 2
[  320.440467][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout
[  320.520304][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout
[  320.600657][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout
[  320.606982][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout
[  320.680507][ T5868] Bluetooth: hci5: command 0x0c1a tx timeout
[  322.261915][ T7774] debugfs: 'ttyS3' already exists in 'caif_serial'
[  324.222614][ T5972] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  324.257241][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.430'.
[  324.450425][ T5972] usb 3-1: Using ep0 maxpacket: 8
[  324.492740][ T5972] usb 3-1: config 0 has an invalid interface number: 246 but max is 0
[  324.501663][ T5972] usb 3-1: config 0 has no interface number 0
[  324.508506][ T5972] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  324.526983][ T5972] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  324.536641][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.547466][ T7809] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.434'.
[  324.557649][ T5972] usb 3-1: Product: syz
[  324.625685][ T5972] usb 3-1: Manufacturer: syz
[  324.637016][ T7809] netlink: zone id is out of range
[  324.642579][ T7809] netlink: zone id is out of range
[  324.760557][ T5972] usb 3-1: SerialNumber: syz
[  324.795724][ T5972] usb 3-1: config 0 descriptor??
[  325.376950][ T7815] Invalid ELF header type: 3 != 1
[  325.999208][ T5972] msi2500 3-1:0.246: Registered as swradio24
[  326.013147][ T5972] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  326.390743][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'.
[  326.684945][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  326.691380][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  328.435420][ T5972] usb 3-1: USB disconnect, device number 10
[  331.720376][ T5972] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  331.853917][ T7871] Invalid ELF header type: 3 != 1
[  332.220318][ T5972] usb 1-1: Using ep0 maxpacket: 8
[  332.350300][ T5972] usb 1-1: config 0 has an invalid interface number: 246 but max is 0
[  332.358629][ T5972] usb 1-1: config 0 has no interface number 0
[  332.770978][ T5972] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  332.897805][ T7877] loop3: detected capacity change from 0 to 256
[  335.520890][ T5972] usb 1-1: string descriptor 0 read error: -71
[  335.527210][ T5972] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  335.625340][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.678214][ T5972] usb 1-1: config 0 descriptor??
[  335.684096][ T5972] usb 1-1: can't set config #0, error -71
[  335.692075][ T5972] usb 1-1: USB disconnect, device number 7
[  335.872473][ T5963] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  336.028921][ T7895] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.458'.
[  336.069623][ T7892] debugfs: 'ttyS3' already exists in 'caif_serial'
[  336.099447][ T5963] usb 4-1: Using ep0 maxpacket: 8
[  336.119823][ T7895] netlink: zone id is out of range
[  336.136870][ T5963] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  336.189784][ T7895] netlink: zone id is out of range
[  336.240672][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.330630][ T5963] usb 4-1: config 0 has no interface number 0
[  336.342406][ T5963] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  336.352456][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.369075][ T5963] usb 4-1: config 0 descriptor??
[  336.429416][ T5963] ldusb 4-1:0.55: Interrupt in endpoint not found
[  336.675104][ T5963] usb 4-1: USB disconnect, device number 8
[  337.700410][ T7908] binder: 7907:7908 ioctl 4018620d 0 returned -22
[  338.159978][ T5940] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  339.480760][ T5940] usb 1-1: Using ep0 maxpacket: 8
[  339.636795][ T5940] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  339.677609][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  339.736105][ T5940] usb 1-1: config 0 has no interface number 0
[  340.100318][ T5940] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  340.109395][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.349645][ T5940] usb 1-1: config 0 descriptor??
[  340.437736][ T5940] ldusb 1-1:0.55: Interrupt in endpoint not found
[  340.697142][ T5940] usb 1-1: USB disconnect, device number 8
[  341.766746][ T7949] debugfs: 'ttyS3' already exists in 'caif_serial'
[  345.390693][ T7975] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  345.397215][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  345.509953][ T7975] vhci_hcd vhci_hcd.0: Device attached
[  345.772957][ T5963] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  345.780670][ T5940] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  345.856306][ T7986] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.480'.
[  345.867376][ T7987] Invalid ELF header type: 3 != 1
[  346.083443][ T7986] netlink: zone id is out of range
[  346.088877][ T7986] netlink: zone id is out of range
[  346.240283][ T5940] usb 4-1: Using ep0 maxpacket: 16
[  346.266043][ T5940] usb 4-1: config 0 has no interfaces?
[  346.273431][ T5940] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  346.282948][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.306825][ T5940] usb 4-1: config 0 descriptor??
[  346.614301][ T5919] usb 4-1: USB disconnect, device number 9
[  346.657397][ T7976] vhci_hcd: connection closed
[  346.669542][ T1161] vhci_hcd: stop threads
[  346.686523][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.485'.
[  346.733777][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'.
[  346.749624][ T1161] vhci_hcd: release socket
[  346.763248][ T5963] usb 39-1: device descriptor read/64, error -1
[  346.769675][ T1161] vhci_hcd: disconnect device
[  347.070386][ T5963] vhci_hcd: vhci_device speed not set
[  347.396459][ T5955] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  347.404111][ T5919] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  347.551368][ T8009] 9pnet_virtio: no channels available for device syz
[  347.890298][ T5955] usb 3-1: Using ep0 maxpacket: 8
[  347.897560][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.908979][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.918991][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  347.935601][ T5919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  347.945623][ T5955] usb 3-1: config 0 has an invalid interface number: 246 but max is 0
[  347.971983][ T5955] usb 3-1: config 0 has no interface number 0
[  347.978070][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.003173][ T5955] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  348.038662][ T5919] usb 2-1: config 0 descriptor??
[  348.088998][ T5955] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  348.164963][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.195229][ T5955] usb 3-1: Product: syz
[  348.199437][ T5955] usb 3-1: Manufacturer: syz
[  348.245047][ T5955] usb 3-1: SerialNumber: syz
[  348.320609][ T5955] usb 3-1: config 0 descriptor??
[  348.831877][ T5919] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  349.149773][ T5955] msi2500 3-1:0.246: Registered as swradio24
[  349.261994][ T5955] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  350.190777][ T5972] usb 2-1: reset high-speed USB device number 5 using dummy_hcd
[  350.261439][ T8036] 9pnet_virtio: no channels available for device syz
[  351.574187][ T5940] usb 2-1: USB disconnect, device number 5
[  352.625417][ T8055] Invalid ELF header type: 3 != 1
[  353.977736][ T8063] loop4: detected capacity change from 0 to 256
[  355.130740][ T8065] binder: BINDER_SET_CONTEXT_MGR already set
[  355.346199][ T8065] binder: 8064:8065 ioctl 4018620d 200000004a80 returned -16
[  355.374349][ T5972] usb 3-1: USB disconnect, device number 11
[  355.875010][ T8072] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.502'.
[  356.113661][ T8072] netlink: zone id is out of range
[  356.125995][ T8072] netlink: zone id is out of range
[  357.610306][ T5951] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  357.789132][ T5951] usb 5-1: Using ep0 maxpacket: 8
[  357.860078][ T5951] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  357.868975][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  357.925474][ T5951] usb 5-1: config 0 has no interface number 0
[  357.940349][ T5963] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  357.980361][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  358.056063][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  358.125347][ T5951] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  358.135316][ T5963] usb 2-1: not running at top speed; connect to a high speed hub
[  358.136042][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.274312][ T5963] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  358.310653][ T5963] usb 2-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  358.337182][ T5951] usb 5-1: config 0 descriptor??
