last executing test programs:

28m48.252911863s ago: executing program 32 (id=13):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
getpriority(0x2, 0x0)

28m47.096910528s ago: executing program 33 (id=5):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

26m53.887979103s ago: executing program 34 (id=122):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x290}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
add_key$fscrypt_provisioning(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xa)

24m46.719278177s ago: executing program 0 (id=240):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x2c)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = memfd_create(&(0x7f0000000400)=',\x00\b\x8e\xc8\x83d\xe5\x88\xb6\xdc?\x9eh\xd48L\xd1\xb7X\xaa\x9b\xa8\xf0\x8dN\xef\xb3\xaa{\xd4\xa9h\xeb\xc5P\xd9\xc1Y\xba\xaf\xdb\xfd3\xd9\x15?u9\xad\"\xd5\x8e\x14\xc9\x7f7^\x10\xe5s\x82gj\xf2\xb83\x1ay\xe5\xa0\a\x00\x00\x00\x00\x007\xb6\xd3)\x9b]\x84\xd1}Kwe!\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\xda\xddXQ\xe3\xe5I\n\x81\x11Y\xabPH\xb9\xca\xda#9-\xfa\xbd\x81\x13\x05\xaa\xacS\xc5[\xd9f5\xc1\xdd\x11M1kT\x7f.\xd6\x89\xde\xca\x8c\xb8ag\x14\xc9\x83\xd3r\xea\xed\xae\xb9%\xb0q\xc0\xbc\xbe\xd4t\xc0K\x95D\xfd\x9f\x18\xa6{\xe6%\xf0`\xee\r\x18}0\xe7\xed\x8aY\xe5\xfb\xd8\xea\xa3\xfauC\x82\xd5K\x00/\xf4\xe8\xa9\xef\x82M\x9d\xe9s#P\x9d\x9c\xb1\xf9\xc1>@`\x9d\xf6b\x0e\xa9\xcf\xdb\xb3\x90O\x18~\x8c\xe10\xab\xfd9\n\xa0R\x19\xd4\xbb|\x84L\xfb\xf9\x95\x93\x99\xb77b\xc4\x82F\xc3\xa0\xbe\xd0~\v\b\v\x16\xbaI\x819Q\a3\xa0\xd5\xe4&\xf2\x9b{\xb6\\F\x0e\x01[4V\x19xh\xe6\x96\x95`csY\x81\x9f\x9fF\xaf[\xe9e\x99Z\xad_\xa2$\x98\xf1\xde\xc3\a\x8a\x05\x18\xb7\x90\x1f\x83\xc5\xfeL\xc79\b\xed\xff\x93\xe3\xe0\xee\xa7v\xc2\x1c\xb4\xde\xfe\xc7\xc2A`\xcaS@>\x88a\xe8\xe7dj\n\x8e\xea\x93;\xa1\xde\xc5\xf6\x01\vF\xfc\\H\xce\x0f\x82\xe0\x11)\f\xfeh\xe7\x88\xb3\x8bF\xfbw|+ecS=\x04\x18\xe7\xb8\x04\xaa\xf5e\xe5\x8b.\xde\xa8\xb3\xae\xd8g\xa0\xdd\x8d[w8\xab$[\"(\xa3\xba\r\xb5=vC\xce\xff\xfd\xe2\xe8\x1c;\x90\xff\xdf\x84@\xa8\x03\x98\xc6m\xcf\x8e\xdd\x12jP\xea\xf0e\xb7\x06\'K\xca-&\xad\x7f]\xfb8\xf6\xe0@J\xee\xe6\xf3\x1b7\xf7\x87\xb3\xbd\xb8\a\xa3\xe2\xfb\xd8I\xc0\xa8\xad\xae\x00wM\xa9:4\x81b\x1f\x8e\x8f\f\xdf\x98<\xfd5\x9c\xc0\'+:H6<\xa9\xd9\x19\x83\xd5\x81\t\n\x0f^A\xb7\x85aD\xd2\xc9fk\x1c\xb6\x9f\x14\x8b=s\xb5\x0f\xd4!!g\xab8i\xf9\x1dI`f1\xb4\xfa\x93\xe4\xcc&\xde\x8f\x03\\\xf0\x1c\x9b\x8a\xfd\xfe\b\x85\xb2\x93\x85\x1a\xe9\xef\n./U\xaf\xb9\xf6\xe7Y1\xaa\x11\xd5\xd6rd\f(\x9f\xe2D)\x9a\x969\xdf\xb7\x06#8%\xaa\x86\x11&\x13\xa7R\xce\xe5\xb3\xa1W\xdej\xe4q\x84\x99n\x9f\xdeX\x97\x82\xd1U\xd2\t\xeaI\x88\xc0\xf8\xc0\x9cC\x14\x1d\xc3\xe4\\\xb2\xcd\xae\xf5\xb8\xe56\x0f\xe1\xc5\xa5\x13@\xc8\xfa\x15\x137\xd9C\xf6\x10\xe1\x83:\xc02h\xc8f7&|\x9cf\xa8\x8a\xf0\x7f\xe4Km\x10EJ_\xf98\x8b\xea\x9a\xd2x\xc4-7^\x00\x00\x00\x00\x00\x00\x00\x00\x003\xd6\xcb\xc7}T\x1d\xf2\xb9.%\x14|k\x15\xa23J\x1d\xfd\t\xb5*\xf6\xc1\x06\xaf\x95\x9b\xc2\xa8 \xa2\xf7', 0x6)
dup(r1)
socket(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=r2, @ANYRESOCT], 0x20)

24m45.298875083s ago: executing program 0 (id=241):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
pread64(r3, &(0x7f00000002c0)=""/75, 0x4b, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000080)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044)

24m43.353380133s ago: executing program 0 (id=243):
openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)

24m43.177551537s ago: executing program 0 (id=244):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpgid(0x0)
sched_setattr(r2, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$kcm(0x10, 0x400000002, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
lseek(r3, 0x1000000, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000000c0))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20)
r8 = fcntl$dupfd(r5, 0x0, r6)
write$FUSE_NOTIFY_STORE(r8, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388)

24m41.749530029s ago: executing program 0 (id=245):
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX])
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="01000000000000000000010000003004088054000080080003000f00000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"], 0x47c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
creat(&(0x7f0000000440)='./file0\x00', 0x0)
syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendfile(r4, r4, 0x0, 0x40008)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[])

24m39.069100703s ago: executing program 0 (id=253):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001e00530f00007000fbdbdf2520010000000000000000000000000002000002880a003300ff020000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)

24m23.754617223s ago: executing program 35 (id=253):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001e00530f00007000fbdbdf2520010000000000000000000000000002000002880a003300ff020000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)

19m22.934376457s ago: executing program 7 (id=495):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
getpid()
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4)

19m19.213626207s ago: executing program 7 (id=498):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19m17.194064273s ago: executing program 7 (id=502):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/202, 0xca}, {0x0}], 0x2)

19m17.063279352s ago: executing program 7 (id=503):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
fsopen(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0})
io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x14eeaa19, 0x0)

19m15.543153894s ago: executing program 7 (id=514):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
getpid()
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c40)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_ACT={0x30, 0x7, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x60}}, 0x20040054)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4)

19m10.266969794s ago: executing program 7 (id=508):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x800, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x4}, {}, {0xfffffffe}, {}, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x4, 0x8, 0x3, 0x3, 0x41, 0x5, 0x40003, 0x53, 0x0, 0x1, 0xc})
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x4010, 0xffffffffffffffff, 0x10990000)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x3, 0x10a21a, 0x1c12f6})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4})

18m54.154323503s ago: executing program 36 (id=508):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x800, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x4}, {}, {0xfffffffe}, {}, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x4, 0x8, 0x3, 0x3, 0x41, 0x5, 0x40003, 0x53, 0x0, 0x1, 0xc})
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x4010, 0xffffffffffffffff, 0x10990000)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x3, 0x10a21a, 0x1c12f6})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4})

18m19.140486294s ago: executing program 8 (id=636):
r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='name', 0x0, r0)

18m18.895363834s ago: executing program 8 (id=639):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0)
writev(r4, 0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0xfffffc01, 0x166}, 0x9c)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, 0x0, 0xc8)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)

18m12.427783795s ago: executing program 8 (id=657):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})

18m10.475741799s ago: executing program 8 (id=664):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, 0x0)
writev(r4, 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0xfffffc01, 0x166}, 0x9c)
r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r7, 0x0, 0xc8)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)

18m8.360063606s ago: executing program 8 (id=667):
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0], 0xd8)

18m7.83498023s ago: executing program 8 (id=669):
r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00')
read$FUSE(r0, &(0x7f0000004d00)={0x2020}, 0x2020)

17m52.343133297s ago: executing program 37 (id=669):
r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00')
read$FUSE(r0, &(0x7f0000004d00)={0x2020}, 0x2020)

9m23.013688419s ago: executing program 2 (id=3128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x2c}}, 0x0)

9m22.789208272s ago: executing program 2 (id=3130):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
getpid()
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c40)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_ACT={0x30, 0x7, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x60}}, 0x20040054)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4)

9m20.856268571s ago: executing program 2 (id=3140):
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x2020)

9m20.529835458s ago: executing program 2 (id=3144):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

9m20.128717581s ago: executing program 2 (id=3149):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd)
writev(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)='8', 0x1}, {0x0}], 0x2)

9m17.731734653s ago: executing program 2 (id=3159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffec2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x8, 0x4, 0x4, 0x2, 'syz0\x00', 0x40}, 0x3, 0x10000000, 0x1, r0, 0x3, 0x5, 'syz1\x00', &(0x7f0000000000)=['rcu_utilization\x00', '\x85--\x00', 'rcu_utilization\x00'], 0x24})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1000000}, 0x0)
keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed00efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6342103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033df58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca30ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28defa300"})
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
listen(r6, 0x6)
syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x16, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x10, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xce, &(0x7f0000000580)=""/206, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

9m17.293016088s ago: executing program 38 (id=3159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffec2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x8, 0x4, 0x4, 0x2, 'syz0\x00', 0x40}, 0x3, 0x10000000, 0x1, r0, 0x3, 0x5, 'syz1\x00', &(0x7f0000000000)=['rcu_utilization\x00', '\x85--\x00', 'rcu_utilization\x00'], 0x24})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1000000}, 0x0)
keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed00efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6342103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033df58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca30ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28defa300"})
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
listen(r6, 0x6)
syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x16, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x10, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xce, &(0x7f0000000580)=""/206, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

3m27.850366992s ago: executing program 6 (id=5723):
r0 = io_uring_setup(0xdac, &(0x7f0000000180))
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
write$dsp(r1, &(0x7f00000001c0)='\\', 0x1)
close(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

3m27.615465348s ago: executing program 6 (id=5728):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='io_uring_register\x00', r1, 0x0, 0x2}, 0x18)
r2 = syz_io_uring_setup(0x21a, &(0x7f0000000300)={0x0, 0x20108dfc, 0x10100, 0x1}, &(0x7f0000000400), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={0x0}, 0x1)

3m27.452121746s ago: executing program 6 (id=5731):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x10000000000000)

3m27.339914292s ago: executing program 6 (id=5734):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

3m27.142496718s ago: executing program 6 (id=5738):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x1000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000005, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x2, 0x3, 0x0, 0x7, 0x5, 0x800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x800, 0x6, 0x6d01, 0x5, 0x38, 0x800003, 0x1fc, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0x8, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x2, 0x30b1d693, 0xa1f, 0x8, 0x3, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3m24.740889842s ago: executing program 6 (id=5753):
r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)

3m24.389618707s ago: executing program 39 (id=5753):
r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)

12.080019718s ago: executing program 1 (id=7358):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0x2f4e, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

11.057327725s ago: executing program 1 (id=7361):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

10.456449436s ago: executing program 3 (id=7365):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

9.772791324s ago: executing program 5 (id=7369):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

8.501002541s ago: executing program 5 (id=7372):
fsopen(&(0x7f0000000000)='omfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

8.354628899s ago: executing program 3 (id=7373):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)

7.110590933s ago: executing program 5 (id=7374):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x7, 0x0, &(0x7f0000000600)="c9f7b986000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r2}, 0x38)

6.930700524s ago: executing program 9 (id=7376):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0)

6.731272548s ago: executing program 3 (id=7377):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0)

5.568766422s ago: executing program 1 (id=7380):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2e38}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
brk(0x6000000000000000)
ioperm(0x9, 0x40, 0x85)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x2, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

5.556334691s ago: executing program 3 (id=7381):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

5.545250484s ago: executing program 9 (id=7382):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$unix(0x1, 0x1, 0x0)
fsopen(&(0x7f0000000240)='binfmt_misc\x00', 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
accept(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
getpid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000080)={r2, 0x2, 0x6})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000380)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r3, 0x1, r1, 0x6})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000140)={r3, 0x0, 0x8})

