last executing test programs:
12m49.941225687s ago: executing program 0 (id=1):
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
fcntl$setlease(r1, 0x400, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1})
io_uring_enter(0xffffffffffffffff, 0x258a, 0x0, 0x6a, 0x0, 0x63)
fcntl$setlease(r0, 0x400, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
12m47.59257025s ago: executing program 0 (id=9):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="a658", 0x2}], 0x1}}], 0x1, 0x1)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
12m47.328445638s ago: executing program 0 (id=10):
r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0xacf3, 0x0, 0x4}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x7180, 0x95ea, 0xa, &(0x7f0000000480)={[0x1]}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0})
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
12m31.51266269s ago: executing program 32 (id=10):
r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0xacf3, 0x0, 0x4}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x7180, 0x95ea, 0xa, &(0x7f0000000480)={[0x1]}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0})
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
27.241179689s ago: executing program 5 (id=1763):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x25e)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000647000/0x1000)=nil)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
recvmsg(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@hyper, 0xfffffffc}, @hyper, 0x4, 0xabd, 0x2449, 0x0, 0xfffffffffffffffd, 0x0, 0x200})
landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0xbd, 0x0)
27.032339278s ago: executing program 5 (id=1764):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000)
io_uring_setup(0x441, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{0x0, 0x1a000}], 0x1, 0x2a}}], 0x48}, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0xb6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
21.536534988s ago: executing program 5 (id=1775):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8e00, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x0, 0x10000000000000}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
16.779480075s ago: executing program 2 (id=1784):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40})
r0 = fsopen(&(0x7f0000002100)='gfs2meta\x00', 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400)
r4 = dup(r3)
read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f00000002c0)='c:\xa9\xd0\xc3\x1e\xcel\\\xe0\xe7\x97\xc3\x12\xe0\x12\x1a{z`bH\xbeC\x19T\x81H\xadY3\x80\xf4s[\x1b\xd3|lt\x99\x97\x98\x15\x89\xbewo9\x81U\xa6\x9a\xa4\xbf\b?\xf4\xd0\xb8\x12u\xfbC\xc2Z\xa63\xdb{\xabmU1q\x95w\x01E\xbb:\xfaSh\xe4o\x8a\xe5\x11\x91\xec\x0f|s\xfa-\xa8`\xd1\xe2\x84\xa8\xc6\xbb\x02d\xd3\x8d\v3C\xed3+\x8b\xdf', 0x0)
socket$inet6(0xa, 0x6, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0xd, 0x1, 0x0, "bb1e000064000080007f28becf0500063475de71000077a16c80b6db943400"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
16.619205302s ago: executing program 5 (id=1786):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x40000000000000fb, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7fffffff, 0x1, 0x4})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
mkdir(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
chdir(0x0)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180))
15.137553465s ago: executing program 5 (id=1788):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x580d5476}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c)
sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="98", 0x1}], 0x1}, 0x8001)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd06f, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x40009)
14.340426545s ago: executing program 5 (id=1790):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000280), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
symlink(0x0, &(0x7f0000000100)='./file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = msgget(0x1, 0x5a0)
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/215)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/4096)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000011c0)=""/173)
getgid()
msgctl$IPC_SET(0x0, 0x1, 0x0)
semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000015c0)=""/86)
msgctl$IPC_RMID(r2, 0x0)
13.254936729s ago: executing program 33 (id=1790):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000280), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
symlink(0x0, &(0x7f0000000100)='./file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = msgget(0x1, 0x5a0)
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/215)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/4096)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000011c0)=""/173)
getgid()
msgctl$IPC_SET(0x0, 0x1, 0x0)
semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000015c0)=""/86)
msgctl$IPC_RMID(r2, 0x0)
13.244882983s ago: executing program 2 (id=1792):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
12.194317247s ago: executing program 2 (id=1794):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r3, 0x1ad72f7)
ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000400)={[{0x8001, 0x8000, 0xd2, 0xfe, 0x7, 0x4, 0xe6, 0x8, 0x61, 0x4, 0x20, 0xf8, 0x2}, {0xc9, 0x81, 0x9, 0x3, 0x80, 0x8, 0x7f, 0x5b, 0xf, 0x2, 0x2, 0x3, 0x3}, {0x3, 0x3, 0x3, 0x3, 0x5, 0x7, 0x2, 0x6, 0xfa, 0x2d, 0x65, 0x6, 0x3}], 0x3})
accept4$netrom(r3, 0x0, 0x0, 0x80000)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r8 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r7)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r8})
keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x40c}}, 0x0)
10.510245114s ago: executing program 2 (id=1798):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x40000000000000fb, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7fffffff, 0x1, 0x4})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
mkdir(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
chdir(0x0)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180))
10.292785573s ago: executing program 2 (id=1799):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00')
readv(r0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8932, &(0x7f0000000900)={'wlan1\x00', @local})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000100), 0x6)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00', 0x1, r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000002c0)={&(0x7f0000000240)=[{0xfffc, 0x11, 0x0, 0x0}, {0x8, 0x2000, 0x0, 0x0}], 0x2})
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
9.862520221s ago: executing program 2 (id=1801):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40})
r0 = fsopen(&(0x7f0000002100)='gfs2meta\x00', 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400)
r4 = dup(r3)
read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f00000002c0)='c:\xa9\xd0\xc3\x1e\xcel\\\xe0\xe7\x97\xc3\x12\xe0\x12\x1a{z`bH\xbeC\x19T\x81H\xadY3\x80\xf4s[\x1b\xd3|lt\x99\x97\x98\x15\x89\xbewo9\x81U\xa6\x9a\xa4\xbf\b?\xf4\xd0\xb8\x12u\xfbC\xc2Z\xa63\xdb{\xabmU1q\x95w\x01E\xbb:\xfaSh\xe4o\x8a\xe5\x11\x91\xec\x0f|s\xfa-\xa8`\xd1\xe2\x84\xa8\xc6\xbb\x02d\xd3\x8d\v3C\xed3+\x8b\xdf', 0x0)
socket$inet6(0xa, 0x6, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0xd, 0x1, 0x0, "bb1e000064000080007f28becf0500063475de71000077a16c80b6db943400"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
8.239868161s ago: executing program 34 (id=1801):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40})
r0 = fsopen(&(0x7f0000002100)='gfs2meta\x00', 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400)
r4 = dup(r3)