[  358.363820][ T5951] ldusb 5-1:0.55: Interrupt in endpoint not found
[  358.400261][ T5963] usb 2-1: config 1 interface 0 has no altsetting 0
[  358.431644][ T5963] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  358.450252][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.525442][ T5963] usb 2-1: Product: syz
[  358.547479][ T5963] usb 2-1: Manufacturer: syz
[  358.576967][ T5963] usb 2-1: SerialNumber: syz
[  358.782493][ T5919] usb 5-1: USB disconnect, device number 3
[  358.813223][ T5963] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  358.884517][ T5963] usb 2-1: USB disconnect, device number 6
[  359.308224][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.511'.
[  359.351683][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.511'.
[  359.565517][ T8102] Invalid ELF header type: 3 != 1
[  359.862452][ T8108] loop5: detected capacity change from 0 to 256
[  361.926840][ T8120] debugfs: 'ttyS3' already exists in 'caif_serial'
[  362.077164][ T5919] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  362.526420][ T5919] usb 6-1: Using ep0 maxpacket: 8
[  362.533750][ T5919] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  362.542371][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.562806][ T5919] usb 6-1: config 0 has no interface number 0
[  362.586732][ T5919] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  362.665266][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'.
[  362.677040][  T915] hid_parser_main: 43 callbacks suppressed
[  362.677061][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  362.695769][ T5919] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  362.733504][ T5919] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  362.746283][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.760142][ T5919] usb 6-1: config 0 descriptor??
[  362.769014][ T5919] ldusb 6-1:0.55: Interrupt in endpoint not found
[  362.851376][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  362.961098][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  363.046068][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  363.146162][ T5966] usb 6-1: USB disconnect, device number 6
[  363.166225][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  363.294971][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  363.357633][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  363.457115][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  363.532150][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  363.586161][  T915] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0
[  363.728438][  T915] hid-generic 0000:007F:FFFFFFFE.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  364.540290][ T5966] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  364.755311][ T8132] fido_id[8132]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  365.563937][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  365.700296][ T5966] usb 5-1: device descriptor read/64, error -32
[  365.981153][ T5966] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  365.989245][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  366.045340][ T8139] 8021q: adding VLAN 0 to HW filter on device bond1
[  366.183563][ T5966] usb 5-1: device descriptor read/64, error -32
[  366.330516][ T5966] usb usb5-port1: attempt power cycle
[  366.620290][ T5955] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  366.720380][ T5966] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  366.771243][    C0] raw-gadget.0 gadget.4: failed to queue control event
[  366.789549][ T5966] usb 5-1: device descriptor read/8, error -32
[  366.795900][ T5955] usb 3-1: Using ep0 maxpacket: 8
[  366.896287][ T5955] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  366.910327][ T5963] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  366.935104][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  366.960548][ T5955] usb 3-1: config 0 has no interface number 0
[  366.973760][ T5955] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  366.991209][ T8160] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  366.997732][ T8160] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  367.005724][ T5955] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  367.014968][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.030387][ T5966] raw-gadget.0 gadget.4: failed to queue suspend event
[  367.046940][ T5955] usb 3-1: config 0 descriptor??
[  367.059108][ T5966] raw-gadget.0 gadget.4: failed to queue reset event
[  367.067244][ T8160] vhci_hcd vhci_hcd.0: Device attached
[  367.109022][ T5963] usb 6-1: not running at top speed; connect to a high speed hub
[  367.133760][ T5955] ldusb 3-1:0.55: Interrupt in endpoint not found
[  367.154019][ T5963] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.220687][ T5966] raw-gadget.0 gadget.4: failed to queue resume event
[  367.257534][ T5963] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  367.310401][ T5940] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  367.360353][ T5966] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  367.410426][ T5963] usb 6-1: config 1 interface 0 has no altsetting 0
[  367.440916][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  367.450465][ T5966] usb 5-1: device descriptor read/8, error -32
[  367.483232][ T5963] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  367.496476][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.512765][ T5972] usb 3-1: USB disconnect, device number 12
[  367.513173][ T5963] usb 6-1: Product: syz
[  367.530276][ T5963] usb 6-1: Manufacturer: syz
[  367.535001][ T5963] usb 6-1: SerialNumber: syz
[  367.570433][ T5966] raw-gadget.0 gadget.4: failed to queue suspend event
[  367.620440][ T5966] usb usb5-port1: unable to enumerate USB device
[  367.652248][ T6063] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  367.809234][ T5963] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[  367.845131][ T5963] usb 6-1: USB disconnect, device number 7
[  367.890406][ T6063] usb 2-1: Using ep0 maxpacket: 16
[  367.899650][ T6063] usb 2-1: config 0 has no interfaces?
[  367.933897][ T6063] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  367.974527][ T6063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.009243][ T6063] usb 2-1: config 0 descriptor??
[  368.089243][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.527'.
[  368.140484][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'.
[  368.278744][ T6063] usb 2-1: USB disconnect, device number 7
[  368.288472][ T8162] vhci_hcd: connection closed
[  368.506225][ T6072] vhci_hcd: stop threads
[  368.536285][ T6072] vhci_hcd: release socket
[  368.550713][ T5940] usb 35-1: device descriptor read/64, error -1
[  368.556285][ T6072] vhci_hcd: disconnect device
[  368.751393][ T5940] vhci_hcd: vhci_device speed not set
[  368.854115][ T8181] Invalid ELF header type: 3 != 1
[  369.062123][ T8188] loop5: detected capacity change from 0 to 256
[  370.174913][ T8127] raw-gadget.0 gadget.4: failed to queue disconnect event
[  370.356175][ T8195] bpq0: entered promiscuous mode
[  371.582686][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.533'.
[  371.596451][  T915] hid_parser_main: 43 callbacks suppressed
[  371.596479][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  371.755409][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  371.789942][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  371.836254][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  371.888092][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  371.945479][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  371.980513][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  372.020735][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  372.049691][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  372.136646][  T915] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0
[  372.190807][  T915] hid-generic 0000:007F:FFFFFFFE.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  372.627909][ T8220] 9pnet_virtio: no channels available for device syz
[  374.771625][ T8232] 9pnet_virtio: no channels available for device syz
[  375.453465][ T8236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'.
[  375.491144][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'.
[  376.234395][ T8245] Invalid ELF header type: 3 != 1
[  377.096410][ T8250] loop1: detected capacity change from 0 to 256
[  377.830370][ T5963] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  378.019923][ T5963] usb 3-1: not running at top speed; connect to a high speed hub
[  378.079991][ T5963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  378.105404][ T6063] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  378.247262][ T5963] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  379.169095][ T5963] usb 3-1: config 1 interface 0 has no altsetting 0
[  379.310272][ T6063] usb 1-1: Using ep0 maxpacket: 8
[  379.318221][ T6063] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  379.347329][ T6063] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  379.401366][ T6063] usb 1-1: config 0 has no interface number 0
[  379.426917][ T5963] usb 3-1: string descriptor 0 read error: -71
[  379.442814][ T6063] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  379.478615][ T5963] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  379.497749][ T6063] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  379.512562][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.554068][ T5963] usb 3-1: can't set config #1, error -71
[  379.562112][ T5963] usb 3-1: USB disconnect, device number 13
[  379.572158][ T6063] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  379.610370][ T6063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.643695][ T6063] usb 1-1: config 0 descriptor??