5.381092382s ago: executing program 5 (id=7384):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.170555505s ago: executing program 1 (id=7386):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0xd064}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)

3.488904139s ago: executing program 5 (id=7388):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xdf, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x81, 0x80, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xce}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf5, 0x4, 0x2, {0x7, 0x25, 0x1, 0x1, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x5, 0x3, {0x7, 0x25, 0x1, 0x81, 0x1, 0x2}}}}}}}]}}, 0x0)
r0 = eventfd(0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x375}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0)

3.335528201s ago: executing program 9 (id=7390):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ff7f0000000000000d00080095"], &(0x7f00000000c0)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$igmp(0x2, 0x3, 0x2)
epoll_create1(0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3.132599429s ago: executing program 3 (id=7392):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0xe)
socket$inet6(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
syz_open_dev$media(0x0, 0x4007, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x5, 0xffffffff, 0x100000000000, 0x2, 0x500, 0x7, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0)

2.951377265s ago: executing program 4 (id=7393):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x20000)
r3 = getpid()
syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaa9aaaaabb8100000086dd6000000800283afffe80000000000000000000000000000eff0200000000000000000000000000018700907800000000ff0200000000000000000000000000010e020000000000000000000000000001"], 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/icmp6\x00')
openat$incfs(r4, &(0x7f0000000100)='.pending_reads\x00', 0x8340, 0x101)

2.950092845s ago: executing program 9 (id=7394):
open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

2.176022099s ago: executing program 1 (id=7395):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xd}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
close(r0)

2.061953459s ago: executing program 3 (id=7396):
write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000fc0)=@del={0xe0, 0x11, 0x1, 0x8, 0x25dfdbfd, {{'michael_mic\x00'}, '\x00', '\x00', 0x2000, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x40050}, 0x40800)

2.021559429s ago: executing program 4 (id=7397):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x5b, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x4bb}}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000580)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x40, 0x16, 0x1a, "456e3e6ee62336ac00d529a0cb2586fdcc85f2f101d495901df3"}, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xde}, 0x0, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x81}, 0x0})

1.869682605s ago: executing program 9 (id=7398):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000000000400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f00000001c0)=""/216, &(0x7f00000002c0)=0xd8)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000007c0)={0x48})

1.620050625s ago: executing program 4 (id=7399):
syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x800)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x13c}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x7, 'ip6gre0\x00', {0x659}, 0x5})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0xfffffffffffffffd, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.548129801s ago: executing program 4 (id=7400):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)

546.845276ms ago: executing program 4 (id=7401):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

102.360516ms ago: executing program 1 (id=7402):
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

101.535262ms ago: executing program 5 (id=7403):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="04"], 0x10)

85.765539ms ago: executing program 9 (id=7404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)

0s ago: executing program 4 (id=7405):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
pipe(&(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010)

kernel console output (not intermixed with test programs):