read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f00000002c0)='c:\xa9\xd0\xc3\x1e\xcel\\\xe0\xe7\x97\xc3\x12\xe0\x12\x1a{z`bH\xbeC\x19T\x81H\xadY3\x80\xf4s[\x1b\xd3|lt\x99\x97\x98\x15\x89\xbewo9\x81U\xa6\x9a\xa4\xbf\b?\xf4\xd0\xb8\x12u\xfbC\xc2Z\xa63\xdb{\xabmU1q\x95w\x01E\xbb:\xfaSh\xe4o\x8a\xe5\x11\x91\xec\x0f|s\xfa-\xa8`\xd1\xe2\x84\xa8\xc6\xbb\x02d\xd3\x8d\v3C\xed3+\x8b\xdf', 0x0)
socket$inet6(0xa, 0x6, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0xd, 0x1, 0x0, "bb1e000064000080007f28becf0500063475de71000077a16c80b6db943400"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
8.223719816s ago: executing program 4 (id=1806):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
gettid()
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
getpid()
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0x40082104, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000040)={{r4, r5+60000000}, {r1, r2+60000000}}, 0x0)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e72"], 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040))
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1}, {0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x800, 0xffff, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x1, 0x0, 0x2004000000000, 0x0, 0x0, 0xcc60, 0x7ff], 0x0, 0x200})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000006c0)=""/196, 0xc4)
readv(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/227, 0xe3}], 0x1)
writev(r0, &(0x7f0000000200)=[{0x0}], 0x1)
recvfrom$inet(r0, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0)
fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
fchown(r3, r9, 0x0)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=<r11=>0x0)
timer_settime(r11, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
7.514743611s ago: executing program 3 (id=1807):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$UHID_INPUT(r3, &(0x7f0000000340)={0x8, {"b84617598106c006d22208add9ad2164a5ebda4cb20522e607bdabb4cbb3dd4ecc1b8cc9c377183c2c9f1bf654a61c6e99fe2e6a0843fc58bf1b822a0cadebff16e34fb7d246ff7914f29dff86895e28721559b3d7d034fb5e0ed19580f87c4e0dbb9687b1851bf30b14134c2d4138a07aa83f24542d12b82865efd1144279ef42dfae4900ea41b17f0ad841631ef752c4674935dbc25e7728779187ca11f01f06ea481d2fc3169f1e89d6f9c1fff6f556a80d579c1d26008f94b3cc9d774a66791be6fa4941a9a1d0b005c263ac2b92a36b59240c0a6aca4f5b347ab5d1cf6fd4189953fc426d1368449622e6c770039ce69940173ff11fb6255c00aac854dcded9bb1ab42d788fb4ecf50e316ce4507e27e89b761ccfa694c3e835d5db0e2efb189a2810507d22ed056abcee6a1fb0820214b38c88922ff60db888b167d1cb9862f0e75f08a86debe33061d23c6c33a7a1d52743e69e76c4373a8a11bcca806303f82b3f8dcf5f563dd1c2e9f34084d875bffc79c40d948dcb8695ba2da859bec82fadb7c02265bf27a7784c3f9f4ef20dd1f52d68023fd1f0ed0c377380a77b8ed849ad5489c865516bdd8e6eeede51bca330d3dc55e9aba25c5b59ce5b38cdfe58364da1a8e26a5d08ee0ce222aec9de74b5eda55256c983289471a222481a6d5411a727c4185e47f52e9a24021b91f1f762567f5f87a335b0b0d07b18a8086fa926400879ca32b61bec703eb2609b6033d744e45578bffea31ccd737bafa38a9ae4851283edc965464e8664738496bad699001696d947a480c8aa577f74c2db399f270c5ac3ff84f6cd1611809fef7dad2801ec4e0d857ff6c2ad06602579bffb562e03ec7098cde4143833216f6b3e50aa316273d71d02f29d75c6410da0653e837391013a34a8c1da3cd69c4157ed3337f1b319e1814251b326383fb53241c5a43b2ce216326eef7396959bf2bdd541af19e14fe7d637e6ecd60abdfc99e74354b5efd061fdbfef8a9c926fd6e00c23ac64605ad1475a2e1c3086d1658e782875a02e57d160a2c58cb269f5e6af64a32fd4069fec90efcfbf3f8a440906d90f27256d1f7d117a2e72afc7716f5015c645446608085fe682b864baa42b7b815b7c19ed862528c4c006c9f9061e1bfdafa6efefdcd349fedffc2055d4479d300dd2dc6d2afe1dddc7678f1a5a1c5b5c1b51df192c11e85c84a1966aed5e79aa986155797c03f97b8e272e9156df4d615a7272feaa81348103baef46611c88066761fbae8561dc87bee0089576c30fb518cb0b06c1f747ed3172420da234a348d49240992104c4b1a324ef926be7570769098adaa3a64e6cf800306115fff6b501813de940a625a8f9d0df178f957159e4bc19c3845d2d8454a9b744eb2d9e0fbada6d86c61af8efd27b5ccfd4c4735f6d56dda26e28c24eaffc003311717588ad50835dce053dfbcd5d2e2d6995c5a909e3037b56ca206ed587410bff3f6da84c14e7ed49736668d48e9a86696d0aef3748226b4350a9515832a9eb41208b6f0f56ceb3083a1a3e2c792022716539949264523bf5ce33ce8d97e3a8c2638b04825b5958e45fc70448f4df48ca89bfac82dc46aaf13b019d985c9ba941fa6ae745e084f6eb74e67ad0891e62cbf7d65f9f67779188cc065c506837870a399f495440d866cac07b3eba4783c2ac92b25170d57f8ea7a684bb73502b50b8e5a6525e980d764b3c743281313452d1813d466032e4b1c05da818456f96212430fbb0dc584e1afdb806ee5e90805486431ad147ab8e8668475c4aa3f9b39c8506053804a883c0b9a097b1c246929b26ce46b738c731d345a53c24e8a468eb29037d09febfd2d4dd54890ff8721ab0e1e04c9154b07441be90cd958505146cebf7e53364d8777a3da4f26edd0b9b9ed2f1842e9fe35d6d9f982aeafe6b04652b783e48bbb7d272b9074862403d5f54171379524ac6c16261434549bcacaf8374460b1a299ccaccd01affc1a36155a1c85cf7198e35cf61c93472c676f0dff2aa6828e4327bd4a290a5aacdc3df8292a36596ba9a33590477b21d00df51b27121253d4ab3c54ffb91a12212e3a2e2822f054701c4d196b7f87fbe77ec7177956f5987a4a75be169129ce566f84e040de534e5147be85e0f1145a53860a19e22882a8bef648845af8a2df9006f938b1f84dd0e6f428e832666070d90b2f3a7a89b1c83473875b072796a4d36f4c7bbf8819b5c61c6178356310ad8deb8b0b705de80f0066bc2363b5bb680a010e2d5e9305f575389427be5a3fff3a26bdd3eac0f4779327e23402c72dd94f8482c996efaf121482cbf33283dd9751eea82495f9485bbc56631b30ad5c7ac1ad8563319f17e3643624b080d1d7a6b58f34d4d97c253cc06705de8d79ce4729e4097135057e4fcba4985b7ca70c4733865a68845f62f691915f38c3d633eb766f4be997cfae0d2bf27f9704137933eba6e7f4c247d99ed8de149c8812bdefa8e010bd4438d46b9270c1fed693619f935ce30d60e47847d3a54534e28d08d83607fe4644bb43a7bfcc5e417ec550fe86d509ae343052b306c074f05ce63da3a8ec1e645782ad963e37a1c2670d0218293a58be8e0287c4b38b91532800f38f8376f39043e49f85238b1f9489e82b8002399c47f5bf036975cfb0c0234863ab1b5e8fe79647b56feb1f9b0f685d1af017c9cb017c37178fb2008fe93107cc7e96d9104322b3fe0171075db73729ba25d3220ecc31f11d6b29b1bd9c645b210e849638fec1f8847826ceacdca8870c6cf700a45fc3fc9962cb7711bf771d1b827b475c4fba0586f81b4e0d756ed81a9887313a4410ec305fbfb5cf1c6415b3654e21bc321148174b37cc2b1aa92b59da5707ee0fe7eabb52beba3e0c17e0fe0e6bc1551c37a74dd3e176dad58c5dbee8d62b131558570f1852fc114e0a88d7821cc0f331d13494d2cf53d9d06fe4d21522700397cb4d2b17d0a3f5c86390db6877be2aa98cd140d91c621182543c6b47059d80e5b8c68d5e8b7c0f7a9d3cb7bb86fb624e40339fea5daeb7f33693c93ca63a890a61581fe9e3727a92370f01fe5f64357a8995ecdd9c2388b55c51b55a5a21d480a10ab2fe682d2ab16ce281c436d14f5d6f37e68293cde96bf6945a5b25427a13cfc670279018f2af93d6504bf179ca4b3f730eadf5877a544344b46d61136be248f261334e8e694e22bb52dc460ca46bd328df9485e4764ffe3bbc68f482f685be4674d7b23d9ab894676273ce50891315662a76f74705bab314382184c639e96b9a9def6540bfaebbb04925482214bae4f6642b1ac283255173bcc32904b5b579aad36da0e3e051f32dd48af5333d47c0afb8cd98a292dc6bc5206ec56acb8b9e0519147e51a6f41f6d04a15f03e3c5910c7e4d1ad9bd7e3ffe2b4e8080a9a68ea2e696bad29f14d964476228b4aee09d0eee4e219544e1af39173b38a812c37d116aa0693d76a0c65fd138c15db21865309fe67987c1a4a9886293fdc329351c62916c42549e1cb45a3f65b9b52a106b75266b473b186b0cbec67815bc7b46724702c0be8570ab5c0fb34b4671669e9636f3d24a9c359067ece1260e44d8d65ce093f9563380daab1f3a410f2d71b88e42be9b966f1a333fa0d4598462a05d1faed8f5fe19068cc7de96a378e115e3fee282b92d62b61e76c658d06672662597255613e0d9eef73b04e90ae4d546d6fd80f60b29dc0e898d4d082b82e34315227bf26777c6aeaacd59d39c302a76f332dbd8fa9b59372351ce45eadc62293c2ca014d1393c17c8071770381f73c28adb2375b5ea94a30ef9bb8969e22c4c6a3dc826cef2275db8728a919ef95351af94cdea77127acfcaed3196e6d642436aeef28f1b6278f26ed16143e99f60117978ac4cff0afa47c4a07d96e5a042bf9b687b6f19edb1dd5f6a1ead15dc5b3704dc6f24aee4373adcfd015a1d6d2b02079959356c0f655da282e9a118074d92381e437337b73faf776ef57a6f837941317f0e6a5ea4990ebe098ffcd5c34eaddfd02e5cce8d687d49d17c4c07c6d4d35ee65025d13796a0e8d9d9a29eed0aee495e66c9ebf85729dd32e77ddd9deb6af51d7268b848b48492f0efc0c68c1c06587b5cf2f9be8d8161cef58b68626a03d29dd0bb4e4b5af7f2e3aaf38e0ce12d1e3280