[  379.670864][ T6063] ldusb 1-1:0.55: Interrupt in endpoint not found
[  380.278625][   T24] usb 1-1: USB disconnect, device number 9
[  381.624886][ T8285] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  382.105909][ T8298] Invalid ELF header type: 3 != 1
[  384.897718][ T8311] loop1: detected capacity change from 0 to 256
[  385.740694][ T8309] bpq0: left promiscuous mode
[  385.826266][ T8313] bpq0: entered promiscuous mode
[  388.137082][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  388.143482][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  389.535014][ T8335] loop5: detected capacity change from 0 to 128
[  389.547150][ T8335] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  389.632800][ T8335] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  389.730539][ T5972] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  390.082309][ T5972] usb 1-1: Using ep0 maxpacket: 8
[  391.187431][ T8346] Invalid ELF header type: 3 != 1
[  393.567807][ T8359] 9pnet_virtio: no channels available for device syz
[  394.240530][ T5919] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  394.442697][ T5919] usb 2-1: Using ep0 maxpacket: 8
[  394.471760][ T5919] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  394.505623][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.563792][ T5919] usb 2-1: config 0 has no interface number 0
[  394.569900][ T5919] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  394.591715][ T8367] bpq0: left promiscuous mode
[  394.656543][ T5919] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  394.691314][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.708782][ T5919] usb 2-1: config 0 descriptor??
[  394.729103][ T5919] ldusb 2-1:0.55: Interrupt in endpoint not found
[  394.869725][ T5972] usb 1-1: device descriptor read/all, error -71
[  395.060393][ T5919] usb 2-1: USB disconnect, device number 8
[  395.165804][ T8369] binder: BINDER_SET_CONTEXT_MGR already set
[  395.171961][ T8369] binder: 8368:8369 ioctl 4018620d 200000004a80 returned -16
[  396.405528][ T8375] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  396.423880][ T8375] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  396.481224][ T8375] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  396.800554][ T8375] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  396.815145][ T8375] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  396.821742][ T8375] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  397.091363][ T5963] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  397.330383][ T5963] usb 2-1: Using ep0 maxpacket: 8
[  397.820749][ T5963] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  397.859403][ T5963] usb 2-1: config 0 has no interface number 0
[  397.866808][ T5963] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  397.884806][ T5963] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  397.902406][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.911985][ T5963] usb 2-1: Product: syz
[  397.917024][ T5963] usb 2-1: Manufacturer: syz
[  397.923221][ T5963] usb 2-1: SerialNumber: syz
[  398.063425][ T5963] usb 2-1: config 0 descriptor??
[  398.452526][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout
[  398.454827][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout
[  399.290311][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout
[  399.299237][ T5870] Bluetooth: hci5: command 0x0c1a tx timeout
[  399.310448][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout
[  399.319465][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout
[  399.342692][ T8405] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.592'.
[  399.429000][ T8405] netlink: zone id is out of range
[  399.462656][ T8405] netlink: zone id is out of range
[  399.521838][ T5963] msi2500 2-1:0.246: Registered as swradio24
[  399.529077][ T5963] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  401.979716][ T8427] 9pnet_virtio: no channels available for device syz
[  402.569689][ T8428] 9pnet_virtio: no channels available for device syz
[  404.179187][   T24] usb 2-1: USB disconnect, device number 9
[  404.636711][ T5966] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  405.829770][ T5966] usb 3-1: unable to read config index 0 descriptor/start: -71
[  405.862415][ T5966] usb 3-1: can't read configurations, error -71
[  407.106414][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.612'.
[  407.594062][ T8468] loop1: detected capacity change from 0 to 128
[  407.632707][ T8468] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  407.720107][ T8468] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  409.001171][ T5966] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  409.500467][ T5966] usb 3-1: Using ep0 maxpacket: 8
[  409.570321][ T5966] usb 3-1: config 0 has an invalid interface number: 246 but max is 0
[  409.616909][ T5966] usb 3-1: config 0 has no interface number 0
[  409.963709][ T5966] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  410.003967][ T5966] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  410.284184][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.311068][ T5966] usb 3-1: Product: syz
[  410.322941][ T5966] usb 3-1: Manufacturer: syz
[  410.355667][ T5966] usb 3-1: SerialNumber: syz
[  410.413231][ T5966] usb 3-1: config 0 descriptor??
[  410.920283][ T6063] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  411.069311][   T24] hid_parser_main: 43 callbacks suppressed
[  411.069339][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  411.134064][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'.
[  411.150734][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  411.164948][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  412.060048][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  412.111407][ T6063] usb 4-1: Using ep0 maxpacket: 8
[  412.228639][ T5966] msi2500 3-1:0.246: Registered as swradio24
[  412.229331][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  412.296567][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  412.337563][ T6063] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  412.355398][ T5966] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  412.405023][ T6063] usb 4-1: config 0 has no interface number 0
[  412.421569][ T6063] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  412.522210][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  412.850323][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  413.040300][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  413.048073][   T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0
[  413.542224][   T24] hid-generic 0000:007F:FFFFFFFE.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  414.967581][ T5972] usb 3-1: USB disconnect, device number 16
[  415.593198][ T6063] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  415.785965][ T6063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.841092][ T6063] usb 4-1: config 0 descriptor??
[  415.871049][ T6063] usb 4-1: can't set config #0, error -71
[  415.921242][ T6063] usb 4-1: USB disconnect, device number 10
[  417.560349][ T6063] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  417.760292][ T6063] usb 2-1: Using ep0 maxpacket: 8
[  417.776176][ T6063] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  417.785120][ T6063] usb 2-1: config 0 has no interface number 0
[  417.791930][ T6063] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  417.806425][ T8550] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  417.860023][ T6063] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  417.873629][ T6063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.921191][ T6063] usb 2-1: Product: syz
[  417.963017][ T6063] usb 2-1: Manufacturer: syz
[  418.018156][ T6063] usb 2-1: SerialNumber: syz
[  418.097882][ T8553] loop4: detected capacity change from 0 to 128
[  418.101523][ T6063] usb 2-1: config 0 descriptor??
[  418.142632][ T8553] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  418.199441][ T8553] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  418.780120][ T6063] msi2500 2-1:0.246: Registered as swradio24
[  418.796949][ T6063] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  419.930103][ T8545] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  419.940240][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout
[  420.018686][ T8545] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  420.066175][ T8545] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  420.129271][ T8545] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  420.153196][ T8545] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  420.159567][ T8545] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  420.441037][ T8568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.638'.
[  422.041077][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout
[  422.120342][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout
[  422.164823][ T8588] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  422.206601][ T5870] Bluetooth: hci5: command 0x0c1a tx timeout
[  422.213600][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout
[  422.219709][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout
[  422.888575][   T24] usb 2-1: USB disconnect, device number 10
[  424.511811][  T915] hid_parser_main: 43 callbacks suppressed
[  424.511835][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  424.567328][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'.