608402][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1608.609445][ T5875] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1608.609502][ T5875] usb 2-1: media controller created
[ 1608.686778][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1608.773616][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5285'.
[ 1608.801550][ T5875] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1608.801572][ T5875] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1608.932936][   T37] kauditd_printk_skb: 2 callbacks suppressed
[ 1608.932959][   T37] audit: type=1326 audit(2000000740.024:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22047 comm="syz.4.5289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x0
[ 1609.041611][T13480] usb 2-1: USB disconnect, device number 33
[ 1609.086321][T13480] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1609.433648][   T37] audit: type=1400 audit(2000000740.524:637): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22059 comm="syz.6.5294" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002
[ 1609.697684][T22066] netlink: 96 bytes leftover after parsing attributes in process `+}[@'.
[ 1609.821217][T22068] vxcan1: tx address claim with dest, not broadcast
[ 1610.209625][T22079] block nbd4: shutting down sockets
[ 1610.747703][T22100] syzkaller1: entered promiscuous mode
[ 1610.747734][T22100] syzkaller1: entered allmulticast mode
[ 1610.969395][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1611.720808][T22124] sch_tbf: peakrate 144 is lower than or equals to rate 7376477170064875643 !
[ 1611.844447][ T5854] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1611.996513][ T5854] usb 10-1: Using ep0 maxpacket: 32
[ 1611.999434][ T5854] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1611.999466][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.019226][ T5854] usb 10-1: config 0 descriptor??
[ 1612.040116][ T5854] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1612.194593][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5329'.
[ 1612.467200][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1612.500019][   T37] audit: type=1326 audit(2000000743.584:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22140 comm="syz.5.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1612.500081][   T37] audit: type=1326 audit(2000000743.584:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22140 comm="syz.5.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1612.503796][   T37] audit: type=1326 audit(2000000743.594:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22140 comm="syz.5.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1612.510435][   T37] audit: type=1326 audit(2000000743.604:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22140 comm="syz.5.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1612.511251][   T37] audit: type=1326 audit(2000000743.604:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22140 comm="syz.5.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1612.512397][   T37] audit: type=1326 audit(2000000743.604:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22140 comm="syz.5.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1612.522007][   T37] audit: type=1326 audit(2000000743.614:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22140 comm="syz.5.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1612.522958][   T37] audit: type=1326 audit(2000000743.614:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22140 comm="syz.5.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1612.786280][T22134] hsr0 (unregistering): left allmulticast mode
[ 1612.922546][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1613.144874][ T5854] gspca_sunplus: reg_w_riv err -71
[ 1613.144995][ T5854] sunplus 10-1:0.0: probe with driver sunplus failed with error -71
[ 1613.148525][ T5854] usb 10-1: USB disconnect, device number 23
[ 1613.235449][T22150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5337'.
[ 1613.235490][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5337'.
[ 1616.103311][T18344] tipc: Subscription rejected, illegal request
[ 1616.335450][   T37] kauditd_printk_skb: 6 callbacks suppressed
[ 1616.335472][   T37] audit: type=1326 audit(2000000747.434:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108fdbefc9 code=0x7ffc0000
[ 1616.335815][   T37] audit: type=1326 audit(2000000747.434:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108fdbefc9 code=0x7ffc0000
[ 1616.354235][   T37] audit: type=1326 audit(2000000747.444:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f108fdbefc9 code=0x7ffc0000
[ 1616.438071][   T37] audit: type=1326 audit(2000000747.534:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f108fd5b099 code=0x7ffc0000
[ 1616.439236][   T37] audit: type=1326 audit(2000000747.534:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108fdbefc9 code=0x7ffc0000
[ 1616.441631][   T37] audit: type=1326 audit(2000000747.534:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f108fd5b099 code=0x7ffc0000
[ 1616.512767][   T37] audit: type=1326 audit(2000000747.604:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f108fd5b099 code=0x7ffc0000
[ 1616.565977][   T37] audit: type=1326 audit(2000000747.644:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f108fd5b099 code=0x7ffc0000
[ 1616.566023][   T37] audit: type=1326 audit(2000000747.644:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f108fd5b099 code=0x7ffc0000
[ 1616.566053][   T37] audit: type=1326 audit(2000000747.644:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22230 comm="syz.9.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108fdbefc9 code=0x7ffc0000
[ 1617.775689][T22268] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5390'.
[ 1617.814209][T22268] bond2: Invalid ad_actor_system MAC address.
[ 1617.814234][T22268] bond2: option ad_actor_system: invalid value (1)
[ 1617.854650][ T5889] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1617.858334][T22268] bond2 (unregistering): Released all slaves
[ 1618.025364][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1618.148385][ T5889] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 1618.148420][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1618.248491][ T5889] usb 2-1: config 0 descriptor??
[ 1618.560561][ T5889] kaweth 2-1:0.0: Firmware present in device.
[ 1618.646558][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5394'.
[ 1618.737985][ T5889] kaweth 2-1:0.0: Statistics collection: 0
[ 1618.738018][ T5889] kaweth 2-1:0.0: Multicast filter limit: 0
[ 1618.738033][ T5889] kaweth 2-1:0.0: MTU: 0
[ 1618.738047][ T5889] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00
[ 1619.174762][T17742] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1619.342813][ T5889] kaweth 2-1:0.0: Error setting receive filter
[ 1619.343125][ T5889] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[ 1619.344008][T17742] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1619.344078][T17742] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1619.344106][T17742] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1619.344130][T17742] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1619.403080][T17742] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1619.403116][T17742] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1619.403146][T17742] usb 10-1: Manufacturer: syz
[ 1619.439687][T17742] usb 10-1: config 0 descriptor??
[ 1619.443529][ T5889] usb 2-1: USB disconnect, device number 34
[ 1619.878443][T17742] appleir 0003:05AC:8243.0028: unknown main item tag 0x0
[ 1619.937838][T17742] appleir 0003:05AC:8243.0028: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[ 1620.159122][T17742] usb 10-1: USB disconnect, device number 24
[ 1620.297276][ T5889] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5889 comm: kworker/1:5)
[ 1620.684670][ T5889] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1620.847632][ T5889] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[ 1620.847762][ T5889] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[ 1620.847811][ T5889] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1620.847836][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1620.912404][T22323] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1621.986029][ T5889] aiptek 7-1:17.0: Aiptek using 400 ms programming speed
[ 1622.012474][ T5889] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input47
[ 1622.136138][ T5889] usb 7-1: USB disconnect, device number 29
[ 1622.136245][    C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1622.770490][ T5854] IPVS: starting estimator thread 0...
[ 1622.858637][T22390] IPVS: using max 6 ests per chain, 14400 per kthread
[ 1625.634397][ T5882] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 1625.794447][ T5882] usb 7-1: Using ep0 maxpacket: 32
[ 1625.796903][ T5882] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1625.796929][ T5882] usb 7-1: config 0 has no interface number 0
[ 1625.800078][ T5882] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1625.800107][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.800128][ T5882] usb 7-1: Product: syz
[ 1625.800142][ T5882] usb 7-1: Manufacturer: syz
[ 1625.800157][ T5882] usb 7-1: SerialNumber: syz
[ 1625.813437][ T5882] usb 7-1: config 0 descriptor??
[ 1625.868134][ T5882] smsc95xx v2.0.0
[ 1626.127301][T22495] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.5484'.
[ 1626.271413][   T37] kauditd_printk_skb: 16 callbacks suppressed
[ 1626.271435][   T37] audit: type=1326 audit(2000000757.364:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.305313][   T37] audit: type=1326 audit(2000000757.394:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.307962][   T37] audit: type=1326 audit(2000000757.404:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.309999][   T37] audit: type=1326 audit(2000000757.404:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.310936][   T37] audit: type=1326 audit(2000000757.404:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.311350][   T37] audit: type=1326 audit(2000000757.404:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.311978][   T37] audit: type=1326 audit(2000000757.404:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.312605][   T37] audit: type=1326 audit(2000000757.404:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.313184][   T37] audit: type=1326 audit(2000000757.404:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.313713][   T37] audit: type=1326 audit(2000000757.404:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22505 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x7ffc0000
[ 1626.340988][ T5882] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1626.341018][ T5882] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1626.778893][ T5882] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1626.779383][ T5882] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[ 1626.790118][ T5882] usb 7-1: USB disconnect, device number 30
[ 1627.094551][ T5854] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1627.250031][ T5854] usb 2-1: Using ep0 maxpacket: 16
[ 1627.257254][ T5854] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1627.257287][ T5854] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1627.257308][ T5854] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1627.257340][ T5854] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1627.257362][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1627.267624][ T5854] usb 2-1: config 0 descriptor??
[ 1627.757930][ T5854] hid (null): global environment stack underflow
[ 1627.757957][ T5854] hid (null): unknown global tag 0xc
[ 1627.757982][ T5854] hid (null): unknown global tag 0xd
[ 1627.757997][ T5854] hid (null): invalid report_count 48172
[ 1627.871581][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5504'.
[ 1627.871721][T22535] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1628.030039][T17742] usb 2-1: USB disconnect, device number 35
[ 1628.747432][T22535] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1629.454566][T22564] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1629.747687][T22566] sp0: Synchronizing with TNC
[ 1630.238861][T22596] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5527'.
[ 1630.257640][T22593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5526'.
[ 1630.364559][ T5854] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1630.514431][ T5854] usb 10-1: Using ep0 maxpacket: 8
[ 1630.538207][ T5854] usb 10-1: device descriptor read/all, error -71
[ 1632.777659][T22666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5558'.
[ 1633.474517][T22686] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1636.606118][ T5882] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1636.775139][ T5882] usb 6-1: Using ep0 maxpacket: 16
[ 1636.777982][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1636.778017][ T5882] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1636.810568][ T5882] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1636.810602][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1636.810622][ T5882] usb 6-1: Product: syz
[ 1636.810638][ T5882] usb 6-1: Manufacturer: syz
[ 1636.810652][ T5882] usb 6-1: SerialNumber: syz
[ 1636.898627][T22746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1636.902830][T22746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1637.073515][ T5882] usb 6-1: 0:2 : does not exist
[ 1637.102223][ T5882] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1637.156413][ T5882] usb 6-1: USB disconnect, device number 38
[ 1638.163795][T22746] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1638.312590][T22746] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1639.494497][ T5854] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[ 1639.647046][ T5854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1639.647117][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1639.647148][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1639.647171][ T5854] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1639.648758][ T5854] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1639.648786][ T5854] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1639.648807][ T5854] usb 6-1: Manufacturer: syz
[ 1639.722172][ T5854] usb 6-1: config 0 descriptor??
[ 1639.876556][ T6029] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1639.876593][ T6029] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.960454][T22799] netlink: 'syz.6.5611': attribute type 1 has an invalid length.
[ 1639.960478][T22799] netlink: 'syz.6.5611': attribute type 6 has an invalid length.
[ 1639.960493][T22799] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5611'.
[ 1639.965651][T15233] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1639.965683][T15233] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1640.001396][T15233] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1640.001428][T15233] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1640.005208][T15233] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1640.005239][T15233] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1640.114417][ T5854] rc_core: IR keymap rc-hauppauge not found
[ 1640.114440][ T5854] Registered IR keymap rc-empty
[ 1640.114651][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.134456][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.157201][ T5854] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1640.160846][ T5854] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input49
[ 1640.198171][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.215295][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.234863][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.254831][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.274554][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.294495][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.315631][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.343001][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.354743][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.378097][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.405538][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1640.449186][ T5854] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1640.449213][ T5854] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1640.488093][ T5854] usb 6-1: USB disconnect, device number 39
acpid: input device has been disconnected, fd 10
[ 1640.649210][T22815] netlink: 'syz.4.5619': attribute type 2 has an invalid length.
[ 1642.008125][T22858] sctp: [Deprecated]: syz.4.5638 (pid 22858) Use of int in max_burst socket option deprecated.
[ 1642.008125][T22858] Use struct sctp_assoc_value instead
[ 1642.211556][T22870] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5644'.
[ 1642.339968][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1642.341097][ T5854] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1642.421320][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1642.494105][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1642.517317][ T5854] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1642.517347][ T5854] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1642.519525][ T5854] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1642.519558][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1642.519577][ T5854] usb 7-1: SerialNumber: syz
[ 1642.800058][ T5854] usb 7-1: 0:2 : does not exist
[ 1642.838771][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1642.924678][ T5854] usb 7-1: USB disconnect, device number 31
[ 1643.009599][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1643.036643][   T37] kauditd_printk_skb: 3 callbacks suppressed
[ 1643.036663][   T37] audit: type=1326 audit(2000000774.134:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22879 comm="syz.4.5649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x0
[ 1643.207372][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1643.280385][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1643.366100][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1643.439047][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1643.521839][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1643.622329][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1643.724777][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1643.798050][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1643.905274][T22870] bond0 (unregistering): Released all slaves