cb3f93cc51793bc3ea994cd5394c25be812699cae6962cce367ead1f641d09e685bf618503b97da2e95709b4eeefa4bdd268d8b97edf37f1d2f5eaba17d4776d3fa9f52ff7325cfcbfc47a3916901c6f32f7c19a0f2138f7efbfaa4f235c9a46c990af22937c888159e5cdef2eb416370f8ddc6ad8012cde4a1b7b1f437748394fbee3c11a073af57daedb3082aeaabfafc59c555c53c1ae5b3414bd89bca6a569a189ccf41b6ccff802824e852026d2ef0b440e13c95994c782892d636995ea22607d7d3718c5cb0fa0d3c5e13b39f250102f8921c4fc7d287d0b0f93e937dc0e0f1752f7b433d54945392c6916075452f112c51a49305598f449885df2c52089d8b0f1797eb94c7b5a007316b43398a4bc0982c39c8e14cecf7e83ac26dd1bb9baf2a85463e324f9c961e03496890c5e0d86103fc113514f297180b811bb8db86dc20fecd0ad7ddcaf5813f634748c3e68d61ce7fe59cd34cf384cb3e1c392152d8c74a908dcb251c1ebe6b96114c105bbb80cdb15f72a2043391f8eb37200be2208ac35c532c3b5206dbe8a2269d754a237e63ffb687eef0d1eecba0b4ae7aebacfd429fcc168840b76d448e23815bf5763571c6e2a19e5c46dc943618f4b71d3428eeb10dab3b234ad8b350cc2cb4621d5cb1fb9f276d316fe75fe0f8ebd2a175fcef090ba76dcbbe65c4112e7a22ab2a82601013420ab1c83e70c39345412e059800eebc57c6d6fd91cd74452eaf1c16f61ea43586bdb5864eecc751afd74ad03235ff673fbf25caad978c99945c4027f773b5553a3fb75d56848bff37c060c8b0771fec69eb9b193856355e266cbf3c8ca02d07b910bd990752238b54fbbd235378613b2346671947188e9a044b8bef8730ac5c713310ee15ff3b3579a706740cbb658c8e0812a0827ff3371547986db877b6db715b9afda7593019f997149c22f288cf818335946258cd66a8def7054def552e4b1282e4aaa30e328f1a66e89f6d3a4ef73ffa3b38c8d69a89ed95e3e2a8007ef14cf3d53e1028d36127a39f2efd24abf7025be578124a8bf3e72b66cac22c23f15aaf1696008f7b85153a48f9c317dc13c333d5b1907231c136f66fe7d5968709d0ee68d4c866d2e754b6f4ea67aa01e681cbf1e5629f6677b1d942634f85c63ac78fd6c4ec2b095a754eb55672b7f2aacf934a24e7e4004566d18c1a540b2546f92f339e18828767c4f8cf53238cc1cf6fb0c4ca73955c159fbc554f8d4043880f3d505309856055a0fab574ce6fdfab0dc92ef15e68ccfa597f687809cd9aa080a02bab039bab129b23b86c85818db83c511b3d0aa078dde025756aa1d724a2cd77ba60a1740687fbb7be4fdd7d21546830414f40b45a43ebd6e6b551ccacf1fc738c3424fff6a56b0e1fa63efc2dba4353cebee136c549ab4a22022eb4ab99e8d34ab018c7f806de9429a86a8f42ac31121d5b252310d77a8b6fb9c0a6b87b70090f6ae8a967e8de6a1f5d98e241c32c1bc71c249493874a7113a5e507d26e17f1b351c65a8a381927d6316c5a2c340586f49bd51ba52b069fd0166686fafd5b98d1bbe87a2a42736c6a8d081163ec1cf6c001135db03683db", 0x1000}}, 0x1006)
write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xed}}, 0x50)
write$FUSE_DIRENT(r3, &(0x7f0000000000)={0x30, 0x0, 0x0, [{0x1, 0xb19, 0x5, 0xfff, '$*}&+'}]}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1)
7.413473539s ago: executing program 1 (id=1808):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r3, 0x1ad72f7)
ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000400)={[{0x8001, 0x8000, 0xd2, 0xfe, 0x7, 0x4, 0xe6, 0x8, 0x61, 0x4, 0x20, 0xf8, 0x2}, {0xc9, 0x81, 0x9, 0x3, 0x80, 0x8, 0x7f, 0x5b, 0xf, 0x2, 0x2, 0x3, 0x3}, {0x3, 0x3, 0x3, 0x3, 0x5, 0x7, 0x2, 0x6, 0xfa, 0x2d, 0x65, 0x6, 0x3}], 0x3})
accept4$netrom(r3, 0x0, 0x0, 0x80000)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r8 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r7)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r8})
keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x40c}}, 0x0)
6.912328423s ago: executing program 3 (id=1809):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"})
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r5, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB="0400", @ANYRES32=0x0, @ANYBLOB="742ddf075e61e9ac53f311b6bdcdb62641edc5512813474e1d6cc03d51b6f516ed8e4ec0ad35a2fdb90107e16abc427d2ddcd05eede6fbfa"], 0x24}}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x20004000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r9, 0x800c5012, &(0x7f00000000c0))
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9})
ioctl$TCFLSH(r1, 0x540b, 0x2)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="001075c007116d74bd748a493d19c83b7c7a0d7515a2b73bb798948cc1359abc1efb40a31d6edbda681f5a6a8c205fc47465122c3cbe80192a6e5a6e6c2f8ad0d19b999122a68bd7ed6c89ebc758e12bdb977595fd0efe1460850d0555f156dcf56bea4139bc969d7028f9533a3d9b6a42a45e5d7cf299c597fc4b560bc87e6a5af5"], &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="400d7200000051f5865972aa795009f49a90940c3f87af821715d2306584b3917613ebc57f0438125e6d52e8adc61e046d995b7434497be6f3996c3f"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}})
6.099736824s ago: executing program 1 (id=1810):
syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0xf00)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000050000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000007a81000000000000000000000000000000018663cc80ec790def00a7e6fc8ffed388256859b7ad7a8840e12d3930b98af90a0dcc16d61cfe4c3ef57334349876d2edd640d0a80800000000000000bb92dba3eb6e4188f18ab752bb516ed0a9578713b40a85ca0c38b9e47cd5240000c8d66c4531a6bab0f9f6ed7e7a6f5b9a26d60c000000007ff9"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000001c0)={"136cc15696e124839098d3affe61f71b3f86b463dd96bfb0a2bb25a15ca2", 0x0, 0x1, 0x401, 0x6, 0x7, 0x42, 0x7, 0x7, [0x86, 0x2, 0x80000000, 0x2, 0x1000, 0x3, 0x4, 0x1, 0xb, 0x2f9a, 0x7, 0xffffffcc, 0x200, 0xf7fffffa, 0x0, 0x80, 0x20000001, 0x3, 0x7]})
5.886118845s ago: executing program 1 (id=1811):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00')
readv(r0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8932, &(0x7f0000000900)={'wlan1\x00', @local})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000100), 0x6)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00', 0x1, r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f00000002c0)={&(0x7f0000000240)=[{0xfffc, 0x11, 0x0, 0x0}, {0x8, 0x2000, 0x0, 0x0}], 0x2})
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
5.310644495s ago: executing program 3 (id=1812):
syz_emit_ethernet(0x46, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x156eccba77a09d1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)
4.892316031s ago: executing program 4 (id=1813):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x514)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004804}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x40408d4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3)
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
r7 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
4.276561955s ago: executing program 1 (id=1814):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
4.266321527s ago: executing program 3 (id=1815):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x40384708, 0x5)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=<r1=>0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x7f67, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @timestamp, @mss, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r6, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14)
dup(r5)
3.346239011s ago: executing program 1 (id=1816):