[  424.681752][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  424.865989][ T8613] 9pnet_virtio: no channels available for device syz
[  425.208716][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  425.265548][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  425.282048][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  425.325387][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  425.338957][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  425.360790][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  425.533723][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  425.660673][  T915] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0
[  425.724666][ T8621] debugfs: 'ttyS3' already exists in 'caif_serial'
[  425.841819][  T915] hid-generic 0000:007F:FFFFFFFE.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  427.074121][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'.
[  427.087655][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'.
[  428.669751][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.659'.
[  429.800513][ T8631] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  430.126902][ T8631] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  430.142102][ T8631] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  430.230425][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout
[  430.260952][ T8631] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  430.267264][ T8631] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  430.279369][ T8631] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  431.190539][ T6063] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  431.251644][ T5919] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  431.546373][ T6063] usb 4-1: Using ep0 maxpacket: 8
[  432.201321][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout
[  432.207405][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout
[  432.290484][ T5868] Bluetooth: hci5: command 0x0c1a tx timeout
[  432.297592][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout
[  432.297982][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout
[  432.859020][ T8690] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.665'.
[  432.928960][ T8690] netlink: zone id is out of range
[  432.969727][ T8690] netlink: zone id is out of range
[  433.955993][ T6063] usb 4-1: device descriptor read/all, error -71
[  434.389486][ T8710] Invalid ELF header type: 3 != 1
[  435.204653][ T8715] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  435.732975][ T8724] binder: BINDER_SET_CONTEXT_MGR already set
[  435.767841][ T8724] binder: 8720:8724 ioctl 4018620d 200000004a80 returned -16
[  435.960334][   T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  436.280664][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.673'.
[  436.340292][   T24] usb 1-1: Using ep0 maxpacket: 8
[  436.664133][   T24] usb 1-1: config 0 has an invalid interface number: 246 but max is 0
[  436.725956][   T24] usb 1-1: config 0 has no interface number 0
[  436.795034][   T24] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  437.234566][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  437.444146][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.478436][   T24] usb 1-1: Product: syz
[  437.490496][   T24] usb 1-1: Manufacturer: syz
[  437.500646][   T24] usb 1-1: SerialNumber: syz
[  437.637959][  T915] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  437.921444][   T24] usb 1-1: config 0 descriptor??
[  438.036133][  T915] usb 2-1: Using ep0 maxpacket: 8
[  438.061816][  T915] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  438.070048][  T915] usb 2-1: config 0 has no interface number 0
[  438.390447][  T915] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  438.434056][  T915] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  439.325501][  T915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.338580][  T915] usb 2-1: Product: syz
[  439.343932][  T915] usb 2-1: Manufacturer: syz
[  439.348663][  T915] usb 2-1: SerialNumber: syz
[  439.402069][  T915] usb 2-1: config 0 descriptor??
[  442.003025][ T8769] netlink: 'syz.4.682': attribute type 4 has an invalid length.
[  442.010883][ T8769] netlink: 17 bytes leftover after parsing attributes in process `syz.4.682'.
[  442.993044][   T24] usb 1-1: can't set config #0, error -71
[  443.050334][   T24] usb 1-1: USB disconnect, device number 13
[  443.312266][  T915] usb 2-1: can't set config #0, error -71
[  443.349281][  T915] usb 2-1: USB disconnect, device number 11
[  444.795030][ T8784] binder: BINDER_SET_CONTEXT_MGR already set
[  444.804071][ T8784] binder: 8783:8784 ioctl 4018620d 200000004a80 returned -16
[  444.821691][ T6063] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  445.014175][ T6063] usb 5-1: Using ep0 maxpacket: 8
[  445.041312][ T6063] usb 5-1: config 0 has an invalid interface number: 246 but max is 0
[  445.098451][ T8794] Invalid ELF header type: 3 != 1
[  445.926961][ T6063] usb 5-1: config 0 has no interface number 0
[  445.933877][ T6063] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  445.965838][ T6063] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  445.980380][ T6063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.133646][ T6063] usb 5-1: Product: syz
[  446.137851][ T6063] usb 5-1: Manufacturer: syz
[  446.248320][ T6063] usb 5-1: SerialNumber: syz
[  446.291506][ T6063] usb 5-1: config 0 descriptor??
[  446.357699][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'.
[  446.431460][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'.
[  448.329024][ T8818] netlink: 'syz.2.698': attribute type 4 has an invalid length.
[  448.337063][ T8818] netlink: 17 bytes leftover after parsing attributes in process `syz.2.698'.
[  449.565995][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  449.572616][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  450.042349][ T5951] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  450.340462][ T5966] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  450.387924][ T5951] usb 3-1: not running at top speed; connect to a high speed hub
[  450.439063][ T5951] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  450.540314][ T5966] usb 4-1: Using ep0 maxpacket: 8
[  450.564236][ T5966] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  450.583013][ T5966] usb 4-1: config 0 has no interface number 0
[  450.584500][ T5951] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  450.632582][ T5966] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  450.705937][ T5966] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  450.724993][ T5951] usb 3-1: config 1 interface 0 has no altsetting 0
[  450.725062][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.775685][ T5966] usb 4-1: Product: syz
[  450.779204][ T8835] loop5: detected capacity change from 0 to 128
[  450.779881][ T5966] usb 4-1: Manufacturer: syz
[  450.830361][ T5966] usb 4-1: SerialNumber: syz
[  450.850747][ T5951] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  450.861628][ T5966] usb 4-1: config 0 descriptor??
[  450.932235][ T6063] usb 5-1: can't set config #0, error -71
[  451.003616][ T6063] usb 5-1: USB disconnect, device number 8
[  451.073866][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.087559][ T8835] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  451.228241][ T5951] usb 3-1: Product: syz
[  451.234990][ T8835] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  451.245516][ T5951] usb 3-1: Manufacturer: syz
[  451.250137][ T5951] usb 3-1: SerialNumber: syz
[  451.470493][ T5966] msi2500 4-1:0.246: Registered as swradio24
[  451.499261][ T5966] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  451.778778][ T5951] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input21
[  451.839385][ T5212] bcm5974 3-1:1.0: could not read from device
[  451.993015][ T5951] usb 3-1: USB disconnect, device number 17
[  451.999239][ T5212] bcm5974 3-1:1.0: could not read from device
[  452.059434][ T5212] bcm5974 3-1:1.0: could not read from device
[  452.503040][ T8847] Invalid ELF header type: 3 != 1
[  453.802980][ T8855] 9pnet_virtio: no channels available for device syz
[  455.550305][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.713'.
[  455.611308][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[  455.806501][ T5919] usb 4-1: USB disconnect, device number 13
[  456.426477][ T8872] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  456.615079][ T8872] C: renamed from team_slave_0 (while UP)
[  456.662721][ T8872] netlink: 'syz.3.716': attribute type 3 has an invalid length.
[  456.687092][ T8872] netlink: 152 bytes leftover after parsing attributes in process `syz.3.716'.
[  456.803337][ T8872] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  456.960458][ T5966] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  457.143100][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.541504][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.741072][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  457.808683][ T8893] Invalid ELF header type: 3 != 1
[  458.667176][ T5966] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  458.720361][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.843332][ T5966] usb 2-1: config 0 descriptor??
[  459.385298][ T5966] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  460.613148][ T8914] 8021q: adding VLAN 0 to HW filter on device bond1
[  461.453549][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.729'.
[  461.495552][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'.