[ 1643.934674][ T1146] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1644.024098][T22892] macvtap1: entered promiscuous mode
[ 1644.024132][T22892] macvtap1: entered allmulticast mode
[ 1644.043079][T22892] bond_slave_0: entered promiscuous mode
[ 1644.043161][T22892] bond_slave_1: entered promiscuous mode
[ 1644.043188][T22892] bond0: entered allmulticast mode
[ 1644.043203][T22892] bond_slave_0: entered allmulticast mode
[ 1644.043224][T22892] bond_slave_1: entered allmulticast mode
[ 1644.043270][T22892] bond0: entered promiscuous mode
[ 1644.070691][T22892] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1644.071116][T22892] team0: Device macvtap1 failed to register rx_handler
[ 1644.094503][ T1146] usb 10-1: Using ep0 maxpacket: 16
[ 1644.099541][ T1146] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1644.099580][ T1146] usb 10-1: config 0 has no interface number 0
[ 1644.108194][ T1146] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1644.108227][ T1146] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1644.108248][ T1146] usb 10-1: Product: syz
[ 1644.108263][ T1146] usb 10-1: Manufacturer: syz
[ 1644.108278][ T1146] usb 10-1: SerialNumber: syz
[ 1644.133038][ T1146] usb 10-1: config 0 descriptor??
[ 1644.145954][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1644.165728][ T1146] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1644.224467][T22892] bond0: left allmulticast mode
[ 1644.224493][T22892] bond_slave_0: left allmulticast mode
[ 1644.224515][T22892] bond_slave_1: left allmulticast mode
[ 1644.224570][T22892] bond0: left promiscuous mode
[ 1644.225662][T22892] bond_slave_0: left promiscuous mode
[ 1644.225756][T22892] bond_slave_1: left promiscuous mode
[ 1645.221466][ T1146] gspca_spca1528: reg_w err -71
[ 1645.221583][ T1146] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71
[ 1645.274477][ T1146] usb 10-1: USB disconnect, device number 27
[ 1645.522891][T15233] tipc: Subscription rejected, illegal request
[ 1645.584507][ T5854] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[ 1645.647098][T22932] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5672'.
[ 1645.736677][ T5854] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1645.739122][ T5854] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[ 1645.739146][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1645.739157][ T5854] usb 7-1: Product: syz
[ 1645.739166][ T5854] usb 7-1: Manufacturer: syz
[ 1645.739174][ T5854] usb 7-1: SerialNumber: syz
[ 1645.742893][ T5854] usb 7-1: config 0 descriptor??
[ 1646.781539][ T5854] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1646.781872][ T5854] asix 7-1:0.0: probe with driver asix failed with error -71
[ 1646.802295][ T5854] usb 7-1: USB disconnect, device number 32
[ 1646.894548][T17742] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1647.047327][T17742] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1647.047361][T17742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.073855][T17742] usb 6-1: config 0 descriptor??
[ 1647.098880][T17742] cp210x 6-1:0.0: cp210x converter detected
[ 1647.494745][T17742] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1647.719689][T17742] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1647.789962][T22988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5698'.
[ 1647.920174][ T1146] usb 6-1: USB disconnect, device number 40
[ 1647.929201][ T1146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1648.059929][ T1146] cp210x 6-1:0.0: device disconnected
[ 1648.064700][T17742] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1648.220649][T17742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1648.220687][T17742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1648.220729][T17742] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1648.220762][T17742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1648.252205][T17742] usb 2-1: config 0 descriptor??
[ 1648.701130][T17742] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0
[ 1648.701167][T17742] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0
[ 1648.701194][T17742] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0
[ 1648.701220][T17742] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0
[ 1648.701246][T17742] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0
[ 1648.701271][T17742] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0
[ 1648.701296][T17742] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0
[ 1648.719797][T17742] cp2112 0003:10C4:EA90.002A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[ 1648.902727][T17742] cp2112 0003:10C4:EA90.002A: Part Number: 0x00 Device Version: 0x00
[ 1649.284002][T23034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5719'.
[ 1649.304960][T17742] cp2112 0003:10C4:EA90.002A: error setting SMBus config
[ 1649.313687][T17742] cp2112 0003:10C4:EA90.002A: probe with driver cp2112 failed with error -71
[ 1649.326264][T17742] usb 2-1: USB disconnect, device number 36
[ 1649.404745][T23038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5721'.
[ 1649.644461][T23051] netlink: 92 bytes leftover after parsing attributes in process `syz.9.5727'.
[ 1650.628910][T23080] loop2: detected capacity change from 0 to 7
[ 1650.646036][T23080] Dev loop2: unable to read RDB block 7
[ 1650.646089][T23080]  loop2: unable to read partition table
[ 1650.646361][T23080] loop2: partition table beyond EOD, truncated
[ 1650.646383][T23080] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1652.204521][ T5854] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1652.276897][T13480] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1652.361140][ T5854] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1652.361171][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1652.383179][ T5854] usb 10-1: config 0 descriptor??
[ 1652.444451][T13480] usb 2-1: Using ep0 maxpacket: 16
[ 1652.447120][T13480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1652.447217][T13480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1652.447242][T13480] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1652.447286][T13480] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1652.447310][T13480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1652.452385][T13480] usb 2-1: config 0 descriptor??
[ 1652.612906][ T5854] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1653.024622][ T5854] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2
[ 1653.024650][ T5854] [drm] Initialized udl on minor 2
[ 1653.157838][T13480] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002B/input/input50
[ 1653.245656][T13480] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 1653.266690][ T5854] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[ 1653.267109][ T5854] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[ 1653.297009][T13480] usb 2-1: USB disconnect, device number 37
[ 1653.314651][ T5854] usb 10-1: USB disconnect, device number 28
[ 1653.319025][ T5882] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[ 1653.319816][ T5882] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[ 1653.320012][ T5882] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[ 1653.374231][T23122] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5759'.
[ 1653.381279][T23122] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5759'.
[ 1653.381308][T23122] netlink: 'syz.5.5759': attribute type 5 has an invalid length.
[ 1653.381323][T23122] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5759'.
[ 1653.751371][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1653.765027][T22582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1653.768596][T22582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1653.771324][T22582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1653.781284][T22582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1654.462928][T23128] chnl_net:caif_netlink_parms(): no params data found
[ 1654.910048][T23161] 9pnet_fd: Insufficient options for proto=fd
[ 1655.020044][   T37] audit: type=1326 audit(2000000786.104:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.020384][   T37] audit: type=1326 audit(2000000786.114:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.020716][   T37] audit: type=1326 audit(2000000786.114:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.021531][   T37] audit: type=1326 audit(2000000786.114:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.022135][   T37] audit: type=1326 audit(2000000786.114:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.022904][   T37] audit: type=1326 audit(2000000786.114:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.023231][   T37] audit: type=1326 audit(2000000786.114:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.023741][   T37] audit: type=1326 audit(2000000786.114:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.024087][   T37] audit: type=1326 audit(2000000786.114:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.024969][   T37] audit: type=1326 audit(2000000786.114:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23164 comm="syz.5.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1655.288144][T23128] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1655.288472][T23128] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1655.288768][T23128] bridge_slave_0: entered allmulticast mode
[ 1655.292455][T23128] bridge_slave_0: entered promiscuous mode
[ 1655.332144][T23128] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1655.332299][T23128] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1655.332544][T23128] bridge_slave_1: entered allmulticast mode
[ 1655.358999][T23128] bridge_slave_1: entered promiscuous mode
[ 1655.648628][T23128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1655.653816][T23128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1655.834539][T22582] Bluetooth: hci3: command tx timeout
[ 1656.000635][T23128] team0: Port device team_slave_0 added
[ 1656.027452][T23128] team0: Port device team_slave_1 added
[ 1656.398632][T23128] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1656.398660][T23128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1656.398689][T23128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1656.426505][T23128] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1656.426523][T23128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1656.426548][T23128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1656.902261][T23128] hsr_slave_0: entered promiscuous mode
[ 1656.904148][T23128] hsr_slave_1: entered promiscuous mode
[ 1656.923585][T23128] debugfs: 'hsr0' already exists in 'hsr'
[ 1656.923617][T23128] Cannot create hsr debugfs directory
[ 1657.375761][ T5854] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1657.436573][T18322] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1657.534501][ T5854] usb 10-1: Using ep0 maxpacket: 32
[ 1657.538280][ T5854] usb 10-1: config 0 has an invalid interface number: 132 but max is 0
[ 1657.538300][ T5854] usb 10-1: config 0 has no interface number 0
[ 1657.538330][ T5854] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1657.541668][ T5854] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1657.541698][ T5854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1657.541719][ T5854] usb 10-1: Product: syz
[ 1657.541734][ T5854] usb 10-1: Manufacturer: syz
[ 1657.541750][ T5854] usb 10-1: SerialNumber: syz
[ 1657.636474][ T5854] usb 10-1: config 0 descriptor??
[ 1657.675080][ T5854] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1657.675119][ T5854] em28xx 10-1:0.132: Video interface 132 found:
[ 1657.914498][T22582] Bluetooth: hci3: command tx timeout
[ 1658.077780][ T5854] em28xx 10-1:0.132: unknown em28xx chip ID (0)
[ 1658.158305][T18322] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1658.498347][ T5854] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[ 1658.498384][ T5854] em28xx 10-1:0.132: board has no eeprom
[ 1658.570039][ T5854] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1658.570068][ T5854] em28xx 10-1:0.132: analog set to bulk mode.
[ 1658.573267][ T5882] em28xx 10-1:0.132: Registering V4L2 extension
[ 1658.584026][ T5854] usb 10-1: USB disconnect, device number 29
[ 1658.605076][ T5854] em28xx 10-1:0.132: Disconnecting em28xx
[ 1658.712891][T18322] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1658.937995][ T5882] em28xx 10-1:0.132: Config register raw data: 0xffffffed
[ 1658.938022][ T5882] em28xx 10-1:0.132: AC97 chip type couldn't be determined
[ 1658.938035][ T5882] em28xx 10-1:0.132: No AC97 audio processor
[ 1659.012239][ T5882] usb 10-1: Decoder not found
[ 1659.012262][ T5882] em28xx 10-1:0.132: failed to create media graph
[ 1659.012369][ T5882] em28xx 10-1:0.132: V4L2 device video103 deregistered
[ 1659.052324][ T5882] em28xx 10-1:0.132: Remote control support is not available for this card.
[ 1659.052430][ T5854] em28xx 10-1:0.132: Closing input extension
[ 1659.139755][ T5854] em28xx 10-1:0.132: Freeing device
[ 1659.362320][T18322] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode
[ 1659.527241][T23272] loop6: detected capacity change from 0 to 524287999
[ 1659.728238][T18322] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1659.994534][T22582] Bluetooth: hci3: command tx timeout
[ 1660.364509][ T5882] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1660.484799][T23293] netlink: 'syz.4.5825': attribute type 10 has an invalid length.
[ 1660.524589][ T5882] usb 10-1: Using ep0 maxpacket: 8
[ 1660.590194][ T5882] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1660.590292][ T5882] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1660.590317][ T5882] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1660.590343][ T5882] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1660.590368][ T5882] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1660.590425][ T5882] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1660.590449][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1660.829204][T23293] macvlan1: entered allmulticast mode
[ 1660.832922][T23293] veth1_vlan: entered allmulticast mode
[ 1660.844867][ T5854] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1660.878345][ T5882] usb 10-1: usb_control_msg returned -32
[ 1660.878412][ T5882] usbtmc 10-1:16.0: can't read capabilities
[ 1660.890554][T23293] team0: Port device macvlan1 added
[ 1661.019854][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1661.019891][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1661.019933][ T5854] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[ 1661.019958][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1661.026318][ T5854] usb 2-1: config 0 descriptor??
[ 1661.462596][ T5854] zydacron 0003:13EC:0006.002C: unknown main item tag 0x3
[ 1661.462639][ T5854] zydacron 0003:13EC:0006.002C: item fetching failed at offset 3/5
[ 1661.464002][ T5854] zydacron 0003:13EC:0006.002C: parse failed
[ 1661.464120][ T5854] zydacron 0003:13EC:0006.002C: probe with driver zydacron failed with error -22
[ 1661.700674][   T44] usb 2-1: USB disconnect, device number 38
[ 1662.077981][T22582] Bluetooth: hci3: command tx timeout
[ 1663.279408][T17742] usb 10-1: USB disconnect, device number 30
[ 1666.165611][T18322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1666.227123][T18322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1666.252054][T18322] bond0 (unregistering): Released all slaves
[ 1666.316151][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5837'.
[ 1666.322747][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5837'.
[ 1667.041631][T18322] tipc: Disabling bearer <eth:vlan0>
[ 1667.097734][T18322] tipc: Disabling bearer <udp:syz2>
[ 1667.101454][T23374] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5858'.
[ 1667.122256][T18322] tipc: Left network mode
[ 1667.752704][T23393] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5865'.
[ 1669.027508][T23406] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1669.497048][T23426] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5881'.
[ 1669.564447][ T5854] usb 2-1: new low-speed USB device number 39 using dummy_hcd
[ 1669.674672][T18322] macvlan0: left promiscuous mode
[ 1669.714589][T18322] batadv0: left promiscuous mode
[ 1669.720620][ T5854] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1669.720653][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1669.728826][ T5854] usb 2-1: config 0 descriptor??
[ 1669.761141][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.829213][T18322] hsr_slave_0: left promiscuous mode
[ 1669.864481][T18322] hsr_slave_1: left promiscuous mode
[ 1669.865741][T18322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1669.865770][T18322] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1669.896072][T18322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1669.896104][T18322] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1669.938455][T18322] batman_adv: batadv0: Interface deactivated: ipvlan2
[ 1669.938486][T18322] batman_adv: batadv0: Removing interface: ipvlan2
[ 1669.975180][ T5854] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1670.183029][ T5854] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1670.183063][ T5854] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[ 1670.183383][ T5854] asix 2-1:0.0: probe with driver asix failed with error -71
[ 1670.258074][ T5854] usb 2-1: USB disconnect, device number 39
[ 1670.262896][T18322] veth1_macvtap: left promiscuous mode
[ 1670.263025][T18322] veth0_macvtap: left promiscuous mode
[ 1670.263323][T18322] veth1_vlan: left allmulticast mode
[ 1670.263369][T18322] veth1_vlan: left promiscuous mode
[ 1670.263589][T18322] veth0_vlan: left promiscuous mode
[ 1674.475734][T18322] team0 (unregistering): Port device team_slave_1 removed
[ 1674.815202][T18322] team0 (unregistering): Port device team_slave_0 removed
[ 1678.308314][T23128] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1678.362240][T23128] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1678.393476][T23128] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1678.470336][T23128] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1679.110061][T23476] netlink: 51 bytes leftover after parsing attributes in process `syz.5.5898'.
[ 1679.401915][T23486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5903'.