add_key$keyring(0x0, &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc4b80, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x924, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x8f8, 0x2, [@TCA_FW_ACT={0x27c, 0x4, [@m_mirred={0x70, 0x1b, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x2, 0x9, 0x5}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x101, 0x3, 0x7ff, 0x8000}, 0x4, r6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x6c, 0x13, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x6, 0x8, 0x0, 0x4}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x10, 0x7, 0x6, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x30, 0x1b, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x8c, 0x10, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x10, 0x3, 0x7, 0x7}}]}, {0x47, 0x6, "5073e69db3ae80445436f5faf68ecbde1e6998bf47bad0096bfda48887847e298b7dc638315006f0b3669127aa28a7d42f517e1f07fbcccae66224ba5517f65a52bfa2"}, {0xc}, {0xc, 0x8, {0x2, 0x6}}}}, @m_tunnel_key={0xe0, 0x15, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x9f, 0x6, "0192b433892f94f79291faf914c42c1c121901cab2cbf070af6d4afc6bfb5f50e0ebc4266ca78a93555d37a3b9139a2b3506f65729b8d01ef318ae3e4db6733be5e9f028878d29a7f1c61e9639217787ac9612f418a3bae88233667ed5aee1b10aa94930057b9f562f0e02efdb423eb52a7bf47ec23b158f51b73edb342e05ad4c89a66fe7ab546bc00f8560bbf162cbad8c4444c644fc9c49fbc4"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}]}, @TCA_FW_ACT={0x5b0, 0x4, [@m_police={0xdc, 0x9, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xbc33}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf1c}]]}, {0x9d, 0x6, "f0ccbbb5f5a48008e1e8e928eb7018574437bdf7d4b85dd2c988c3adf8b8af18c85b38298b1793e0986b9c1764058c266a428bd073200621a5707fa87e930efc0296766e706b0ece634d787026355c9d1a1cb63c7f99c984dc057d7fbcf55bb0c2ffe2d7ade25d9ddb4ff3f95e6ca36f2c0ce506139fc665769e491506b4554d0e090c91ab95548a0ec936233d9a45c830cc87389e08b5bb04"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x64, 0x8, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_LABELS={0x14, 0x7, "398f009e28401ba6b09b8582f857cf6c"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x124, 0xc, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'nat\x00', 0x9, 0x800}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0xff}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0xc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xa6, 0x6, "786a8576ae0ed6de4d3b2c0632a5064388451cbcfb6c890dcfdb4f9ae9a86ecd9dd9c9786453d6ece4d192d2ff8d68491a6539fb63e3d49312380d8370b1eedcc0676c522d7d867c29f24124a797a75f8bdfbbcb9292a909a89d8de7522ae0d09e99208b3973834d8b654fc71bb4e3bea32dc26ca48161310b7d93ae84a24a30d9007a950c6d3f53fd6014ce85fdddace10c5a4e0de953b53ec2037af624c36ec165"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x150, 0x6, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_TTL={0x5, 0x7, 0xf7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x101, 0x3ff, 0x2, 0x3, 0xffffff7f}, 0x1}}]}, {0xf7, 0x6, "043d98628af876dd7f4de5dfe95ef014c9c10f292653007bd77cf94796087cb12c279aa0e9ed44b01fabf9bdca845dd15166f66bc02dbe5eef14849c70316c86fbc4693c0248a818d57f35c78bea8be49fa5ea188008b45e794e754179feee7d01e6cda049a95a79beff50e49343d7cf944b96d0afc410f020b911a0be08e0270d169d1016d1c24fd68aa39918b60a605ee86b2f5f9d3fa6d145ee8d59f760728d4b07bb0cf22b4828162720aa90cf03d8ad39da325c06d71e671f1780fb000164a0798ad01a005647f406248999f9dc24491b3fbe153544b4c122201a2a8b6236669acfb877d9a544c99dabe6cf7ec76738b8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x98, 0x9, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x40, 0x6, "0fc3ccb93dd8f54d572f6601d6f59613b73900c37f4e41f394faea413aca005e77e0779bac31f0ed92e5b9e800d493b33f0714e427d2062cd5d2c5fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x134, 0x16, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbb4, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa71, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3263, 0x10001, 0x20000000, 0xb, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xda, 0x3, 0x4, 0x7fff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8, 0x5, 0x3000000, 0x81}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x11ea, 0x3}}]}, {0x9a, 0x6, "2e389f7160fa38f4a76f18d44856ef7d5a2f3868e6650087165cd3e6586dacf256d3d3cd14fbda243dc7ee544b093142708c2f60873396576e82f7c8332270a5f1245872779bebb822107781a73aaeb6d6d6a957a95d5b2927f121e70e28faa6cb055b96e5432f04d4073ae7bbc9c1b018b9d0194bdaa2ef12b5bcf94c0ab6d5b3c33cd5a1011356bbcef38c936a67ebf8c490f59988"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1bfedbebc05452c8, 0x1}}}}, @m_ct={0x2c, 0x18, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_POLICE={0x54, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x0, 0x1, 0x401, 0x2, {0x3, 0x1, 0x8001, 0x74, 0xf2a, 0x3}, {0x37, 0x1, 0x2, 0x6, 0x8000, 0xd9}, 0x10000, 0x1578, 0x10}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x7}}, @TCA_FW_POLICE={0x64, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x4, 0x1ff, 0x6, {0x3, 0x0, 0x8001, 0xde5a, 0x4, 0x8001}, {0x4, 0x2, 0x0, 0x2a8, 0x1, 0x10001}, 0x1ff, 0x5, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x924}, 0x1, 0x0, 0x0, 0x80}, 0x800)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
2.913290243s ago: executing program 3 (id=1817):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
io_uring_setup(0x441, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0xb6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
2.792363s ago: executing program 4 (id=1818):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r3, 0x1ad72f7)
ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000400)={[{0x8001, 0x8000, 0xd2, 0xfe, 0x7, 0x4, 0xe6, 0x8, 0x61, 0x4, 0x20, 0xf8, 0x2}, {0xc9, 0x81, 0x9, 0x3, 0x80, 0x8, 0x7f, 0x5b, 0xf, 0x2, 0x2, 0x3, 0x3}, {0x3, 0x3, 0x3, 0x3, 0x5, 0x7, 0x2, 0x6, 0xfa, 0x2d, 0x65, 0x6, 0x3}], 0x3})
accept4$netrom(r3, 0x0, 0x0, 0x80000)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r8 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r7)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r8})
keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x40c}}, 0x0)
1.671864339s ago: executing program 4 (id=1819):
syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0xf00)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000050000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000007a81000000000000000000000000000000018663cc80ec790def00a7e6fc8ffed388256859b7ad7a8840e12d3930b98af90a0dcc16d61cfe4c3ef57334349876d2edd640d0a80800000000000000bb92dba3eb6e4188f18ab752bb516ed0a9578713b40a85ca0c38b9e47cd5240000c8d66c4531a6bab0f9f6ed7e7a6f5b9a26d60c000000007ff9"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000001c0)={"136cc15696e124839098d3affe61f71b3f86b463dd96bfb0a2bb25a15ca2", 0x0, 0x1, 0x401, 0x6, 0x7, 0x42, 0x7, 0x7, [0x86, 0x2, 0x80000000, 0x2, 0x1000, 0x3, 0x4, 0x1, 0xb, 0x2f9a, 0x7, 0xffffffcc, 0x200, 0xf7fffffa, 0x0, 0x80, 0x20000001, 0x3, 0x7]})
1.523977162s ago: executing program 4 (id=1820):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000002480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ed00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xc0}, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000280)='wg2\x00')
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)
1.112195255s ago: executing program 3 (id=1821):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x65)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000340)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r4, 0xfbfbfbfb})
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x20000000008)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESTART(r6, 0x1274, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7801, 0x0, 0x1}})
819.215361ms ago: executing program 4 (id=1822):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
lstat(0x0, 0x0)
0s ago: executing program 1 (id=1823):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4091, &(0x7f0000001040)=0xffb)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000800))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x34, 0xb, 0x73, 0x7, 0x4, 0xf9, 0x2, 0x6f, 0x8, 0x7, 0xa, 0x3, 0x6, 0x3}, 0xe)
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10)
r3 = socket$inet6(0xa, 0x80001, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="31830000000000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0xffffff21}, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r4 = socket(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000001140))
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x1844, 0x8753, 0x62, &(0x7f0000001000)={[0x4]}, 0x8)
kernel console output (not intermixed with test programs):
g 0 descriptor??