[  461.680428][ T6063] usb 2-1: reset high-speed USB device number 12 using dummy_hcd
[  463.033406][ T8935] netlink: 'syz.2.732': attribute type 4 has an invalid length.
[  463.041172][ T8935] netlink: 17 bytes leftover after parsing attributes in process `syz.2.732'.
[  463.333452][ T5966] usb 2-1: USB disconnect, device number 12
[  464.370424][ T8947] Invalid ELF header type: 3 != 1
[  464.869617][ T8952] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  464.967852][ T8952] C: renamed from team_slave_0 (while UP)
[  464.981345][ T8952] netlink: 'syz.2.736': attribute type 3 has an invalid length.
[  465.029878][ T8952] netlink: 152 bytes leftover after parsing attributes in process `syz.2.736'.
[  465.077085][ T8952] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  465.212448][ T8957] loop1: detected capacity change from 0 to 128
[  465.301506][ T8957] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  465.407638][ T8957] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  468.009680][ T8976] bpq0: entered promiscuous mode
[  469.105285][ T8982] 8021q: adding VLAN 0 to HW filter on device bond1
[  469.548622][ T8989] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  469.555148][ T8989] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  469.597492][ T8989] vhci_hcd vhci_hcd.0: Device attached
[  469.860526][ T5966] usb 35-1: new low-speed USB device number 4 using vhci_hcd
[  469.933640][ T5919] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  470.151726][ T5919] usb 2-1: Using ep0 maxpacket: 16
[  470.159135][ T5919] usb 2-1: config 0 has no interfaces?
[  470.165114][ T5919] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  470.181921][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.222992][ T5919] usb 2-1: config 0 descriptor??
[  470.520436][ T8991] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2
[  470.536213][ T1161] vhci_hcd: stop threads
[  470.542843][ T1161] vhci_hcd: release socket
[  470.580660][  T915] usb 2-1: USB disconnect, device number 13
[  470.589322][ T1161] vhci_hcd: disconnect device
[  471.000288][ T9000] netlink: 'syz.0.747': attribute type 4 has an invalid length.
[  471.007985][ T9000] netlink: 17 bytes leftover after parsing attributes in process `syz.0.747'.
[  472.104889][ T9004] 9pnet_virtio: no channels available for device syz
[  472.273002][ T9007] Invalid ELF header type: 3 != 1
[  473.710744][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.752'.
[  473.767494][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'.
[  474.990424][ T5966] vhci_hcd: vhci_device speed not set
[  475.311580][ T9033] loop5: detected capacity change from 0 to 128
[  475.369264][ T9033] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  475.491316][ T9033] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  476.251525][ T9014] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  476.269898][ T9014] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  476.295862][ T9014] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  476.326840][ T9014] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  476.349945][ T9039] binder: BINDER_SET_CONTEXT_MGR already set
[  476.360591][ T9014] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  476.380384][ T9039] binder: 9038:9039 ioctl 4018620d 200000004a80 returned -16
[  476.399883][ T9014] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  476.920689][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout
[  477.456279][ T9047] netlink: 'syz.2.762': attribute type 4 has an invalid length.
[  477.464022][ T9047] netlink: 17 bytes leftover after parsing attributes in process `syz.2.762'.
[  478.284913][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout
[  478.360829][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout
[  478.360843][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout
[  478.440362][ T5859] Bluetooth: hci5: command 0x0c1a tx timeout
[  478.440390][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout
[  478.639402][ T9056] Invalid ELF header type: 3 != 1
[  479.685799][ T9054] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  479.692327][ T9054] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  479.769006][ T9054] vhci_hcd vhci_hcd.0: Device attached
[  480.020359][ T5919] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  480.030275][  T915] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  480.354456][ T9062] 9pnet_virtio: no channels available for device syz
[  480.490514][ T5919] usb 1-1: Using ep0 maxpacket: 16
[  480.500534][ T5919] usb 1-1: config 0 has no interfaces?
[  480.510009][ T5919] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  480.947471][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.349123][ T5919] usb 1-1: config 0 descriptor??
[  481.542798][ T5919] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  481.660784][   T24] usb 1-1: USB disconnect, device number 14
[  481.723531][ T9057] vhci_hcd: connection reset by peer
[  481.729997][   T12] vhci_hcd: stop threads
[  481.752288][   T12] vhci_hcd: release socket
[  481.787268][   T12] vhci_hcd: disconnect device
[  481.800311][ T5919] usb 2-1: Using ep0 maxpacket: 8
[  481.923194][ T5919] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  482.036859][ T9070] 9pnet_virtio: no channels available for device syz
[  482.110972][ T5919] usb 2-1: config 0 has no interface number 0
[  482.144105][ T5919] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  482.440646][ T5919] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  482.449782][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.492282][ T5919] usb 2-1: Product: syz
[  482.496467][ T5919] usb 2-1: Manufacturer: syz
[  482.547045][ T5919] usb 2-1: SerialNumber: syz
[  482.640019][ T5919] usb 2-1: config 0 descriptor??
[  483.190707][ T9077] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.781'.
[  483.279961][ T5919] msi2500 2-1:0.246: Registered as swradio24
[  483.300308][ T5919] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  483.305297][ T9077] netlink: zone id is out of range
[  483.420365][ T9077] netlink: zone id is out of range
[  483.566079][ T5951] hid_parser_main: 43 callbacks suppressed
[  483.566109][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  483.619816][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'.
[  483.652103][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  483.697668][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  484.060299][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  484.188942][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  484.305072][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  484.512228][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  484.520626][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  484.528364][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  485.380388][  T915] vhci_hcd: vhci_device speed not set
[  485.589085][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0
[  485.609515][ T9092] binder: BINDER_SET_CONTEXT_MGR already set
[  485.628156][ T5951] hid-generic 0000:007F:FFFFFFFE.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  485.729933][ T9092] binder: 9088:9092 ioctl 4018620d 200000004a80 returned -16
[  486.790427][ T9109] netlink: 'syz.5.777': attribute type 4 has an invalid length.
[  486.798158][ T9109] netlink: 17 bytes leftover after parsing attributes in process `syz.5.777'.
[  487.940615][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.780'.
[  488.005061][ T9115] fuse: Bad value for 'fd'
[  488.033867][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.780'.
[  489.765213][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.782'.
[  490.615196][ T5919] usb 2-1: USB disconnect, device number 14
[  491.033145][ T9134] bpq0: left promiscuous mode
[  491.062575][ T9131] bpq0: entered promiscuous mode
[  491.993257][ T9149] Invalid ELF header type: 3 != 1
[  493.397866][ T9146] binder: BINDER_SET_CONTEXT_MGR already set
[  493.453137][ T9146] binder: 9145:9146 ioctl 4018620d 200000004a80 returned -16
[  494.364486][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'.
[  494.402845][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[  494.790302][ T5919] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  494.940308][ T5919] usb 3-1: Using ep0 maxpacket: 8
[  495.210633][ T5919] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  495.221751][ T5919] usb 3-1: config 0 has no interface number 0
[  495.227904][ T5919] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  495.239056][ T5919] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  495.250625][ T5919] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  495.263929][ T5919] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  495.273233][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.284633][ T5919] usb 3-1: config 0 descriptor??
[  495.298622][ T5919] ldusb 3-1:0.55: Interrupt in endpoint not found
[  495.436319][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'.
[  495.450638][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'.