[ 1679.436401][T23128] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1679.527522][T23128] 8021q: adding VLAN 0 to HW filter on device team0
[ 1679.550170][T18338] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1679.552287][T18338] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1679.611181][T18338] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1679.611481][T18338] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1680.472451][T18322] IPVS: stop unused estimator thread 0...
[ 1680.495711][T23128] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1680.726096][T23128] veth0_vlan: entered promiscuous mode
[ 1680.773062][T23128] veth1_vlan: entered promiscuous mode
[ 1680.934705][T23128] veth0_macvtap: entered promiscuous mode
[ 1680.941711][T23128] veth1_macvtap: entered promiscuous mode
[ 1681.028629][T23128] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1681.052786][T23128] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1681.100106][T18344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1681.119017][T18344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1681.120051][T18344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1681.120097][T18344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1681.675038][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1681.675062][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1681.822623][  T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1681.822648][  T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1682.150362][T23544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5922'.
[ 1682.151248][T23544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5922'.
[ 1682.725482][   T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1682.884162][   T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1682.898031][   T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1682.898093][   T44] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x77, changing to 0x7
[ 1682.898131][   T44] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x7 has invalid maxpacket 5035, setting to 64
[ 1682.898159][   T44] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1682.952582][   T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1682.952614][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1682.952635][   T44] usb 4-1: Product: syz
[ 1682.952650][   T44] usb 4-1: Manufacturer: syz
[ 1682.952666][   T44] usb 4-1: SerialNumber: syz
[ 1683.934865][T17742] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1684.037972][   T44] cdc_ncm 4-1:1.0: bind() failure
[ 1684.067709][   T44] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1684.067765][   T44] cdc_ncm 4-1:1.1: bind() failure
[ 1684.089511][T17742] usb 10-1: config 0 has an invalid interface number: 228 but max is 0
[ 1684.089544][T17742] usb 10-1: config 0 has no interface number 0
[ 1684.089579][T17742] usb 10-1: too many endpoints for config 0 interface 228 altsetting 255: 195, using maximum allowed: 30
[ 1684.089628][T17742] usb 10-1: config 0 interface 228 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1684.089655][T17742] usb 10-1: config 0 interface 228 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1684.089678][T17742] usb 10-1: config 0 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 195
[ 1684.089703][T17742] usb 10-1: config 0 interface 228 has no altsetting 0
[ 1684.089739][T17742] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice=17.00
[ 1684.089761][T17742] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1684.187197][T17742] usb 10-1: config 0 descriptor??
[ 1684.284025][T19582] usb 4-1: USB disconnect, device number 2
[ 1684.617827][T17742] holtek_kbd 0003:04D9:A055.002D: bogus close delimiter
[ 1684.617853][T17742] holtek_kbd 0003:04D9:A055.002D: item 0 4 2 10 parsing failed
[ 1684.623996][T17742] holtek_kbd 0003:04D9:A055.002D: probe with driver holtek_kbd failed with error -22
[ 1684.826996][   T44] usb 10-1: USB disconnect, device number 31
[ 1689.597873][T23669] overlayfs: failed to clone upperpath
[ 1689.742694][T23674] overlayfs: failed to clone lowerpath
[ 1689.854361][ T5882] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1690.024786][ T5882] usb 10-1: Using ep0 maxpacket: 32
[ 1690.042719][ T5882] usb 10-1: config 0 has an invalid interface number: 172 but max is 0
[ 1690.042750][ T5882] usb 10-1: config 0 has no interface number 0
[ 1690.042810][ T5882] usb 10-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1690.042836][ T5882] usb 10-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1690.097731][ T5882] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[ 1690.097764][ T5882] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1690.097785][ T5882] usb 10-1: Product: syz
[ 1690.097800][ T5882] usb 10-1: Manufacturer: syz
[ 1690.097815][ T5882] usb 10-1: SerialNumber: syz
[ 1690.118440][ T5882] usb 10-1: config 0 descriptor??
[ 1690.193098][ T5882] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[ 1690.994985][ T5882] input: gspca_pac7302 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input51
[ 1691.217518][T17742] usb 10-1: USB disconnect, device number 32
[ 1691.834602][ T5854] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[ 1692.007120][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64
[ 1692.007161][ T5854] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1692.007204][ T5854] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[ 1692.007223][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.010862][ T5854] usb 6-1: config 0 descriptor??
[ 1692.421801][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6005'.
[ 1692.461338][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6005'.
[ 1692.471396][ T5854] hid-multitouch 0003:0457:07DA.002E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0
[ 1692.573519][T23749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6007'.
[ 1692.712140][T23755] syz_tun: entered promiscuous mode
[ 1692.713147][T23754] syz_tun: left promiscuous mode
[ 1692.776417][ T5854] usb 6-1: USB disconnect, device number 41
[ 1693.137979][T23768] netlink: 'syz.9.6016': attribute type 4 has an invalid length.
[ 1693.193668][T23769] netlink: 'syz.9.6016': attribute type 4 has an invalid length.
[ 1693.294703][T17742] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1693.442304][T23778] netlink: 'syz.5.6019': attribute type 6 has an invalid length.
[ 1693.454839][T17742] usb 2-1: Using ep0 maxpacket: 32
[ 1693.460639][T17742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 185, changing to 11
[ 1693.460672][T17742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49152, setting to 1024
[ 1693.460717][T17742] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1693.460742][T17742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1693.477739][T17742] usb 2-1: config 0 descriptor??
[ 1693.502988][T17742] hub 2-1:0.0: USB hub found
[ 1693.725025][T17742] hub 2-1:0.0: 1 port detected
[ 1693.781377][T23771] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1694.200415][ T5854] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1694.268477][T23771] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1694.364656][ T5854] usb 6-1: Using ep0 maxpacket: 8
[ 1694.373948][ T5854] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1694.373980][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1694.374001][ T5854] usb 6-1: Product: syz
[ 1694.374016][ T5854] usb 6-1: Manufacturer: syz
[ 1694.374031][ T5854] usb 6-1: SerialNumber: syz
[ 1694.417105][ T5854] usb 6-1: config 0 descriptor??
[ 1694.642716][ T5854] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1694.683901][T17742] usb 2-1: reset high-speed USB device number 40 using dummy_hcd
[ 1694.730036][T23771] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1694.880460][ T5854] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1694.895484][ T5854] usb 6-1: USB disconnect, device number 42
[ 1695.159344][T23771] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1695.479408][   T44] usb 2-1: USB disconnect, device number 40
[ 1695.985933][  T989] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1696.031703][  T989] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1696.090637][  T989] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1696.163093][T18344] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1697.020247][T23843] vlan3: entered allmulticast mode
[ 1697.332250][T23850] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6052'.
[ 1697.332708][T23851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1697.332735][T23851] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1697.389552][T23851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1697.389586][T23851] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1698.853601][   T37] kauditd_printk_skb: 2 callbacks suppressed
[ 1698.853623][   T37] audit: type=1326 audit(2000000829.944:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1698.854064][   T37] audit: type=1326 audit(2000000829.944:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1698.878964][   T37] audit: type=1326 audit(2000000829.974:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1698.881244][   T37] audit: type=1326 audit(2000000829.974:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1698.889261][   T37] audit: type=1326 audit(2000000829.974:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1698.889791][   T37] audit: type=1326 audit(2000000829.984:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1698.890839][   T37] audit: type=1326 audit(2000000829.984:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1698.892522][   T37] audit: type=1326 audit(2000000829.984:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1698.893747][   T37] audit: type=1326 audit(2000000829.984:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1698.902733][   T37] audit: type=1326 audit(2000000829.994:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23902 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1699.087199][T23905] syz_tun: entered allmulticast mode
[ 1699.110250][T23905] dvmrp8: entered allmulticast mode
[ 1699.117475][T23905] syz_tun: left allmulticast mode
[ 1699.117670][T23905] dvmrp8: left allmulticast mode
[ 1699.271404][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1699.492227][T23915] input: syz1 as /devices/virtual/input/input52
[ 1700.164807][   T44] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1700.324403][   T44] usb 10-1: Using ep0 maxpacket: 16
[ 1700.327536][   T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1700.327571][   T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1700.327595][   T44] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1700.327640][   T44] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1700.327665][   T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1700.343222][   T44] usb 10-1: config 0 descriptor??
[ 1700.562741][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1700.881755][   T44] HID 045e:07da: Invalid code 65791 type 1
[ 1700.961326][   T44] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.002F/input/input53
[ 1700.985650][   T44] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1701.158749][ T5854] usb 10-1: USB disconnect, device number 33
acpid: input device has been disconnected, fd 3
[ 1701.936216][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6107'.
[ 1701.969036][T23979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.635144][ T5897] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1702.804361][ T5897] usb 4-1: Using ep0 maxpacket: 32
[ 1702.821814][ T5897] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1702.821844][ T5897] usb 4-1: config 0 has no interface number 0
[ 1702.821901][ T5897] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1702.871472][ T5897] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1702.871506][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1702.871528][ T5897] usb 4-1: Product: syz
[ 1702.871543][ T5897] usb 4-1: Manufacturer: syz
[ 1702.871558][ T5897] usb 4-1: SerialNumber: syz
[ 1702.929325][ T5897] usb 4-1: config 0 descriptor??
[ 1702.968343][ T5897] smsc75xx v1.0.0
[ 1703.864545][   T44] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 1704.026882][   T44] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1704.026913][   T44] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1704.035187][   T44] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1704.035217][   T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1704.035235][   T44] usb 10-1: SerialNumber: syz
[ 1704.213276][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[ 1704.213310][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[ 1704.246838][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1704.246871][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1704.246892][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1704.246911][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1704.247253][ T5897] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[ 1704.253480][ T5897] usb 4-1: USB disconnect, device number 3
[ 1704.421370][   T44] usb 10-1: 0:2 : does not exist
[ 1704.446119][   T44] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1704.508956][   T44] usb 10-1: USB disconnect, device number 34
[ 1707.436113][T24083] kvm: apic: phys broadcast and lowest prio
[ 1707.589434][   T37] kauditd_printk_skb: 6 callbacks suppressed
[ 1707.589457][   T37] audit: type=1800 audit(2000000838.634:720): pid=24089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.6156" name="bus" dev="tmpfs" ino=6165 res=0 errno=0
[ 1707.777780][T24094] vlan2: entered allmulticast mode
[ 1708.129380][T24104] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1708.337405][T24108] binder: 24107:24108 ioctl c0306201 2000000003c0 returned -14
[ 1710.454444][ T5889] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1710.608426][ T5889] usb 10-1: Using ep0 maxpacket: 16
[ 1710.662104][ T5889] usb 10-1: device descriptor read/all, error -71
[ 1710.820894][T24188] fuse: Unknown parameter '0xffffffffffffffff'
[ 1713.845584][T24261] batadv_slave_1: entered promiscuous mode
[ 1713.850694][T24260] batadv_slave_1: left promiscuous mode
[ 1714.375724][T24273] netlink: 'syz.5.6238': attribute type 1 has an invalid length.
[ 1714.830906][T24273] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1714.852900][T24275] bond1: (slave geneve2): making interface the new active one
[ 1714.859955][T24275] bond1: (slave geneve2): Enslaving as an active interface with an up link
[ 1715.197523][T24284] macvlan1: entered promiscuous mode
[ 1715.203442][T24284] macvlan1: left promiscuous mode
[ 1715.558252][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6245'.
[ 1715.659326][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1715.872401][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1717.392619][T24332] 9p: Unknown uid 00000000004294967295
[ 1718.788468][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1719.438946][T24378] vlan3: entered allmulticast mode
[ 1719.540106][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1719.838115][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1720.315545][T19582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1720.365555][   T37] audit: type=1326 audit(2000000851.464:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24399 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7fc00000
[ 1720.484352][T17742] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[ 1720.560787][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1720.657543][T17742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1720.657581][T17742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1720.657632][T17742] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1720.657657][T17742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1720.707178][T17742] usb 2-1: config 0 descriptor??
[ 1721.064663][   T37] audit: type=1326 audit(2000000852.154:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24399 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5dfdeefc9 code=0x7fc00000
[ 1721.114978][T13480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.142562][T17742] elan 0003:04F3:0755.0030: unknown main item tag 0x0
[ 1721.142599][T17742] elan 0003:04F3:0755.0030: unknown main item tag 0x0
[ 1721.142763][T17742] elan 0003:04F3:0755.0030: unknown main item tag 0x0
[ 1721.142790][T17742] elan 0003:04F3:0755.0030: unknown main item tag 0x0
[ 1721.142815][T17742] elan 0003:04F3:0755.0030: unknown main item tag 0x0
[ 1721.143916][T17742] elan 0003:04F3:0755.0030: failed to start in urb: -90
[ 1721.188874][T17742] elan 0003:04F3:0755.0030: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[ 1721.411410][ T5889] usb 2-1: USB disconnect, device number 41
[ 1721.745541][T24429] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2452513283 (39240212528 ns) > initial count (24967832624 ns). Using initial count to start timer.
[ 1724.493293][T24462] evm: overlay not supported
[ 1725.123052][T24479] 9pnet_fd: Insufficient options for proto=fd
[ 1726.362401][T24516] input: syz1 as /devices/virtual/input/input54
[ 1726.574664][ T5889] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1726.734371][ T5889] usb 2-1: Using ep0 maxpacket: 16
[ 1726.737597][ T5889] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[ 1726.737624][ T5889] usb 2-1: config 1 has no interface number 0
[ 1726.737678][ T5889] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1726.737706][ T5889] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1726.737731][ T5889] usb 2-1: config 1 interface 105 has no altsetting 0
[ 1726.754757][ T5889] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1726.754787][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1726.754805][ T5889] usb 2-1: Product: syz
[ 1726.754819][ T5889] usb 2-1: Manufacturer: syz
[ 1726.754832][ T5889] usb 2-1: SerialNumber: syz
[ 1726.773451][T24514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1726.773759][T24514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1727.200082][T24514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1727.201551][T24514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1727.654149][ T5889] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1727.660216][ T5889] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1727.792676][ T5889] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:5a:31:ee:13:74