[ 328.529275][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 328.552042][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 328.567870][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 328.711500][ T11] veth1_macvtap: left promiscuous mode
[ 328.739838][ T11] veth0_macvtap: left promiscuous mode
[ 328.999841][ T11] veth1_vlan: left promiscuous mode
[ 329.016620][ T11] veth0_vlan: left promiscuous mode
[ 329.202756][ T1206] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[ 329.292482][ T1206] usb 2-1: USB disconnect, device number 8
[ 329.689963][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 329.861868][ T5888] usb 5-1: Using ep0 maxpacket: 16
[ 329.871390][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 329.904013][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 329.915067][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 329.939092][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 329.948881][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 329.979305][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 329.988376][ T5888] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 330.038572][ T5888] usb 5-1: Manufacturer: syz
[ 330.053071][ T5888] usb 5-1: config 0 descriptor??
[ 330.358861][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 330.434284][ T5888] rc_core: IR keymap rc-hauppauge not found
[ 330.441323][ T5888] Registered IR keymap rc-empty
[ 330.456339][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.467786][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 330.499341][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.544056][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 330.593920][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25
[ 330.671613][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.705250][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.749221][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.783816][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.809232][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.859355][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.881261][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.909231][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.936043][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 330.972316][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 331.022444][ T5888] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 331.031788][ T5888] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 331.081312][ T5888] usb 5-1: USB disconnect, device number 4
[ 333.510786][ T7957] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 333.801868][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 333.867518][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 333.882643][ T7805] bridge_slave_0: entered allmulticast mode
[ 333.929933][ T7805] bridge_slave_0: entered promiscuous mode
[ 333.956341][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 333.988619][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 334.289297][ T7805] bridge_slave_1: entered allmulticast mode
[ 334.579104][ T7805] bridge_slave_1: entered promiscuous mode
[ 335.410032][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 335.474891][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 336.420852][ T8014] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 337.146396][ T7805] team0: Port device team_slave_0 added
[ 337.651283][ T7805] team0: Port device team_slave_1 added
[ 337.935372][ T8032] siw: device registration error -23
[ 338.816490][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 338.839416][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 339.149578][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 339.344285][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 339.380090][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 339.463089][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 340.188644][ T7805] hsr_slave_0: entered promiscuous mode
[ 340.256493][ T7805] hsr_slave_1: entered promiscuous mode
[ 340.263796][ T7805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 340.273141][ T7805] Cannot create hsr debugfs directory
[ 341.041227][ T8069] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 342.561931][ T8088] siw: device registration error -23
[ 345.700690][ T8119] syz1: rxe_newlink: already configured on ipvlan0
[ 346.813164][ T7805] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 347.036038][ T7805] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 347.185701][ T7805] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 347.258467][ T7805] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 347.299071][ T1206] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 347.474063][ T1206] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 347.500385][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 347.536519][ T1206] usb 3-1: config 0 descriptor??
[ 347.585587][ T5879] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 347.850040][ T5879] usb 5-1: Using ep0 maxpacket: 8
[ 347.906494][ T5879] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 347.917712][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 347.932812][ T5879] usb 5-1: Product: syz
[ 347.952158][ T5879] usb 5-1: Manufacturer: syz
[ 347.967185][ T5879] usb 5-1: SerialNumber: syz
[ 347.996630][ T1206] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[ 347.997755][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0
[ 348.025036][ T5879] usb 5-1: config 0 descriptor??
[ 348.087946][ T5879] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 348.121043][ T7805] 8021q: adding VLAN 0 to HW filter on device team0
[ 348.174957][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state
[ 348.182243][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 348.223167][ T5883] usb 3-1: USB disconnect, device number 8
[ 348.304751][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state
[ 348.312084][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 349.899069][ T5879] gspca_sonixj: i2c_w8 err -71
[ 349.959296][ T5879] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[ 350.775618][ T5879] usb 5-1: USB disconnect, device number 5
[ 351.041128][ T8180] netlink: 'syz.2.528': attribute type 18 has an invalid length.
[ 351.117600][ T8180] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 351.126667][ T8180] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 351.135707][ T8180] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 351.144665][ T8180] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 351.355122][ T8181] netlink: 16366 bytes leftover after parsing attributes in process `syz.2.528'.
[ 351.366513][ T8180] netlink: 16366 bytes leftover after parsing attributes in process `syz.2.528'.
[ 351.699514][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 352.309991][ T5879] usb 2-1: Using ep0 maxpacket: 16
[ 352.359723][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 352.367340][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 352.390693][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 352.424507][ T5879] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00
[ 352.470051][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 352.501254][ T5879] usb 2-1: config 0 descriptor??
[ 352.757024][ T5879] usb 2-1: string descriptor 0 read error: -71
[ 352.817151][ T5879] usbhid 2-1:0.0: can't add hid device: -71
[ 352.836705][ T5879] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 352.933817][ T5879] usb 2-1: USB disconnect, device number 9
[ 355.083964][ T54] Bluetooth: hci1: unexpected event for opcode 0x14ac
[ 355.107975][ T7805] veth0_vlan: entered promiscuous mode
[ 355.162985][ T7805] veth1_vlan: entered promiscuous mode
[ 355.214216][ T7805] veth0_macvtap: entered promiscuous mode
[ 355.226275][ T7805] veth1_macvtap: entered promiscuous mode
[ 355.308140][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 355.367904][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 355.417459][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 355.429530][ T1206] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 356.104652][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 356.117666][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 356.128977][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 356.141335][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 356.322393][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 356.341183][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 356.539037][ T1206] usb 2-1: Using ep0 maxpacket: 8
[ 356.569821][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 356.599167][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 356.614413][ T1206] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 356.639165][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 356.647230][ T1206] usb 2-1: Product: syz
[ 356.656120][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 356.688989][ T1206] usb 2-1: Manufacturer: syz
[ 356.693649][ T1206] usb 2-1: SerialNumber: syz
[ 356.698980][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 356.709030][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 356.727753][ T1206] usb 2-1: config 0 descriptor??
[ 356.734491][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 356.749336][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 356.998702][ T1206] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 357.009491][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 357.021743][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 357.044671][ T7805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 357.787835][ T7805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 357.797047][ T7805] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 357.809586][ T7805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 358.342210][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 358.355076][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 358.566872][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 358.607507][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 358.839313][ T1206] gspca_sonixj: i2c_w8 err -71
[ 359.014552][ T1206] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[ 359.101862][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 359.108348][ T1206] usb 2-1: USB disconnect, device number 10
[ 359.111429][ T54] Bluetooth: hci1: Injecting HCI hardware error event
[ 359.125498][ T54] Bluetooth: hci1: unexpected event for opcode 0x143c
[ 359.138269][ T5836] Bluetooth: hci1: hardware error 0x00
[ 361.093801][ T8308] xt_hashlimit: max too large, truncated to 1048576
[ 361.329226][ T5836] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 364.149888][ T1206] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 364.658635][ T1206] usb 2-1: Using ep0 maxpacket: 8
[ 364.701686][ T1206] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 364.717896][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 364.733148][ T1206] usb 2-1: Product: syz
[ 364.863303][ T1206] usb 2-1: Manufacturer: syz
[ 364.868715][ T1206] usb 2-1: SerialNumber: syz
[ 364.885110][ T1206] usb 2-1: config 0 descriptor??
[ 364.899942][ T1206] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 365.690032][ T1206] gspca_sonixj: reg_w1 err -110
[ 365.694961][ T1206] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[ 366.934222][ T5879] usb 2-1: USB disconnect, device number 11
[ 367.050815][ T5836] Bluetooth: hci0: unexpected event for opcode 0x143c
[ 367.979193][ T8384] xt_hashlimit: max too large, truncated to 1048576
[ 371.219546][ T5888] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 371.429716][ T5881] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[ 371.446890][ T5888] usb 5-1: Using ep0 maxpacket: 8
[ 371.612800][ T5888] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 371.954280][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 372.078096][ T5888] usb 5-1: Product: syz
[ 372.091341][ T5888] usb 5-1: Manufacturer: syz
[ 372.096954][ T5888] usb 5-1: SerialNumber: syz
[ 372.101961][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 372.131235][ T5888] usb 5-1: config 0 descriptor??