[  495.479270][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'.
[  495.777001][   T24] usb 3-1: USB disconnect, device number 18
[  498.180386][  T915] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  498.513381][ T9206] bpq0: left promiscuous mode
[  498.590283][  T915] usb 5-1: Using ep0 maxpacket: 8
[  498.614030][  T915] usb 5-1: config 0 has an invalid interface number: 246 but max is 0
[  498.632554][  T915] usb 5-1: config 0 has no interface number 0
[  498.657600][  T915] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  498.725725][  T915] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  498.735067][  T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.743560][  T915] usb 5-1: Product: syz
[  498.747823][  T915] usb 5-1: Manufacturer: syz
[  498.760250][  T915] usb 5-1: SerialNumber: syz
[  498.814657][ T9217] Invalid ELF header type: 3 != 1
[  499.661010][  T915] usb 5-1: config 0 descriptor??
[  499.917116][ T9219] devpts: Bad value for 'max'
[  500.033112][ T9219] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  500.239199][ T9219] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  500.617719][  T915] msi2500 5-1:0.246: Registered as swradio24
[  500.748735][  T915] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  500.863645][ T9237] debugfs: 'ttyS3' already exists in 'caif_serial'
[  503.673463][ T9261] debugfs: 'ttyS3' already exists in 'caif_serial'
[  504.066702][ T5963] usb 5-1: USB disconnect, device number 9
[  504.623794][ T9275] Invalid ELF header type: 3 != 1
[  505.771977][ T9283] bpq0: entered promiscuous mode
[  506.082667][ T9287] bpq0: left promiscuous mode
[  510.022726][ T9335] Invalid ELF header type: 3 != 1
[  511.049628][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  511.056029][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  513.835043][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.840'.
[  513.864390][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'.
[  514.100294][ T5963] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  514.410723][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.518261][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  514.571591][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  514.620324][ T5963] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  514.953041][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.011277][ T5963] usb 2-1: config 0 descriptor??
[  515.251439][ T5963] usbhid 2-1:0.0: can't add hid device: -71
[  515.267681][ T5963] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  515.317224][ T5963] usb 2-1: USB disconnect, device number 15
[  515.604824][ T9383] devpts: Bad value for 'max'
[  515.797547][ T9383] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  516.204164][ T9392] loop4: detected capacity change from 0 to 128
[  516.593372][ T9392] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  516.788222][ T9392] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  516.822729][ T9383] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  518.135953][ T9393] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  518.218556][ T9393] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  518.230482][ T9393] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  518.237040][ T9393] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  518.264080][ T9393] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  518.429361][ T9393] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  518.785535][ T9415] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.855'.
[  518.810534][ T9415] netlink: zone id is out of range
[  518.891082][ T9415] netlink: zone id is out of range
[  518.921492][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout
[  519.190292][ T5966] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  519.400422][ T5966] usb 2-1: Using ep0 maxpacket: 8
[  519.465362][ T5966] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  519.528348][ T5966] usb 2-1: config 0 has no interface number 0
[  519.594268][ T5966] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  519.630597][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.856'.
[  519.670076][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'.
[  519.733485][ T5966] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  519.770348][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.794619][ T5966] usb 2-1: Product: syz
[  519.819080][ T5966] usb 2-1: Manufacturer: syz
[  519.824922][ T5966] usb 2-1: SerialNumber: syz
[  519.856069][ T5966] usb 2-1: config 0 descriptor??
[  520.280386][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout
[  520.286684][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout
[  520.293419][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout
[  520.299514][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout
[  520.369159][ T5966] msi2500 2-1:0.246: Registered as swradio24
[  520.377059][ T5966] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  520.440352][ T5177] Bluetooth: hci5: command 0x0c1a tx timeout
[  521.494367][ T5966] usb 2-1: USB disconnect, device number 16
[  524.236327][ T9459] loop5: detected capacity change from 0 to 128
[  524.244038][ T9459] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  524.411392][ T9459] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  524.798120][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.870'.
[  524.809644][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'.
[  526.518827][ T9484] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  526.600382][ T5963] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  526.890625][ T5963] usb 2-1: Using ep0 maxpacket: 8
[  527.211998][ T5963] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  527.390383][ T5963] usb 2-1: config 0 has no interface number 0
[  527.397208][ T5963] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  527.466926][ T5963] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  527.530558][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.710913][ T5963] usb 2-1: Product: syz
[  527.715124][ T5963] usb 2-1: Manufacturer: syz
[  527.719728][ T5963] usb 2-1: SerialNumber: syz
[  527.878615][ T5963] usb 2-1: config 0 descriptor??
[  528.834412][ T9514] debugfs: 'ttyS3' already exists in 'caif_serial'
[  529.859331][ T9524] loop2: detected capacity change from 0 to 128
[  530.591018][ T9524] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  530.995016][ T5963] usb 2-1: can't set config #0, error -71
[  531.600452][ T9524] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  532.426161][ T5963] usb 2-1: USB disconnect, device number 17
[  533.890280][ T6063] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  535.792120][ T9567] bpq0: entered promiscuous mode
[  537.686958][ T9582] bpq0: left promiscuous mode
[  537.810321][ T9568] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  537.820343][ T5177] Bluetooth: hci0: command 0x0c1a tx timeout
[  538.028143][ T9568] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  538.058582][ T9568] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  538.113145][ T9568] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  538.125261][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.894'.
[  538.165260][ T9568] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  538.206403][ T9568] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  539.493224][ T9607] netlink: 'syz.5.899': attribute type 4 has an invalid length.
[  539.501031][ T9607] netlink: 17 bytes leftover after parsing attributes in process `syz.5.899'.
[  539.910327][ T5177] Bluetooth: hci1: command 0x0c1a tx timeout
[  540.120539][ T5177] Bluetooth: hci3: command 0x0c1a tx timeout
[  540.122727][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout
[  540.200365][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout
[  540.280366][ T5868] Bluetooth: hci5: command 0x0c1a tx timeout
[  542.072957][ T9620] loop3: detected capacity change from 0 to 128
[  542.124211][ T9620] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  542.240613][ T9620] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  544.763037][ T9647] bpq0: entered promiscuous mode
[  545.217343][ T9653] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.913'.
[  545.441799][ T9653] netlink: zone id is out of range
[  545.473155][ T9653] netlink: zone id is out of range
[  546.060545][ T6063] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  546.291875][ T6063] usb 2-1: not running at top speed; connect to a high speed hub
[  546.311896][ T6063] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  546.324912][ T6063] usb 2-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  546.339446][ T6063] usb 2-1: config 1 interface 0 has no altsetting 0
[  546.351564][ T6063] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  546.360904][ T6063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.368980][ T6063] usb 2-1: Product: syz
[  546.373768][ T6063] usb 2-1: Manufacturer: syz
[  546.378444][ T6063] usb 2-1: SerialNumber: syz
[  546.742839][ T6063] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input28
[  546.772881][ T5212] bcm5974 2-1:1.0: could not read from device
[  546.779298][ T6063] usb 2-1: USB disconnect, device number 18
[  547.357774][ T9669] loop3: detected capacity change from 0 to 128
[  547.437861][ T9669] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  547.497172][ T9669] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  551.349244][ T9691] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  551.359661][ T9691] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  551.369764][ T9691] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  551.377421][ T9691] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  551.385499][ T9691] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  551.398996][ T9691] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  552.190353][ T5972] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  552.360365][ T5972] usb 3-1: Using ep0 maxpacket: 8
[  552.383842][ T5972] usb 3-1: config 0 has an invalid interface number: 246 but max is 0
[  552.392327][ T5972] usb 3-1: config 0 has no interface number 0
[  552.442846][ T5972] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  552.514784][ T5972] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  552.526463][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.563238][ T5972] usb 3-1: Product: syz
[  552.585341][ T5972] usb 3-1: Manufacturer: syz
[  552.601574][ T5972] usb 3-1: SerialNumber: syz
[  552.721310][ T5972] usb 3-1: config 0 descriptor??