[ 1727.891943][ T5897] usb 2-1: USB disconnect, device number 42
[ 1727.898860][ T5897] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 1728.111745][T24547] netlink: 'syz.4.6353': attribute type 1 has an invalid length.
[ 1728.297333][ T5897] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1728.297514][ T5897] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1728.297681][ T5897] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 1728.445869][   T37] audit: type=1326 audit(2000000859.544:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24553 comm="syz.4.6356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f646d2eefc9 code=0x0
[ 1731.023019][T24607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=681636878 (43624760192 ns) > initial count (12691487104 ns). Using initial count to start timer.
[ 1731.201756][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.408901][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1732.986396][T24641] netlink: 'syz.3.6391': attribute type 12 has an invalid length.
[ 1732.986420][T24641] netlink: 'syz.3.6391': attribute type 29 has an invalid length.
[ 1732.986435][T24641] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6391'.
[ 1732.986461][T24641] netlink: 'syz.3.6391': attribute type 1 has an invalid length.
[ 1732.986475][T24641] netlink: 'syz.3.6391': attribute type 2 has an invalid length.
[ 1732.986489][T24641] netlink: 39 bytes leftover after parsing attributes in process `syz.3.6391'.
[ 1733.712658][   T37] audit: type=1326 audit(2000000864.804:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1733.714420][   T37] audit: type=1326 audit(2000000864.804:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1733.736805][   T37] audit: type=1326 audit(2000000864.834:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1733.739020][   T37] audit: type=1326 audit(2000000864.834:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1733.739080][   T37] audit: type=1326 audit(2000000864.834:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1733.740380][T24655] ptrace attach of "./syz-executor exec"[24656] was attempted by "./syz-executor exec"[24655]
[ 1733.740626][   T37] audit: type=1326 audit(2000000864.834:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1733.740683][   T37] audit: type=1326 audit(2000000864.834:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1733.740728][   T37] audit: type=1326 audit(2000000864.834:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1733.742832][   T37] audit: type=1326 audit(2000000864.834:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1733.742881][   T37] audit: type=1326 audit(2000000864.834:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24653 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1735.583827][T24693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6411'.
[ 1735.583857][T24693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6411'.
[ 1735.742840][T24697] sctp: [Deprecated]: syz.4.6412 (pid 24697) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1735.742840][T24697] Use struct sctp_sack_info instead
[ 1735.847613][T24699] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1735.899670][T24699] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1738.555980][T24772] all: renamed from lo (while UP)
[ 1738.800580][T24782] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6444'.
[ 1739.585710][T24801] netlink: 'syz.4.6453': attribute type 39 has an invalid length.
[ 1739.946107][T24803] netlink: 'syz.3.6454': attribute type 1 has an invalid length.
[ 1739.946131][T24803] netlink: 'syz.3.6454': attribute type 2 has an invalid length.
[ 1739.946145][T24803] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6454'.
[ 1741.364455][T17742] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[ 1741.540908][T17742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1741.540941][T17742] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1741.540983][T17742] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[ 1741.541007][T17742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1741.602148][T17742] usb 2-1: config 0 descriptor??
[ 1742.094901][T17742] uclogic 0003:5543:0064.0031: item fetching failed at offset 0/1
[ 1742.095858][T17742] uclogic 0003:5543:0064.0031: parse failed
[ 1742.096565][T17742] uclogic 0003:5543:0064.0031: probe with driver uclogic failed with error -22
[ 1742.329827][T17742] usb 2-1: USB disconnect, device number 43
[ 1743.158905][T24881] trusted_key: encrypted_key: insufficient parameters specified
[ 1743.460671][T24890] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6489'.
[ 1743.970428][T24899] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1743.970751][T24899] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1743.971021][T24899] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1743.971286][T24899] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1743.971407][T24899] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1744.008820][T24907] fuse: Bad value for 'fd'
[ 1744.080857][T24899] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1744.647564][T24919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6500'.
[ 1745.995211][T22582] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1745.995602][T22582] Bluetooth: hci2: command 0x0406 tx timeout
[ 1745.995640][T22582] Bluetooth: hci1: command 0x0406 tx timeout
[ 1748.385466][ T5806] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1749.265061][T13480] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[ 1749.282379][T13480] hid-generic 0000:0000:0000.0032: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1749.448166][   T37] kauditd_printk_skb: 14 callbacks suppressed
[ 1749.448186][   T37] audit: type=1400 audit(2000000880.544:748): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=25010 comm="syz.1.6534" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002
[ 1750.394604][ T5806] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1751.414751][T17742] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1751.446845][T25079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6560'.
[ 1751.446880][T25079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6560'.
[ 1751.544063][T25083] loop2: detected capacity change from 0 to 7
[ 1751.547177][T25081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6561'.
[ 1751.565059][T25083] Dev loop2: unable to read RDB block 7
[ 1751.565119][T25083]  loop2: unable to read partition table
[ 1751.565377][T25083] loop2: partition table beyond EOD, truncated
[ 1751.565398][T25083] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1751.567667][T17742] usb 6-1: Using ep0 maxpacket: 16
[ 1751.570327][T17742] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1751.570356][T17742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1751.592976][T17742] usb 6-1: config 0 descriptor??
[ 1751.609648][T17742] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1752.521745][T25112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6572'.
[ 1753.094478][T17742] gspca_sonixj: i2c_w8 err -71
[ 1753.115110][T17742] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[ 1753.200496][T17742] usb 6-1: USB disconnect, device number 43
[ 1753.811838][T25143] bridge_slave_0: default FDB implementation only supports local addresses
[ 1753.825265][T25143] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6580'.
[ 1753.825292][T25143] bridge_slave_0: default FDB implementation only supports local addresses
[ 1754.972589][T25166] ALSA: mixer_oss: invalid OSS volume ''
[ 1756.377722][T25210] netlink: 'syz.5.6609': attribute type 1 has an invalid length.
[ 1756.377748][T25210] netlink: 'syz.5.6609': attribute type 4 has an invalid length.
[ 1756.377760][T25210] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6609'.
[ 1757.286611][T25212] overlayfs: statfs failed on './file0'
[ 1758.685564][T25275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6639'.
[ 1758.999627][T25272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1759.413855][T25274] netlink: 'syz.5.6640': attribute type 12 has an invalid length.
[ 1760.356044][   T37] audit: type=1800 audit(2000000891.394:749): pid=25319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6660" name="bus" dev="overlay" ino=5739 res=0 errno=0
[ 1761.364398][T19582] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1761.554515][T19582] usb 6-1: Using ep0 maxpacket: 32
[ 1761.562161][T19582] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1761.562195][T19582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1761.562216][T19582] usb 6-1: Product: syz
[ 1761.562231][T19582] usb 6-1: Manufacturer: syz
[ 1761.562245][T19582] usb 6-1: SerialNumber: syz
[ 1761.583609][T19582] usb 6-1: config 0 descriptor??
[ 1761.624442][T19582] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1763.016026][T19582] gspca_topro: reg_r err -71
[ 1763.016058][T19582] gspca_topro: Sensor soi763a
[ 1763.035723][T19582] usb 6-1: USB disconnect, device number 44
[ 1763.344398][T13480] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1763.503689][T13480] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 1763.503722][T13480] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1763.503742][T13480] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1763.503762][T13480] usb 4-1: config 220 has no interface number 2
[ 1763.503853][T13480] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1763.503882][T13480] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1763.503900][T13480] usb 4-1: config 220 interface 76 has no altsetting 0
[ 1763.503918][T13480] usb 4-1: config 220 interface 1 has no altsetting 0
[ 1763.521005][T13480] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1763.521048][T13480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.521067][T13480] usb 4-1: Product: syz
[ 1763.521080][T13480] usb 4-1: Manufacturer: syz
[ 1763.521093][T13480] usb 4-1: SerialNumber: syz
[ 1763.804006][T13480] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[ 1763.804103][T13480] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1763.804146][T13480] uvcvideo 4-1:220.0: No valid video chain found.
[ 1763.805654][T13480] usb 4-1: selecting invalid altsetting 0
[ 1763.854468][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1763.875622][T13480] usb 4-1: selecting invalid altsetting 0
[ 1763.875666][T13480] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 1763.899562][T13480] usb 4-1: USB disconnect, device number 4
[ 1764.284412][T13480] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1764.437608][T13480] usb 2-1: Using ep0 maxpacket: 32
[ 1764.440725][T13480] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1764.440757][T13480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1764.566574][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1764.634504][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1765.009185][T13480] usb 2-1: config 0 descriptor??
[ 1765.031368][T13480] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1765.358989][T25460] netlink: 'syz.3.6723': attribute type 4 has an invalid length.
[ 1765.439158][T25462] netlink: 'syz.3.6723': attribute type 4 has an invalid length.
[ 1765.933252][T25474] netlink: 'syz.3.6730': attribute type 5 has an invalid length.
[ 1766.630207][T25500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6741'.
[ 1766.644453][T13480] gspca_sunplus: reg_w_riv err -71
[ 1766.644569][T13480] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[ 1766.653752][T13480] usb 2-1: USB disconnect, device number 44
[ 1770.134457][T17742] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 1770.294553][ T5854] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1770.297484][T17742] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1770.297518][T17742] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1770.309891][T17742] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1770.309920][T17742] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1770.309941][T17742] usb 10-1: Product: syz
[ 1770.309954][T17742] usb 10-1: Manufacturer: syz
[ 1770.309967][T17742] usb 10-1: SerialNumber: syz
[ 1770.444365][ T5854] usb 2-1: Using ep0 maxpacket: 32
[ 1770.446944][ T5854] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1770.446972][ T5854] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1770.446994][ T5854] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1770.447248][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1770.447273][ T5854] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1770.447299][ T5854] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1770.447346][ T5854] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1770.447371][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1770.542194][ T5854] usb 2-1: config 0 descriptor??
[ 1770.767901][ T5854] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1770.788418][ T5854] usb 2-1: USB disconnect, device number 45
[ 1770.812374][ T5854] usblp0: removed
[ 1770.830983][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6795'.
[ 1771.288376][ T5854] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1771.374041][T17742] cdc_ncm 10-1:1.0: SET_NTB_FORMAT failed
[ 1771.392685][T17742] cdc_ncm 10-1:1.0: bind() failure
[ 1771.429040][T17742] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[ 1771.429093][T17742] cdc_ncm 10-1:1.1: bind() failure
[ 1771.447805][ T5854] usb 2-1: Using ep0 maxpacket: 32
[ 1771.450903][ T5854] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1771.450939][ T5854] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1771.450959][ T5854] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1771.451020][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1771.451044][ T5854] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1771.451069][ T5854] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1771.451112][ T5854] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1771.451137][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1771.573501][T17742] usb 10-1: USB disconnect, device number 37
[ 1771.584621][ T5854] usb 2-1: config 0 descriptor??
[ 1771.604440][T13480] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1771.754652][T13480] usb 4-1: Using ep0 maxpacket: 16
[ 1771.759145][T13480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1771.780567][T13480] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1771.780602][T13480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1771.780624][T13480] usb 4-1: Product: syz
[ 1771.780640][T13480] usb 4-1: Manufacturer: syz
[ 1771.780655][T13480] usb 4-1: SerialNumber: syz
[ 1771.836020][ T5854] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1771.857249][T13480] usb 4-1: config 0 descriptor??
[ 1771.876504][T13480] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1771.876542][T13480] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1771.997985][T17742] usb 2-1: USB disconnect, device number 46
[ 1772.004899][T17742] usblp0: removed
[ 1772.493151][T13480] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1773.354508][T13480] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1773.354606][T13480] em28xx 4-1:0.0: board has no eeprom
[ 1773.424433][T13480] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1773.424466][T13480] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1773.445059][ T5854] em28xx 4-1:0.0: Binding DVB extension
[ 1773.473050][T13480] usb 4-1: USB disconnect, device number 5
[ 1773.475704][T13480] em28xx 4-1:0.0: Disconnecting em28xx
[ 1773.624435][ T5854] em28xx 4-1:0.0: Registering input extension
[ 1773.654141][T13480] em28xx 4-1:0.0: Closing input extension
[ 1773.793933][T13480] em28xx 4-1:0.0: Freeing device
[ 1774.174383][ T5854] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1774.291860][T25711] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6833'.
[ 1774.324680][ T5854] usb 2-1: Using ep0 maxpacket: 8
[ 1774.327658][ T5854] usb 2-1: config 0 has an invalid interface number: 186 but max is 0
[ 1774.327686][ T5854] usb 2-1: config 0 has no interface number 0
[ 1774.327740][ T5854] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1774.327767][ T5854] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1774.327794][ T5854] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1774.327820][ T5854] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1774.327842][ T5854] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1774.333748][ T5854] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1774.333779][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1774.333800][ T5854] usb 2-1: Product: syz
[ 1774.333814][ T5854] usb 2-1: Manufacturer: syz
[ 1774.333829][ T5854] usb 2-1: SerialNumber: syz
[ 1774.348853][ T5854] usb 2-1: config 0 descriptor??
[ 1774.589705][T25698] Bluetooth: hci0: Opcode 0x0401 failed: -22
[ 1774.601514][ T5854] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[ 1774.621497][ T5854] usb 2-1: USB disconnect, device number 47
[ 1775.195766][   T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1775.377460][   T44] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[ 1775.377493][   T44] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1775.377515][   T44] usb 4-1: config 0 has no interface number 0
[ 1775.523340][   T44] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[ 1775.523374][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1775.523395][   T44] usb 4-1: Product: syz
[ 1775.523410][   T44] usb 4-1: Manufacturer: syz
[ 1775.523424][   T44] usb 4-1: SerialNumber: syz
[ 1775.572873][   T44] usb 4-1: config 0 descriptor??
[ 1776.074633][   T44] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823)
[ 1776.074671][   T44] uvcvideo 4-1:0.64: No valid video chain found.
[ 1776.294771][T13480] usb 4-1: USB disconnect, device number 6
[ 1776.635282][ T5806] Bluetooth: hci0: command tx timeout
[ 1777.003788][T25768] veth2: entered promiscuous mode
[ 1777.003817][T25768] veth2: entered allmulticast mode