[ 372.136406][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 372.157996][ T5881] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 372.170913][ T5888] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 372.296381][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 372.355581][ T5881] usb 4-1: config 0 descriptor??
[ 373.258184][ T5881] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.0008/input/input30
[ 373.425202][ T8455] xt_hashlimit: max too large, truncated to 1048576
[ 373.534701][ T5881] uclogic 0003:28BD:0909.0008: input,hidraw0: USB HID v0.07 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0
[ 373.601087][ T5881] usb 4-1: USB disconnect, device number 3
[ 374.519207][ T5888] gspca_sonixj: i2c_w8 err -71
[ 374.612482][ T5888] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[ 374.649967][ T5888] usb 5-1: USB disconnect, device number 6
[ 378.293976][ T8503] netlink: 'syz.2.610': attribute type 10 has an invalid length.
[ 378.337979][ T8503] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 378.379865][ T8503] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 378.982859][ T8503] syz.2.610 (8503) used greatest stack depth: 17776 bytes left
[ 379.682789][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 379.691734][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 382.091414][ T8526] xt_hashlimit: max too large, truncated to 1048576
[ 382.792288][ T8539] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 382.792288][ T8539] The task syz.1.622 (8539) triggered the difference, watch for misbehavior.
[ 383.189264][ T8543] netlink: 'syz.4.625': attribute type 10 has an invalid length.
[ 383.227187][ T8543] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 383.266059][ T8543] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 387.634747][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'.
[ 388.156332][ T8578] netlink: 'syz.3.637': attribute type 10 has an invalid length.
[ 388.197736][ T8578] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 388.233634][ T8578] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 390.660099][ T8597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.644'.
[ 392.870669][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'.
[ 394.072798][ T8627] dlm: no locking on control device
[ 399.784348][ T8652] netlink: 'syz.1.664': attribute type 18 has an invalid length.
[ 399.814767][ T8652] netlink: 16366 bytes leftover after parsing attributes in process `syz.1.664'.
[ 400.219982][ T8653] xt_hashlimit: max too large, truncated to 1048576
[ 400.818315][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'.
[ 402.075772][ T8666] netlink: 'syz.5.668': attribute type 10 has an invalid length.
[ 402.118816][ T8666] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 402.156143][ T8666] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 402.730457][ T8666] syz.5.668 (8666) used greatest stack depth: 17680 bytes left
[ 404.140387][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 404.345515][ T8] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 404.369126][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 404.430669][ T8] usb 2-1: config 0 descriptor??
[ 404.723131][ T8694] netlink: 'syz.4.676': attribute type 18 has an invalid length.
[ 404.758820][ T8694] netlink: 16366 bytes leftover after parsing attributes in process `syz.4.676'.
[ 405.387004][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.677'.
[ 405.587862][ T8] usbhid 2-1:0.0: can't add hid device: -71
[ 405.594314][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 405.644850][ T8] usb 2-1: USB disconnect, device number 12
[ 407.490331][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 407.658966][ T9] usb 2-1: Using ep0 maxpacket: 8
[ 407.678700][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 407.699123][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 408.127701][ T9] usb 2-1: Product: syz
[ 408.136515][ T9] usb 2-1: Manufacturer: syz
[ 408.141980][ T9] usb 2-1: SerialNumber: syz
[ 408.178302][ T9] usb 2-1: config 0 descriptor??
[ 408.214567][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 409.823230][ T9] gspca_sonixj: reg_r err -32
[ 409.829142][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -32
[ 410.025031][ T8736] netlink: 165 bytes leftover after parsing attributes in process `syz.5.688'.
[ 410.896847][ T9] usb 2-1: USB disconnect, device number 13
[ 411.409939][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.690'.
[ 413.879072][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 414.149515][ T46] usb 4-1: Using ep0 maxpacket: 16
[ 414.265674][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 414.464052][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 414.532091][ T46] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 414.549554][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 414.658346][ T8777] netlink: 165 bytes leftover after parsing attributes in process `syz.2.700'.
[ 414.896476][ T46] usb 4-1: config 0 descriptor??
[ 414.957532][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.702'.
[ 415.544517][ T46] hid-multitouch 0003:1FD2:6007.0009: item fetching failed at offset 3/5
[ 415.574382][ T46] hid-multitouch 0003:1FD2:6007.0009: probe with driver hid-multitouch failed with error -22
[ 415.754415][ T46] usb 4-1: USB disconnect, device number 4
[ 416.479363][ T46] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[ 417.664022][ T46] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[ 418.136884][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 418.153992][ T46] usb 3-1: Product: syz
[ 418.169054][ T46] usb 3-1: Manufacturer: syz
[ 418.176753][ T46] usb 3-1: SerialNumber: syz
[ 418.213052][ T46] usb 3-1: config 0 descriptor??
[ 418.261361][ T46] usb 3-1: selecting invalid altsetting 1
[ 418.284455][ T46] technisat-usb2: could not set alternate setting to 0
[ 418.426939][ T46] technisat-usb2: firmware version: 0.0
[ 419.400440][ T46] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[ 419.425618][ T8814] netlink: 72 bytes leftover after parsing attributes in process `syz.4.714'.
[ 420.520285][ T46] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 420.606876][ T46] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[ 420.711870][ T46] usb 3-1: USB disconnect, device number 9
[ 420.786699][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'.
[ 420.989063][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 421.010194][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'.
[ 421.180684][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 421.209044][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 421.243169][ T9] usb 4-1: config 0 descriptor??
[ 421.902112][ T9] usbhid 4-1:0.0: can't add hid device: -71
[ 422.659848][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 422.679197][ T9] usb 4-1: USB disconnect, device number 5
[ 423.168281][ T8852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.727'.
[ 423.189810][ T8852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.727'.
[ 424.012910][ T8854] xt_policy: output policy not valid in PREROUTING and INPUT
[ 425.581994][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'.
[ 427.699729][ T1206] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 428.251700][ T1206] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 428.282975][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 428.341626][ T1206] usb 2-1: config 0 descriptor??
[ 428.768219][ T1206] kaweth 2-1:0.0: Firmware present in device.
[ 428.959408][ T1206] kaweth 2-1:0.0: Statistics collection: 0
[ 428.992005][ T1206] kaweth 2-1:0.0: Multicast filter limit: 0
[ 429.019006][ T1206] kaweth 2-1:0.0: MTU: 0
[ 429.023309][ T1206] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00
[ 429.169975][ T1206] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[ 429.210814][ T1206] usb 2-1: USB disconnect, device number 14
[ 432.119765][ T1206] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 432.141158][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.744'.
[ 432.291663][ T1206] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 432.304686][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 432.333680][ T1206] usb 5-1: config 0 descriptor??
[ 432.821060][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.748'.
[ 432.953619][ T1206] usbhid 5-1:0.0: can't add hid device: -71
[ 432.985273][ T1206] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 433.074857][ T1206] usb 5-1: USB disconnect, device number 7
[ 433.308260][ T8927] block nbd1: shutting down sockets
[ 433.909110][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 434.888391][ T1206] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 434.908958][ T8] usb 2-1: Using ep0 maxpacket: 8
[ 435.036158][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 435.071348][ T1206] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 435.130711][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 435.159058][ T1206] usb 4-1: config 0 has no interfaces?
[ 435.164601][ T1206] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 435.174924][ T8] usb 2-1: Product: syz
[ 435.184668][ T8] usb 2-1: Manufacturer: syz
[ 435.214396][ T8] usb 2-1: SerialNumber: syz
[ 435.224601][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 435.246248][ T8] usb 2-1: config 0 descriptor??
[ 435.264744][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 435.272179][ T1206] usb 4-1: config 0 descriptor??
[ 435.622909][ T9] usb 4-1: USB disconnect, device number 6
[ 435.671484][ T8] gspca_sonixj: reg_r err -32
[ 435.696307][ T8] sonixj 2-1:0.0: probe with driver sonixj failed with error -32
[ 437.189642][ T46] usb 2-1: USB disconnect, device number 15
[ 437.589570][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 438.137182][ T9] usb 4-1: Using ep0 maxpacket: 16
[ 438.162057][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 438.185854][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 438.237272][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 438.299318][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 438.349025][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 438.389896][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 438.420469][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 438.429772][ T9] usb 4-1: Manufacturer: syz
[ 439.174335][ T9] usb 4-1: config 0 descriptor??