[  553.136668][ T5972] msi2500 3-1:0.246: Registered as swradio24
[  553.173951][ T5972] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  553.400610][ T5177] Bluetooth: hci4: command 0x0c1a tx timeout
[  553.406760][ T5177] Bluetooth: hci3: command 0x0c1a tx timeout
[  553.413065][ T5177] Bluetooth: hci2: command 0x0c1a tx timeout
[  553.419171][ T5177] Bluetooth: hci1: command 0x0c1a tx timeout
[  553.425369][ T5177] Bluetooth: hci0: command 0x0c1a tx timeout
[  553.481990][ T5868] Bluetooth: hci5: command 0x0c1a tx timeout
[  553.808085][ T9712] bpq0: left promiscuous mode
[  555.990720][ T5966] usb 3-1: USB disconnect, device number 19
[  557.340323][ T5972] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  557.675284][ T5972] usb 5-1: Using ep0 maxpacket: 8
[  557.789098][ T5972] usb 5-1: config 0 has an invalid interface number: 246 but max is 0
[  558.329456][ T5972] usb 5-1: config 0 has no interface number 0
[  558.491802][ T5972] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  559.728782][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.940'.
[  559.738990][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'.
[  560.398600][ T9746] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  560.507513][ T9746] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  560.513861][ T9746] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  560.605682][ T9746] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  560.616239][ T9746] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  560.624927][ T9746] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  561.623228][ T9767] netlink: 'syz.3.946': attribute type 4 has an invalid length.
[  561.631047][ T9767] netlink: 17 bytes leftover after parsing attributes in process `syz.3.946'.
[  561.852213][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout
[  562.573589][ T9770] bpq0: entered promiscuous mode
[  562.600675][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout
[  562.606760][ T5177] Bluetooth: hci1: command 0x0c1a tx timeout
[  562.681833][ T5868] Bluetooth: hci5: command 0x0c1a tx timeout
[  562.687916][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout
[  562.694085][ T5177] Bluetooth: hci3: command 0x0c1a tx timeout
[  562.698873][ T9773] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.947'.
[  562.744591][ T9773] netlink: zone id is out of range
[  562.750386][ T9773] netlink: zone id is out of range
[  563.277717][ T5972] usb 5-1: string descriptor 0 read error: -71
[  563.293394][ T5972] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  563.325025][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  563.368335][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.389112][ T5972] usb 5-1: config 0 descriptor??
[  563.412014][ T5972] usb 5-1: can't set config #0, error -71
[  563.443582][ T5972] usb 5-1: USB disconnect, device number 10
[  563.527874][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.598184][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.631656][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  563.691697][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  563.712241][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.796468][   T24] usb 2-1: config 0 descriptor??
[  564.469567][ T5972] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  564.490850][   T24] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  564.734290][ T5972] usb 6-1: Using ep0 maxpacket: 8
[  564.976227][ T5972] usb 6-1: config 0 has an invalid interface number: 246 but max is 0
[  565.537031][ T5966] usb 2-1: USB disconnect, device number 19
[  565.793528][ T5972] usb 6-1: config 0 has no interface number 0
[  565.818525][ T5972] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  565.934913][ T5972] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  566.150329][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.499624][ T5972] usb 6-1: Product: syz
[  566.535937][ T5972] usb 6-1: Manufacturer: syz
[  566.566595][ T5972] usb 6-1: SerialNumber: syz
[  566.614697][ T5972] usb 6-1: config 0 descriptor??
[  566.662785][ T9795] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  566.669677][ T9795] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  566.677596][ T9795] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  566.750146][ T9795] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  566.848707][ T9795] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  566.933674][ T9795] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  566.950253][ T5972] msi2500 6-1:0.246: Registered as swradio24
[  566.965231][ T5972] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  567.320244][    C0] ------------[ cut here ]------------
[  567.326014][    C0] ODEBUG: free active (active state 0) object: ffff888055d11490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150
[  567.341273][    C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0
[  567.350590][    C0] Modules linked in:
[  567.354727][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  567.363774][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  567.373922][    C0] RIP: 0010:debug_print_object+0x1a2/0x2b0
[  567.379786][    C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 42 16 8c 4c 89 e6 48 c7 c7 e0 36 16 8c e8 7f 3a 91 fc 90 <0f> 0b 90 90 58 83 05 c6 ce c2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[  567.399502][    C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010286
[  567.405692][    C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3388
[  567.413769][    C0] RDX: ffffffff8e2977c0 RSI: ffffffff817a3395 RDI: 0000000000000001
[  567.421805][    C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  567.429771][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163d80
[  567.437754][    C0] R13: ffffffff8bafedc0 R14: ffffffff8a7fb5d0 R15: ffffc90000007b28
[  567.445741][    C0] FS:  0000000000000000(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000
[  567.454686][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  567.461297][    C0] CR2: 00007ffe98397528 CR3: 0000000012477000 CR4: 0000000000350ef0
[  567.469263][    C0] Call Trace:
[  567.472544][    C0]  <IRQ>
[  567.475377][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  567.481048][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  567.486879][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.492541][    C0]  debug_check_no_obj_freed+0x4b7/0x600
[  567.498092][    C0]  ? look_up_lock_class+0x59/0x150
[  567.503239][    C0]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  567.509323][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.514986][    C0]  kfree+0x28f/0x4d0
[  567.518890][    C0]  ? lock_acquire+0x179/0x350
[  567.523599][    C0]  ? rose_timer_expiry+0x53f/0x630
[  567.528724][    C0]  rose_timer_expiry+0x53f/0x630
[  567.533684][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  567.539167][    C0]  call_timer_fn+0x19a/0x620
[  567.543806][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  567.548963][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.554619][    C0]  ? rcu_is_watching+0x12/0xc0
[  567.559391][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  567.564872][    C0]  __run_timers+0x6ef/0x960
[  567.569404][    C0]  ? __pfx___run_timers+0x10/0x10
[  567.574466][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.580124][    C0]  run_timer_base+0x114/0x190
[  567.584835][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  567.590054][    C0]  ? rcu_is_watching+0x12/0xc0
[  567.594846][    C0]  run_timer_softirq+0x1a/0x40