[ 1779.504145][   T37] audit: type=1326 audit(2000000910.594:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25848 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1779.534958][   T37] audit: type=1326 audit(2000000910.624:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25848 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1779.535020][   T37] audit: type=1326 audit(2000000910.624:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25848 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1779.535071][   T37] audit: type=1326 audit(2000000910.624:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25848 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1779.535128][   T37] audit: type=1326 audit(2000000910.624:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25848 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1779.535174][   T37] audit: type=1326 audit(2000000910.624:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25848 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1779.594561][T22582] Bluetooth: hci4: command 0x1003 tx timeout
[ 1779.595011][ T5806] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1780.099025][T25864] o2cb: This node has not been configured.
[ 1780.099052][T25864] o2cb: Cluster check failed. Fix errors before retrying.
[ 1780.099101][T25864] (syz.5.6902,25864,1):user_dlm_register:674 ERROR: status = -22
[ 1780.099120][T25864] (syz.5.6902,25864,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[ 1783.423343][   T37] audit: type=1326 audit(2000000914.514:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25967 comm="syz.9.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108fdbefc9 code=0x7ffc0000
[ 1783.426013][   T37] audit: type=1326 audit(2000000914.514:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25967 comm="syz.9.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108fdbefc9 code=0x7ffc0000
[ 1783.429126][   T37] audit: type=1326 audit(2000000914.524:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25967 comm="syz.9.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f108fdbefc9 code=0x7ffc0000
[ 1783.429660][   T37] audit: type=1326 audit(2000000914.524:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25967 comm="syz.9.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108fdbefc9 code=0x7ffc0000
[ 1783.613935][T25976] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6951'.
[ 1784.661829][   T37] kauditd_printk_skb: 22 callbacks suppressed
[ 1784.661849][   T37] audit: type=1326 audit(2000000915.754:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1784.661898][   T37] audit: type=1326 audit(2000000915.754:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1784.666831][   T37] audit: type=1326 audit(2000000915.764:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1784.666883][   T37] audit: type=1326 audit(2000000915.764:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1784.666924][   T37] audit: type=1326 audit(2000000915.764:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1784.673853][   T37] audit: type=1326 audit(2000000915.764:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1784.673906][   T37] audit: type=1326 audit(2000000915.764:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1784.673947][   T37] audit: type=1326 audit(2000000915.764:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1784.680937][   T37] audit: type=1326 audit(2000000915.774:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1784.680990][   T37] audit: type=1326 audit(2000000915.774:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26020 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0x200000000006 code=0x7ffc0000
[ 1784.734413][ T5854] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1784.994389][ T5854] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1784.994487][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1784.994511][ T5854] usb 2-1: Product: syz
[ 1784.994526][ T5854] usb 2-1: Manufacturer: syz
[ 1784.994542][ T5854] usb 2-1: SerialNumber: syz
[ 1787.102785][ T5854] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[ 1787.103253][ T5854] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[ 1787.103624][ T5854] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1787.103656][ T5854] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1787.125122][ T5854] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1787.214629][ T5854] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1787.374402][ T5854] usb 2-1: USB disconnect, device number 48
[ 1787.397353][T26060] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1788.341759][    T9] IPVS: starting estimator thread 0...
[ 1788.434761][T26069] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1788.512958][T26075] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[ 1788.512987][T26075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1788.513157][T26075] vhci_hcd vhci_hcd.0: Device attached
[ 1788.533281][T26081] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5)
[ 1788.533308][T26081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1788.533370][T26081] vhci_hcd vhci_hcd.0: Device attached
[ 1788.601155][T26075] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7)
[ 1788.601185][T26075] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1788.601243][T26075] vhci_hcd vhci_hcd.0: Device attached
[ 1788.602886][T26075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1788.626913][T26075] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11)
[ 1788.626948][T26075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1788.627001][T26075] vhci_hcd vhci_hcd.0: Device attached
[ 1788.655429][T26075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1788.656917][T26075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1788.658125][T26075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1788.676140][T26075] vhci_hcd vhci_hcd.0: port 0 already used
[ 1788.683389][T26090] vhci_hcd: connection closed
[ 1788.695126][T26086] vhci_hcd: connection closed
[ 1788.697788][T26082] vhci_hcd: connection closed
[ 1788.705557][T26077] vhci_hcd: connection closed
[ 1788.705721][ T8406] vhci_hcd: stop threads
[ 1788.705741][ T8406] vhci_hcd: release socket
[ 1788.705818][ T8406] vhci_hcd: disconnect device
[ 1788.706031][ T8406] vhci_hcd: stop threads
[ 1788.706040][ T8406] vhci_hcd: release socket
[ 1788.706101][ T8406] vhci_hcd: disconnect device
[ 1788.713920][ T8406] vhci_hcd: stop threads
[ 1788.713934][ T8406] vhci_hcd: release socket
[ 1788.714160][ T8406] vhci_hcd: disconnect device
[ 1788.774260][ T8406] vhci_hcd: stop threads
[ 1788.774280][ T8406] vhci_hcd: release socket
[ 1788.774349][ T8406] vhci_hcd: disconnect device
[ 1788.778294][T19582] vhci_hcd: vhci_device speed not set
[ 1789.346415][T26084] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1789.834592][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1790.007266][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1790.007296][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1790.008913][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1790.008951][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1790.008973][    T9] usb 4-1: SerialNumber: syz
[ 1790.237564][    T9] usb 4-1: 0:2 : does not exist
[ 1790.237673][    T9] usb 4-1: unit 255 not found!
[ 1790.253809][    T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1790.364432][    T9] usb 4-1: USB disconnect, device number 7
[ 1790.634467][T17742] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1790.788664][T17742] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1790.788693][T17742] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1790.793259][T17742] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1790.793289][T17742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1790.793311][T17742] usb 6-1: SerialNumber: syz
[ 1791.067332][T17742] usb 6-1: 0:2 : does not exist
[ 1791.098134][T17742] usb 6-1: USB disconnect, device number 45
[ 1791.247358][   T37] kauditd_printk_skb: 2 callbacks suppressed
[ 1791.247379][   T37] audit: type=1326 audit(2000000922.344:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26157 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108fdbefc9 code=0x7fc00000
[ 1792.641074][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1794.007492][T19582] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[ 1794.236876][T19582] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1794.236911][T19582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1794.250863][T19582] usb 4-1: config 0 descriptor??
[ 1795.324376][ T5897] usb 6-1: new low-speed USB device number 46 using dummy_hcd
[ 1795.478978][ T5897] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1795.479009][ T5897] usb 6-1: config 0 has no interface number 0
[ 1795.479139][ T5897] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1795.479169][ T5897] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1795.479276][ T5897] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1795.479301][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1795.520288][ T5897] usb 6-1: config 0 descriptor??
[ 1795.521345][T26264] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1795.545417][ T5897] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1796.074102][   T44] usb 6-1: USB disconnect, device number 46
[ 1796.326191][T19582] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1796.326522][T19582] asix 4-1:0.0: probe with driver asix failed with error -71
[ 1796.341963][T19582] usb 4-1: USB disconnect, device number 8
[ 1796.596883][T26304] kvm: pic: non byte read
[ 1796.597387][T26304] kvm: pic: level sensitive irq not supported
[ 1796.597467][T26304] kvm: pic: non byte read
[ 1796.597776][T26304] kvm: pic: level sensitive irq not supported
[ 1796.597853][T26304] kvm: pic: non byte read
[ 1796.604423][T26304] kvm: pic: level sensitive irq not supported
[ 1796.604500][T26304] kvm: pic: non byte read
[ 1796.604945][T26304] kvm: pic: level sensitive irq not supported
[ 1796.605013][T26304] kvm: pic: non byte read
[ 1796.605304][T26304] kvm: pic: level sensitive irq not supported
[ 1796.605368][T26304] kvm: pic: non byte read
[ 1796.605652][T26304] kvm: pic: level sensitive irq not supported
[ 1796.605715][T26304] kvm: pic: non byte read
[ 1796.606003][T26304] kvm: pic: level sensitive irq not supported
[ 1796.606066][T26304] kvm: pic: non byte read
[ 1796.606348][T26304] kvm: pic: level sensitive irq not supported
[ 1796.606412][T26304] kvm: pic: non byte read
[ 1797.148714][T26315] fuse: Invalid rootmode
[ 1798.230087][T26332] kvm: pic: single mode not supported
[ 1798.230185][T26332] kvm: pic: non byte read
[ 1798.230563][T26332] kvm: pic: single mode not supported
[ 1798.230574][T26332] kvm: pic: level sensitive irq not supported
[ 1798.230801][T26332] kvm: pic: single mode not supported
[ 1799.630910][T26356] netlink: 'syz.1.7107': attribute type 11 has an invalid length.
[ 1800.634447][ T5897] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1800.792697][ T5897] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1800.792732][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1800.792754][ T5897] usb 6-1: Product: syz
[ 1800.792769][ T5897] usb 6-1: Manufacturer: syz
[ 1800.792783][ T5897] usb 6-1: SerialNumber: syz
[ 1802.974873][T17742] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1803.018229][ T5897] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1803.134730][T17742] usb 4-1: Using ep0 maxpacket: 32
[ 1803.137549][T17742] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[ 1803.137576][T17742] usb 4-1: config 0 has no interface number 0
[ 1803.137640][T17742] usb 4-1: config 0 interface 89 has no altsetting 0
[ 1803.141453][T17742] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 1803.141484][T17742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1803.141612][T17742] usb 4-1: Product: syz
[ 1803.141628][T17742] usb 4-1: Manufacturer: syz
[ 1803.141642][T17742] usb 4-1: SerialNumber: syz
[ 1803.208166][T17742] usb 4-1: config 0 descriptor??
[ 1803.220258][ T5897] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[ 1803.232145][ T5897] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1803.232202][ T5897] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1803.237572][ T5897] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1803.271012][T17742] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1803.271053][T17742] em28xx 4-1:0.89: Video interface 89 found: bulk
[ 1803.318049][ T5897] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[ 1803.364769][ T5897] usb 6-1: USB disconnect, device number 47
[ 1804.479189][T17742] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[ 1805.847276][T17742] em28xx 4-1:0.89: writing to i2c device at 0xa0 failed (error=-5)
[ 1805.847311][T17742] em28xx 4-1:0.89: failed to read eeprom (err=-5)
[ 1805.847362][T17742] em28xx 4-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[ 1805.934316][T17742] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[ 1805.934350][T17742] em28xx 4-1:0.89: analog set to bulk mode.
[ 1805.936146][ T5875] em28xx 4-1:0.89: Registering V4L2 extension
[ 1805.991062][T17742] usb 4-1: USB disconnect, device number 9
[ 1806.007889][T17742] em28xx 4-1:0.89: Disconnecting em28xx
[ 1806.091227][ T5875] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[ 1806.091254][ T5875] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[ 1806.091609][ T5875] em28xx 4-1:0.89: No AC97 audio processor
[ 1806.125428][ T5875] usb 4-1: Decoder not found
[ 1806.125450][ T5875] em28xx 4-1:0.89: failed to create media graph
[ 1806.125495][ T5875] em28xx 4-1:0.89: V4L2 device video103 deregistered
[ 1806.162070][ T5875] em28xx 4-1:0.89: Registering snapshot button...
[ 1806.192002][T26436] sctp: [Deprecated]: syz.1.7137 (pid 26436) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1806.192002][T26436] Use struct sctp_sack_info instead
[ 1806.215190][ T5875] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input56
[ 1806.279377][ T5875] em28xx 4-1:0.89: Remote control support is not available for this card.
[ 1806.279446][T17742] em28xx 4-1:0.89: Closing input extension
[ 1806.282732][T17742] em28xx 4-1:0.89: Deregistering snapshot button
[ 1807.743426][T17742] em28xx 4-1:0.89: Freeing device
[ 1808.205297][   T44] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1808.384740][   T44] usb 2-1: Using ep0 maxpacket: 8
[ 1808.409791][   T44] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[ 1808.409823][   T44] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[ 1808.409845][   T44] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 1808.409868][   T44] usb 2-1: config 250 has no interface number 0
[ 1808.409925][   T44] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[ 1808.409953][   T44] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1808.409980][   T44] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1808.410004][   T44] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[ 1808.410029][   T44] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[ 1808.410058][   T44] usb 2-1: config 250 interface 228 has no altsetting 0
[ 1808.605259][   T44] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 1808.605294][   T44] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 1808.605316][   T44] usb 2-1: Product: syz
[ 1808.605332][   T44] usb 2-1: SerialNumber: syz
[ 1808.720493][   T44] hub 2-1:250.228: bad descriptor, ignoring hub
[ 1808.720541][   T44] hub 2-1:250.228: probe with driver hub failed with error -5
[ 1808.961159][   T44] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[ 1809.294786][  T993] usb 2-1: USB disconnect, device number 49
[ 1809.380039][  T993] usblp0: removed
[ 1809.680328][T26499] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1809.724355][   T44] usb 2-1: new low-speed USB device number 50 using dummy_hcd
[ 1809.857364][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1809.879939][   T44] usb 2-1: config 0 has no interfaces?
[ 1809.879982][   T44] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1809.880007][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1809.915730][   T44] usb 2-1: config 0 descriptor??
[ 1810.492236][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1810.546072][  T993] usb 2-1: USB disconnect, device number 50
[ 1810.822971][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1811.024646][   T44] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1811.183126][   T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1811.183199][   T44] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1811.183224][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1811.213161][   T44] usb 6-1: config 0 descriptor??
[ 1811.247342][   T44] pwc: Askey VC010 type 2 USB webcam detected.
[ 1811.677281][   T44] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1811.680780][   T44] pwc: recv_control_msg error -32 req 02 val 2700
[ 1811.682221][   T44] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1811.685269][   T44] pwc: recv_control_msg error -32 req 04 val 1000
[ 1811.688071][   T44] pwc: recv_control_msg error -32 req 04 val 1300
[ 1811.691037][   T44] pwc: recv_control_msg error -32 req 04 val 1400
[ 1811.691969][   T44] pwc: recv_control_msg error -32 req 02 val 2000
[ 1811.702836][   T44] pwc: recv_control_msg error -32 req 02 val 2100
[ 1811.860016][T26543] bridge0: port 1(gretap0) entered blocking state
[ 1811.872099][T26543] bridge0: port 1(gretap0) entered disabled state
[ 1811.910441][T26543] gretap0: entered promiscuous mode
[ 1811.930687][   T44] pwc: recv_control_msg error -71 req 02 val 2500
[ 1811.931323][   T44] pwc: recv_control_msg error -71 req 02 val 2400
[ 1811.932025][   T44] pwc: recv_control_msg error -71 req 02 val 2600
[ 1811.932913][   T44] pwc: recv_control_msg error -71 req 02 val 2900
[ 1811.936342][   T44] pwc: recv_control_msg error -71 req 02 val 2800
[ 1811.937068][   T44] pwc: recv_control_msg error -71 req 04 val 1100
[ 1811.938644][   T44] pwc: recv_control_msg error -71 req 04 val 1200
[ 1811.949516][   T44] pwc: Registered as video103.
[ 1811.952909][   T44] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input57
[ 1811.976945][   T44] usb 6-1: USB disconnect, device number 48
[ 1812.017644][T26543] bridge0: port 1(gretap0) entered blocking state
[ 1812.018623][T26543] bridge0: port 1(gretap0) entered forwarding state
[ 1812.148893][T26544] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1812.236585][T26548] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface
[ 1812.318496][T26548] bond0 (unregistering): Released all slaves
[ 1812.377933][T26546] gretap0: left promiscuous mode
[ 1812.378227][T26546] bridge0: port 1(gretap0) entered disabled state