[ 440.079608][ T9] rc_core: IR keymap rc-hauppauge not found
[ 440.085589][ T9] Registered IR keymap rc-empty
[ 440.108487][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 440.149285][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 440.947094][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 440.965521][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31
[ 441.000602][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 441.069492][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 441.097761][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 441.108603][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 441.137064][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 441.389104][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 441.568973][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 441.724633][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 441.779202][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 441.959033][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 442.029388][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 442.050372][ T5888] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 442.077852][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 442.122934][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 442.158008][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 442.229131][ T5888] usb 2-1: Using ep0 maxpacket: 8
[ 442.238978][ T9] usb 4-1: USB disconnect, device number 7
[ 442.254502][ T5888] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 442.308617][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 442.464905][ T5888] usb 2-1: Product: syz
[ 442.470113][ T5888] usb 2-1: Manufacturer: syz
[ 442.474739][ T5888] usb 2-1: SerialNumber: syz
[ 442.503293][ T5888] usb 2-1: config 0 descriptor??
[ 443.202098][ T54] Bluetooth: hci5: command 0x0406 tx timeout
[ 443.304674][ T5888] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 443.578518][ T5888] gspca_sonixj: reg_r err -32
[ 443.588215][ T5888] sonixj 2-1:0.0: probe with driver sonixj failed with error -32
[ 444.489407][ T9029] netlink: 56 bytes leftover after parsing attributes in process `syz.4.782'.
[ 445.020189][ T5888] usb 2-1: USB disconnect, device number 16
[ 445.699117][ T5883] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 446.245755][ T5883] usb 4-1: Using ep0 maxpacket: 16
[ 446.743698][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 446.776650][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 446.800470][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 446.829079][ T5883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 446.868932][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 446.905567][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 446.924862][ T5883] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 446.938753][ T5883] usb 4-1: Manufacturer: syz
[ 446.949822][ T5883] usb 4-1: config 0 descriptor??
[ 447.880115][ T5883] rc_core: IR keymap rc-hauppauge not found
[ 448.679186][ T5883] Registered IR keymap rc-empty
[ 448.689556][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 448.709149][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 449.302333][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 449.547679][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32
[ 449.669358][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 449.709199][ T9068] netlink: 56 bytes leftover after parsing attributes in process `syz.3.793'.
[ 449.718688][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 449.759347][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 450.239730][ T9074] tmpfs: Bad value for 'mpol'
[ 450.957535][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 451.009041][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 451.178095][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 451.219112][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 451.311928][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 451.339128][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 452.331212][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 452.380947][ T5883] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 452.800480][ T5883] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 452.834534][ T5883] usb 4-1: USB disconnect, device number 8
[ 453.649087][ T5883] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 454.039323][ T5883] usb 4-1: Using ep0 maxpacket: 16
[ 454.045461][ T9099] 9pnet: Unknown protocol version 9p200
[ 454.066271][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 454.145127][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 454.156548][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 454.166912][ T5883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 454.179940][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 454.230804][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 454.264848][ T5883] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 454.305786][ T5883] usb 4-1: Manufacturer: syz
[ 454.347767][ T5883] usb 4-1: config 0 descriptor??
[ 454.669027][ T5883] rc_core: IR keymap rc-hauppauge not found
[ 454.686369][ T5883] Registered IR keymap rc-empty
[ 454.717777][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 454.769555][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 454.820770][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 454.875190][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33
[ 454.925411][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 454.970633][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 455.001339][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 455.039093][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 455.247498][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 455.290672][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 455.310621][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 455.336145][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 455.379022][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 455.435262][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 455.648731][ T5883] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 455.790699][ T5883] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 455.804515][ T5883] usb 4-1: USB disconnect, device number 9
[ 456.726054][ T9125] netlink: 56 bytes leftover after parsing attributes in process `syz.4.809'.
[ 457.009677][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 457.179380][ T8] usb 2-1: Using ep0 maxpacket: 8
[ 457.200030][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 457.210842][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 457.232179][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 457.247970][ T8] usb 2-1: config 1 has no interface number 1
[ 457.256945][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 457.281298][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 457.296471][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 457.305271][ T8] usb 2-1: Product: syz
[ 457.314946][ T8] usb 2-1: Manufacturer: syz
[ 457.320891][ T8] usb 2-1: SerialNumber: syz
[ 457.579813][ T8] usb 2-1: cannot find UAC_HEADER
[ 457.623714][ T8] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22
[ 457.655936][ T8] usb 2-1: USB disconnect, device number 17
[ 458.832719][ T8452] udevd[8452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 460.757687][ T9154] 9pnet: Unknown protocol version 9p200
[ 460.775380][ T9154] siw: device registration error -23
[ 462.284489][ T9164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.822'.
[ 462.380410][ T5883] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 462.439174][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 462.568997][ T5883] usb 5-1: Using ep0 maxpacket: 16
[ 462.595270][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 462.654217][ T8] usb 2-1: Using ep0 maxpacket: 32
[ 462.661276][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 462.679140][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 462.689784][ T5883] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 462.700405][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 462.714143][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 462.723072][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 462.733555][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 462.744216][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 462.758018][ T5883] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 462.767850][ T5883] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 462.779476][ T5883] usb 5-1: Manufacturer: syz
[ 462.786366][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 462.801010][ T5883] usb 5-1: config 0 descriptor??
[ 462.807283][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 462.816465][ T8] usb 2-1: Product: syz
[ 462.823952][ T8] usb 2-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏
[ 462.845320][ T8] usb 2-1: SerialNumber: syz
[ 463.450839][ T9175] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 464.711977][ T5883] rc_core: IR keymap rc-hauppauge not found
[ 464.737428][ T5883] Registered IR keymap rc-empty
[ 464.745573][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 464.769299][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 464.808044][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 464.848030][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34
[ 464.877363][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 464.911979][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 464.951890][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 464.992105][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 465.032459][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 465.107204][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'.
[ 465.116453][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'.
[ 465.244392][ T9185] xt_policy: output policy not valid in PREROUTING and INPUT
[ 465.448344][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 465.599703][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 465.633247][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 465.820570][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 465.921906][ T8] usb 2-1: 0:2 : does not exist
[ 465.939397][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 465.948992][ T8] usb 2-1: USB disconnect, device number 18
[ 465.966969][ T5883] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 465.979990][ T5883] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 466.146540][ T5883] usb 5-1: USB disconnect, device number 8
[ 466.928778][ T8421] udevd[8421]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 468.636953][ T9199] input: syz1 as /devices/virtual/input/input35
[ 469.689323][ T5888] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[ 470.891865][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 470.949038][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 470.994814][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 471.041059][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 471.208284][ T5888] usb 6-1: SerialNumber: syz
[ 471.509342][ T5888] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[ 471.525031][ T5888] usb-storage 6-1:1.0: USB Mass Storage device detected
[ 471.626421][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.837'.
[ 471.635472][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.837'.
[ 471.806500][ T9236] xt_policy: output policy not valid in PREROUTING and INPUT
[ 473.785120][ T5888] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 473.809842][ T5888] scsi host1: usb-storage 6-1:1.0
[ 474.343287][ T5888] usb 6-1: USB disconnect, device number 2
[ 476.311026][ T9272] netlink: 'syz.5.847': attribute type 18 has an invalid length.
[ 476.552786][ T9272] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 476.561961][ T9272] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 476.570929][ T9272] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 476.579875][ T9272] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 476.632119][ T9274] netlink: 16366 bytes leftover after parsing attributes in process `syz.5.847'.
[ 476.657010][ T9273] netlink: 16366 bytes leftover after parsing attributes in process `syz.5.847'.
[ 488.177640][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.877'.
[ 490.233130][ T54] Bluetooth: hci5: command 0x0406 tx timeout
[ 490.389031][ T1206] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[ 491.387939][ T1206] usb 2-1: not running at top speed; connect to a high speed hub
[ 491.397789][ T1206] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 491.428628][ T1206] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 491.447950][ T1206] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 491.474332][ T1206] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 491.494119][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 491.514742][ T1206] usb 2-1: Product: syz
[ 491.533003][ T1206] usb 2-1: Manufacturer: syz
[ 491.543127][ T1206] usb 2-1: SerialNumber: syz
[ 492.511707][ T1206] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[ 492.518582][ T1206] cdc_ncm 2-1:1.0: bind() failure
[ 492.531569][ T1206] usb 2-1: USB disconnect, device number 19
[ 502.334783][ T9495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.909'.