[  567.599627][    C0]  handle_softirqs+0x219/0x8e0
[  567.604420][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  567.609717][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.615380][    C0]  __irq_exit_rcu+0x109/0x170
[  567.620062][    C0]  irq_exit_rcu+0x9/0x30
[  567.624324][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  567.629968][    C0]  </IRQ>
[  567.632902][    C0]  <TASK>
[  567.635837][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  567.641850][    C0] RIP: 0010:flush_smp_call_function_queue+0x15f/0x1e0
[  567.648627][    C0] Code: 75 46 e8 e4 e2 0b 00 e8 ff c9 13 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 3d de 0b 00 48 85 db 75 4a e8 c3 e2 0b 00 fb 5b <5d> e9 bb e2 0b 00 e8 b6 e2 0b 00 e8 e1 90 cc ff 31 f6 31 ff e8 18
[  567.668252][    C0] RSP: 0018:ffffffff8e207e10 EFLAGS: 00000293
[  567.674347][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81afaae3
[  567.682327][    C0] RDX: ffffffff8e2977c0 RSI: ffffffff81afaaed RDI: 0000000000000007
[  567.690308][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  567.698273][    C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  567.706274][    C0] R13: ffffffff8e2977c0 R14: ffffffff90ab9490 R15: 0000000000000000
[  567.714271][    C0]  ? flush_smp_call_function_queue+0x153/0x1e0
[  567.720457][    C0]  ? flush_smp_call_function_queue+0x15d/0x1e0
[  567.726632][    C0]  do_idle+0x2b1/0x510
[  567.730730][    C0]  ? __pfx_do_idle+0x10/0x10
[  567.735329][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[  567.740550][    C0]  cpu_startup_entry+0x4f/0x60
[  567.745322][    C0]  rest_init+0x16b/0x2b0
[  567.749574][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.755243][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  567.760829][    C0]  start_kernel+0x3ee/0x4d0
[  567.765338][    C0]  x86_64_start_reservations+0x18/0x30
[  567.770818][    C0]  x86_64_start_kernel+0x130/0x190
[  567.775940][    C0]  common_startup_64+0x13e/0x148
[  567.780916][    C0]  </TASK>
[  567.783925][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  567.791192][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  567.800125][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  567.810170][    C0] Call Trace:
[  567.813439][    C0]  <IRQ>
[  567.816271][    C0]  dump_stack_lvl+0x3d/0x1f0
[  567.820878][    C0]  vpanic+0x6e8/0x7a0
[  567.824876][    C0]  ? __pfx_vpanic+0x10/0x10
[  567.829396][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.835037][    C0]  ? debug_print_object+0x1a2/0x2b0
[  567.840237][    C0]  panic+0xca/0xd0
[  567.843982][    C0]  ? __pfx_panic+0x10/0x10
[  567.848423][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  567.853553][    C0]  check_panic_on_warn+0xab/0xb0
[  567.858508][    C0]  __warn+0xf6/0x3c0
[  567.862396][    C0]  ? debug_print_object+0x1a2/0x2b0
[  567.867593][    C0]  report_bug+0x3c3/0x580
[  567.871930][    C0]  ? debug_print_object+0x1a2/0x2b0
[  567.877129][    C0]  handle_bug+0x184/0x210
[  567.881477][    C0]  exc_invalid_op+0x17/0x50
[  567.885996][    C0]  asm_exc_invalid_op+0x1a/0x20
[  567.890843][    C0] RIP: 0010:debug_print_object+0x1a2/0x2b0
[  567.896652][    C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 42 16 8c 4c 89 e6 48 c7 c7 e0 36 16 8c e8 7f 3a 91 fc 90 <0f> 0b 90 90 58 83 05 c6 ce c2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[  567.916264][    C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010286
[  567.922353][    C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3388
[  567.930322][    C0] RDX: ffffffff8e2977c0 RSI: ffffffff817a3395 RDI: 0000000000000001
[  567.938301][    C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  567.946279][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163d80
[  567.954242][    C0] R13: ffffffff8bafedc0 R14: ffffffff8a7fb5d0 R15: ffffc90000007b28
[  567.962210][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  567.967890][    C0]  ? __warn_printk+0x198/0x350
[  567.972670][    C0]  ? __warn_printk+0x1a5/0x350
[  567.977458][    C0]  ? debug_print_object+0x1a1/0x2b0
[  567.982652][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  567.988300][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  567.994110][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  567.999753][    C0]  debug_check_no_obj_freed+0x4b7/0x600
[  568.005324][    C0]  ? look_up_lock_class+0x59/0x150
[  568.010457][    C0]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  568.016559][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  568.022202][    C0]  kfree+0x28f/0x4d0
[  568.026117][    C0]  ? lock_acquire+0x179/0x350
[  568.030814][    C0]  ? rose_timer_expiry+0x53f/0x630
[  568.035932][    C0]  rose_timer_expiry+0x53f/0x630
[  568.040873][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  568.046340][    C0]  call_timer_fn+0x19a/0x620
[  568.050951][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  568.056087][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  568.061736][    C0]  ? rcu_is_watching+0x12/0xc0
[  568.066508][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  568.071969][    C0]  __run_timers+0x6ef/0x960
[  568.076508][    C0]  ? __pfx___run_timers+0x10/0x10
[  568.081552][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  568.087207][    C0]  run_timer_base+0x114/0x190
[  568.091909][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  568.097123][    C0]  ? rcu_is_watching+0x12/0xc0
[  568.101894][    C0]  run_timer_softirq+0x1a/0x40
[  568.106676][    C0]  handle_softirqs+0x219/0x8e0
[  568.111458][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  568.116764][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  568.122403][    C0]  __irq_exit_rcu+0x109/0x170
[  568.127083][    C0]  irq_exit_rcu+0x9/0x30
[  568.131333][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  568.136975][    C0]  </IRQ>
[  568.139891][    C0]  <TASK>
[  568.142820][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  568.148801][    C0] RIP: 0010:flush_smp_call_function_queue+0x15f/0x1e0
[  568.155575][    C0] Code: 75 46 e8 e4 e2 0b 00 e8 ff c9 13 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 3d de 0b 00 48 85 db 75 4a e8 c3 e2 0b 00 fb 5b <5d> e9 bb e2 0b 00 e8 b6 e2 0b 00 e8 e1 90 cc ff 31 f6 31 ff e8 18
[  568.175180][    C0] RSP: 0018:ffffffff8e207e10 EFLAGS: 00000293
[  568.181242][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81afaae3
[  568.189204][    C0] RDX: ffffffff8e2977c0 RSI: ffffffff81afaaed RDI: 0000000000000007
[  568.197164][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  568.205126][    C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  568.213099][    C0] R13: ffffffff8e2977c0 R14: ffffffff90ab9490 R15: 0000000000000000
[  568.221074][    C0]  ? flush_smp_call_function_queue+0x153/0x1e0
[  568.227239][    C0]  ? flush_smp_call_function_queue+0x15d/0x1e0
[  568.233408][    C0]  do_idle+0x2b1/0x510
[  568.237487][    C0]  ? __pfx_do_idle+0x10/0x10
[  568.242083][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[  568.247290][    C0]  cpu_startup_entry+0x4f/0x60
[  568.252058][    C0]  rest_init+0x16b/0x2b0
[  568.256309][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  568.261949][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  568.267509][    C0]  start_kernel+0x3ee/0x4d0
[  568.272021][    C0]  x86_64_start_reservations+0x18/0x30
[  568.277485][    C0]  x86_64_start_kernel+0x130/0x190
[  568.282600][    C0]  common_startup_64+0x13e/0x148
[  568.287571][    C0]  </TASK>
[  568.290807][    C0] Kernel Offset: disabled
[  568.295143][    C0] Rebooting in 86400 seconds..