[ 1812.424673][T17742] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1812.507900][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1812.631408][T17742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1812.631442][T17742] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1812.631468][T17742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1812.631501][T17742] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1812.631544][T17742] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1812.631567][T17742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1812.644427][T17742] usb 4-1: config 0 descriptor??
[ 1812.958105][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1813.051966][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1813.287362][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1813.346516][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1813.355042][T17742] hdpvr 4-1:0.0: firmware version 0x4b dated ³×¯ZÇZý[α±qû¹ü
[ 1813.355066][T17742] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[ 1813.889199][T17742] hdpvr 4-1:0.0: Could not setup controls
[ 1813.890150][T17742] hdpvr 4-1:0.0: registering videodev failed
[ 1813.901415][T17742] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71
[ 1813.907077][T17742] usb 4-1: USB disconnect, device number 10
[ 1816.243516][T26625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7210'.
[ 1817.018573][   T37] audit: type=1326 audit(2000000948.114:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1817.018645][   T37] audit: type=1326 audit(2000000948.114:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1817.018698][   T37] audit: type=1326 audit(2000000948.114:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1817.021124][   T37] audit: type=1326 audit(2000000948.114:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1817.037814][   T37] audit: type=1326 audit(2000000948.134:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1817.037872][   T37] audit: type=1326 audit(2000000948.134:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1817.037917][   T37] audit: type=1326 audit(2000000948.134:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1817.044578][   T37] audit: type=1326 audit(2000000948.134:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1817.044660][   T37] audit: type=1326 audit(2000000948.134:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1817.044705][   T37] audit: type=1326 audit(2000000948.144:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26635 comm="syz.3.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5dfdeefc9 code=0x7ffc0000
[ 1820.183464][T26695] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7234'.
[ 1820.183507][T26695] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7234'.
[ 1820.783910][T26695] ip6gretap0: entered promiscuous mode
[ 1820.802068][T26695] syz_tun: entered promiscuous mode
[ 1828.081925][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1828.274316][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1828.274955][  T993] usb 10-1: new low-speed USB device number 38 using dummy_hcd
[ 1829.083806][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1829.117006][  T993] usb 10-1: No LPM exit latency info found, disabling LPM.
[ 1829.119017][  T993] usb 10-1: config 1 interface 0 altsetting 195 endpoint 0x82 is Bulk; changing to Interrupt
[ 1829.119047][  T993] usb 10-1: config 1 interface 0 altsetting 195 endpoint 0x3 is Bulk; changing to Interrupt
[ 1829.119072][  T993] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1829.165090][  T993] usb 10-1: string descriptor 0 read error: -22
[ 1829.165281][  T993] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1829.165306][  T993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1829.209072][T26825] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1829.209289][T26825] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1829.241338][  T993] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22
[ 1829.474122][ T1146] usb 10-1: USB disconnect, device number 38
[ 1830.424433][ T5897] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1830.457522][T26875] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7289'.
[ 1830.574524][ T5897] usb 4-1: Using ep0 maxpacket: 16
[ 1830.577043][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1830.577076][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1830.613126][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1830.613169][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1830.613192][ T5897] usb 4-1: Product: syz
[ 1830.613208][ T5897] usb 4-1: Manufacturer: syz
[ 1830.613224][ T5897] usb 4-1: SerialNumber: syz
[ 1830.656739][ T5897] usb 4-1: config 0 descriptor??
[ 1830.662389][ T5897] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1830.662423][ T5897] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 1831.921396][ T5897] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1833.325415][ T5897] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[ 1833.972774][ T5897] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[ 1835.613202][ T5897] em28xx 4-1:0.0: couldn't setup AC97 register 2
[ 1835.622090][ T5897] em28xx 4-1:0.0: couldn't setup AC97 register 4
[ 1835.627597][ T5897] em28xx 4-1:0.0: couldn't setup AC97 register 6
[ 1835.653021][ T5897] em28xx 4-1:0.0: couldn't setup AC97 register 54
[ 1835.653311][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[ 1835.653868][ T5897] em28xx 4-1:0.0: couldn't setup AC97 register 56
[ 1835.654291][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[ 1835.704154][ T5897] usb 4-1: USB disconnect, device number 11
[ 1837.095561][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1837.359290][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1837.669452][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1838.047469][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1838.271270][   T37] kauditd_printk_skb: 81 callbacks suppressed
[ 1838.271291][   T37] audit: type=1326 audit(2000000969.364:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.304296][   T37] audit: type=1326 audit(2000000969.394:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.304357][   T37] audit: type=1326 audit(2000000969.394:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.304779][   T37] audit: type=1326 audit(2000000969.404:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.304834][   T37] audit: type=1326 audit(2000000969.404:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.311748][   T37] audit: type=1326 audit(2000000969.404:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.314422][   T37] audit: type=1326 audit(2000000969.404:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.314476][   T37] audit: type=1326 audit(2000000969.404:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.314517][   T37] audit: type=1326 audit(2000000969.404:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.335483][   T37] audit: type=1326 audit(2000000969.434:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26989 comm="syz.5.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb60b7efc9 code=0x7ffc0000
[ 1838.828284][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1840.290267][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1844.867612][T27032] kvm: requested 25142 ns i8254 timer period limited to 200000 ns
[ 1844.919642][T27032] kvm: requested 133257 ns i8254 timer period limited to 200000 ns
[ 1844.920206][T27032] kvm: requested 88838 ns i8254 timer period limited to 200000 ns
[ 1844.920829][T27032] kvm: requested 77104 ns i8254 timer period limited to 200000 ns
[ 1844.970456][T27032] kvm: requested 25142 ns i8254 timer period limited to 200000 ns
[ 1844.970840][T27032] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[ 1844.971181][T27032] kvm: requested 180190 ns i8254 timer period limited to 200000 ns
[ 1845.444354][  T993] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1845.608863][  T993] usb 4-1: Using ep0 maxpacket: 8
[ 1845.635817][  T993] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1845.635839][  T993] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1845.635854][  T993] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1845.635868][  T993] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1845.635893][  T993] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1845.635907][  T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1845.844875][  T993] usb 4-1: GET_CAPABILITIES returned 0
[ 1845.844908][  T993] usbtmc 4-1:16.0: can't read capabilities
[ 1846.070870][T27056] 9pnet_virtio: no channels available for device syz
[ 1846.120838][  T993] usb 4-1: USB disconnect, device number 12
[ 1847.254870][T27082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7365'.
[ 1847.254898][T27082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7365'.
[ 1847.254918][T27082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7365'.
[ 1847.254967][T27082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7365'.
[ 1851.558484][T27121] IPv6: Can't replace route, no match found
[ 1851.873220][   T37] kauditd_printk_skb: 13 callbacks suppressed
[ 1851.873241][   T37] audit: type=1326 audit(2000000982.954:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1851.873294][   T37] audit: type=1326 audit(2000000982.964:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1851.874940][   T37] audit: type=1326 audit(2000000982.974:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1851.874999][   T37] audit: type=1326 audit(2000000982.974:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1851.875048][   T37] audit: type=1326 audit(2000000982.974:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1851.929982][   T37] audit: type=1326 audit(2000000983.024:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1851.935652][   T37] audit: type=1326 audit(2000000983.024:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1851.935951][   T37] audit: type=1326 audit(2000000983.034:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1851.937914][   T37] audit: type=1326 audit(2000000983.034:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1851.938185][   T37] audit: type=1326 audit(2000000983.034:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.1.7380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2505efc9 code=0x7ffc0000
[ 1853.978027][T27142] bond0: (slave macvlan2): Opening slave failed
[ 1854.087248][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1854.214310][ T5897] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[ 1854.396417][ T5897] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1854.396440][ T5897] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1854.396464][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1854.396486][ T5897] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[ 1854.396500][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1854.539764][ T5897] usb 6-1: config 0 descriptor??
[ 1855.181097][T27170] Bluetooth: hci0: invalid length 0, exp 2 for type 9
[ 1856.466924][T27186] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1857.083603][ T5897] usbhid 6-1:0.0: can't add hid device: -71
[ 1857.083752][ T5897] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1857.190101][ T5897] usb 6-1: USB disconnect, device number 49
[ 1861.037732][    C0] ------------[ cut here ]------------
[ 1861.037750][    C0] refcount_t: addition on 0; use-after-free.
[ 1861.038271][    C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0
[ 1861.038312][    C0] Modules linked in:
[ 1861.038332][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1861.038358][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1861.038371][    C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[ 1861.038397][    C0] Code: 00 00 e8 f9 f0 3d fd 5b 41 5e e9 d1 a2 4a 06 cc e8 eb f0 3d fd c6 05 58 8c 60 0a 01 90 48 c7 c7 a0 9a 3e 8b e8 87 38 02 fd 90 <0f> 0b 90 90 eb d7 e8 cb f0 3d fd c6 05 39 8c 60 0a 01 90 48 c7 c7
[ 1861.038417][    C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246
[ 1861.038437][    C0] RAX: 724d91bae0c9db00 RBX: 0000000000000002 RCX: ffff88801baeda00
[ 1861.038454][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 1861.038469][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[ 1861.038483][    C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18
[ 1861.038500][    C0] R13: ffff88803d2b8460 R14: ffff88803d2b8080 R15: dffffc0000000000
[ 1861.038517][    C0] FS:  0000000000000000(0000) GS:ffff888126bc2000(0000) knlGS:0000000000000000
[ 1861.038536][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1861.038553][    C0] CR2: 00007ffe4a258000 CR3: 000000002ce78000 CR4: 00000000003526f0
[ 1861.038575][    C0] Call Trace:
[ 1861.038585][    C0]  <TASK>
[ 1861.038597][    C0]  mptcp_schedule_work+0x164/0x1a0
[ 1861.038627][    C0]  mptcp_tout_timer+0x21/0xa0
[ 1861.038657][    C0]  call_timer_fn+0x17e/0x5f0
[ 1861.038681][    C0]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1861.038708][    C0]  ? call_timer_fn+0xbe/0x5f0
[ 1861.038731][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1861.038768][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1861.038798][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1861.038822][    C0]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1861.038853][    C0]  __run_timer_base+0x648/0x970
[ 1861.038908][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1861.038964][    C0]  run_timer_softirq+0xb7/0x180
[ 1861.038988][    C0]  handle_softirqs+0x22f/0x710
[ 1861.039023][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1861.039059][    C0]  run_ktimerd+0xcf/0x190
[ 1861.039092][    C0]  ? __pfx_run_ktimerd+0x10/0x10
[ 1861.039113][    C0]  ? schedule+0x91/0x360
[ 1861.039150][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1861.039172][    C0]  smpboot_thread_fn+0x542/0xa60
[ 1861.039196][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1861.039231][    C0]  kthread+0x711/0x8a0
[ 1861.039263][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1861.039285][    C0]  ? __pfx_kthread+0x10/0x10
[ 1861.039308][    C0]  ? rt_spin_unlock+0x150/0x200
[ 1861.039338][    C0]  ? rt_spin_unlock+0x161/0x200
[ 1861.039360][    C0]  ? __pfx_kthread+0x10/0x10
[ 1861.039388][    C0]  ret_from_fork+0x4bc/0x870
[ 1861.039425][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1861.039468][    C0]  ? __switch_to_asm+0x39/0x70
[ 1861.039496][    C0]  ? __switch_to_asm+0x33/0x70
[ 1861.039523][    C0]  ? __pfx_kthread+0x10/0x10
[ 1861.039552][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1861.039606][    C0]  </TASK>
[ 1861.039618][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1861.039634][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1861.039657][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1861.039670][    C0] Call Trace:
[ 1861.039680][    C0]  <TASK>
[ 1861.039689][    C0]  dump_stack_lvl+0x99/0x250
[ 1861.039717][    C0]  ? __asan_memcpy+0x40/0x70
[ 1861.039749][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1861.039777][    C0]  ? __pfx__printk+0x10/0x10
[ 1861.039822][    C0]  vpanic+0x237/0x6d0
[ 1861.039845][    C0]  ? __pfx_vpanic+0x10/0x10
[ 1861.039881][    C0]  panic+0xb9/0xc0
[ 1861.039903][    C0]  ? __pfx_panic+0x10/0x10
[ 1861.039948][    C0]  __warn+0x31b/0x4b0
[ 1861.039968][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1861.039996][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1861.040021][    C0]  report_bug+0x2be/0x4f0
[ 1861.040047][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1861.040081][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1861.040105][    C0]  ? refcount_warn_saturate+0xfc/0x1d0
[ 1861.040130][    C0]  handle_bug+0x84/0x160
[ 1861.040163][    C0]  exc_invalid_op+0x1a/0x50
[ 1861.040194][    C0]  asm_exc_invalid_op+0x1a/0x20
[ 1861.040215][    C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[ 1861.040240][    C0] Code: 00 00 e8 f9 f0 3d fd 5b 41 5e e9 d1 a2 4a 06 cc e8 eb f0 3d fd c6 05 58 8c 60 0a 01 90 48 c7 c7 a0 9a 3e 8b e8 87 38 02 fd 90 <0f> 0b 90 90 eb d7 e8 cb f0 3d fd c6 05 39 8c 60 0a 01 90 48 c7 c7
[ 1861.040258][    C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246
[ 1861.040277][    C0] RAX: 724d91bae0c9db00 RBX: 0000000000000002 RCX: ffff88801baeda00
[ 1861.040293][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 1861.040307][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[ 1861.040320][    C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18
[ 1861.040345][    C0] R13: ffff88803d2b8460 R14: ffff88803d2b8080 R15: dffffc0000000000
[ 1861.040387][    C0]  mptcp_schedule_work+0x164/0x1a0
[ 1861.040413][    C0]  mptcp_tout_timer+0x21/0xa0
[ 1861.040443][    C0]  call_timer_fn+0x17e/0x5f0
[ 1861.040466][    C0]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1861.040492][    C0]  ? call_timer_fn+0xbe/0x5f0
[ 1861.040516][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1861.040552][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1861.040580][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1861.040605][    C0]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1861.040636][    C0]  __run_timer_base+0x648/0x970
[ 1861.040690][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1861.040745][    C0]  run_timer_softirq+0xb7/0x180
[ 1861.040769][    C0]  handle_softirqs+0x22f/0x710
[ 1861.040803][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1861.040837][    C0]  run_ktimerd+0xcf/0x190
[ 1861.040861][    C0]  ? __pfx_run_ktimerd+0x10/0x10
[ 1861.040882][    C0]  ? schedule+0x91/0x360
[ 1861.040927][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1861.040948][    C0]  smpboot_thread_fn+0x542/0xa60
[ 1861.040972][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1861.041006][    C0]  kthread+0x711/0x8a0
[ 1861.041037][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1861.041060][    C0]  ? __pfx_kthread+0x10/0x10
[ 1861.041089][    C0]  ? rt_spin_unlock+0x150/0x200
[ 1861.041119][    C0]  ? rt_spin_unlock+0x161/0x200
[ 1861.041140][    C0]  ? __pfx_kthread+0x10/0x10
[ 1861.041169][    C0]  ret_from_fork+0x4bc/0x870
[ 1861.041205][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1861.041248][    C0]  ? __switch_to_asm+0x39/0x70
[ 1861.041275][    C0]  ? __switch_to_asm+0x33/0x70
[ 1861.041301][    C0]  ? __pfx_kthread+0x10/0x10
[ 1861.041330][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1861.041382][    C0]  </TASK>
[ 1861.041642][    C0] Kernel Offset: disabled