[ 502.444408][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 502.605604][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 502.618211][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 502.758998][ T46] usb 3-1: Using ep0 maxpacket: 32
[ 502.775055][ T46] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 502.787613][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.5.913'.
[ 502.796754][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 502.942087][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 502.953294][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 502.989482][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 503.001879][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 503.010217][ T46] usb 3-1: Product: syz
[ 503.014484][ T46] usb 3-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏
[ 503.118626][ T46] usb 3-1: SerialNumber: syz
[ 503.826519][ T46] usb 3-1: can't set config #1, error -71
[ 503.839579][ T46] usb 3-1: USB disconnect, device number 10
[ 506.709661][ T9523] sctp: [Deprecated]: syz.5.919 (pid 9523) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 506.709661][ T9523] Use struct sctp_sack_info instead
[ 516.853381][ T5835] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 517.339005][ T5836] Bluetooth: hci3: command 0x1003 tx timeout
[ 517.468463][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 517.847353][ T5835] usb 4-1: not running at top speed; connect to a high speed hub
[ 517.884279][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 517.936161][ T5835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 518.008056][ T5835] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 518.090967][ T5835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 518.117916][ T9605] Bluetooth: MGMT ver 1.23
[ 518.123489][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 518.280473][ T5835] usb 4-1: Product: syz
[ 518.285272][ T5835] usb 4-1: Manufacturer: syz
[ 518.398067][ T5835] usb 4-1: SerialNumber: syz
[ 518.775192][ T5835] usb 4-1: can't set config #1, error -71
[ 518.809003][ T5835] usb 4-1: USB disconnect, device number 10
[ 520.382562][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[ 520.388870][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 523.013164][ T1206] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[ 523.590859][ T1206] usb 3-1: not running at top speed; connect to a high speed hub
[ 523.823617][ T1206] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 523.859710][ T1206] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 523.879032][ T1206] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 524.060542][ T1206] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 524.079251][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 524.087340][ T1206] usb 3-1: Product: syz
[ 524.098895][ T1206] usb 3-1: Manufacturer: syz
[ 524.103556][ T1206] usb 3-1: SerialNumber: syz
[ 524.905394][ T1206] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 524.918936][ T1206] cdc_ncm 3-1:1.0: bind() failure
[ 524.962525][ T1206] usb 3-1: USB disconnect, device number 11
[ 525.396079][ T9675] syz.4.961: attempt to access beyond end of device
[ 525.396079][ T9675] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[ 525.409769][ T9675] exFAT-fs (nbd4): unable to read boot sector
[ 525.415922][ T9675] exFAT-fs (nbd4): failed to read boot sector
[ 525.422159][ T9675] exFAT-fs (nbd4): failed to recognize exfat type
[ 531.970770][ T9725] tipc: Started in network mode
[ 531.976025][ T9725] tipc: Node identity 2007ff, cluster identity 4711
[ 531.982811][ T9725] tipc: Node number set to 2099199
[ 537.028916][ T5879] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 538.127419][ T5879] usb 6-1: config index 0 descriptor too short (expected 1298, got 18)
[ 538.147059][ T5879] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[ 538.190630][ T5879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 538.233391][ T5879] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 538.256378][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 538.411057][ T5879] usb 6-1: Product: syz
[ 538.423049][ T5879] usb 6-1: Manufacturer: syz
[ 538.451991][ T5879] usb 6-1: SerialNumber: syz
[ 538.715101][ T5879] usb 6-1: config 0 descriptor??
[ 539.971229][ T5879] usb 6-1: Firmware version (0.0) predates our first public release.
[ 539.989620][ T5879] usb 6-1: Please update to version 0.2 or newer
[ 541.061501][ T5879] usb 6-1: USB disconnect, device number 3
[ 544.762359][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 547.139260][ T1206] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 547.678225][ T9858] mmap: syz.5.1012 (9858) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 547.882996][ T1206] usb 2-1: config index 0 descriptor too short (expected 7768, got 18)
[ 548.820529][ T1206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 548.856341][ T1206] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 549.221568][ T1206] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[ 549.230838][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 549.250954][ T1206] usb 2-1: config 0 descriptor??
[ 549.309201][ T1206] usb 2-1: can't set config #0, error -71
[ 549.335869][ T1206] usb 2-1: USB disconnect, device number 20
[ 550.132481][ T9875] netlink: 'syz.1.1018': attribute type 10 has an invalid length.
[ 550.173392][ T9875] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 550.209637][ T9875] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 553.908547][ T5883] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 553.982391][ T9916] evm: overlay not supported
[ 554.081401][ T5883] usb 4-1: config index 0 descriptor too short (expected 7768, got 18)
[ 554.091752][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 554.102532][ T5883] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 554.111994][ T5883] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[ 554.121599][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 554.153369][ T5883] usb 4-1: config 0 descriptor??
[ 554.298755][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'.
[ 554.530851][ T9927] netlink: 'syz.5.1033': attribute type 10 has an invalid length.
[ 554.946045][ T5883] usb 4-1: USB disconnect, device number 11
[ 561.178120][ T9981] netlink: 'syz.3.1047': attribute type 18 has an invalid length.
[ 561.306969][ T9982] netlink: 'syz.4.1044': attribute type 2 has an invalid length.
[ 561.590864][ T9984] netlink: 'syz.5.1048': attribute type 10 has an invalid length.
[ 562.686880][ T9989] netlink: 16366 bytes leftover after parsing attributes in process `syz.3.1047'.
[ 562.726760][ T9981] netlink: 16366 bytes leftover after parsing attributes in process `syz.3.1047'.
[ 562.789200][ T29] audit: type=1800 audit(1738899147.560:2): pid=9992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1050" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[ 563.312395][ T5835] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[ 563.979748][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 563.986107][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 564.341331][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 564.361509][ T5835] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[ 564.377935][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 564.390857][ T5835] usb 6-1: Product: syz
[ 564.395050][ T5835] usb 6-1: Manufacturer: syz
[ 564.400461][ T5835] usb 6-1: SerialNumber: syz
[ 564.429276][ T5835] usb 6-1: config 0 descriptor??
[ 564.462019][ T5835] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 564.642658][T10018] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 564.677826][ T1206] usb 6-1: USB disconnect, device number 4
[ 565.070307][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1054'.
[ 566.530638][T10038] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 566.709447][T10041] netlink: 'syz.1.1061': attribute type 2 has an invalid length.
[ 567.586946][T10038] xt_socket: unknown flags 0x50
[ 570.160847][ T1206] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 571.292119][ T1206] usb 5-1: config index 0 descriptor too short (expected 7768, got 18)
[ 571.330143][ T1206] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 571.359100][ T1206] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[ 572.029434][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 572.080472][ T1206] usb 5-1: config 0 descriptor??
[ 572.295320][T10085] netlink: 'syz.3.1073': attribute type 10 has an invalid length.
[ 572.969686][ T1206] usb 5-1: USB disconnect, device number 9
[ 573.999112][ T6253] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 574.494170][ T6253] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 574.531875][ T6253] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 574.571206][ T6253] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 574.593984][ T6253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 574.608613][ T6253] usb 6-1: SerialNumber: syz
[ 575.669038][ T6253] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[ 575.680058][ T6253] usb-storage 6-1:1.0: USB Mass Storage device detected
[ 575.704983][ T6253] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 575.782215][ T6253] scsi host1: usb-storage 6-1:1.0
[ 576.940177][T10131] input input36: cannot allocate more than FF_MAX_EFFECTS effects
[ 577.452607][T10132] netlink: 'syz.2.1087': attribute type 18 has an invalid length.
[ 577.613556][T10135] netlink: 16366 bytes leftover after parsing attributes in process `syz.2.1087'.
[ 577.653191][T10132] netlink: 16366 bytes leftover after parsing attributes in process `syz.2.1087'.
[ 579.654494][ T6253] usb 6-1: USB disconnect, device number 5
[ 581.048955][ T5879] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[ 581.153626][T10165] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 581.983491][ T5879] usb 4-1: not running at top speed; connect to a high speed hub
[ 582.000828][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 582.021229][ T5879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 582.041056][ T5879] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 582.077113][ T5879] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 582.094258][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 582.119099][ T5879] usb 4-1: Product: syz
[ 582.123309][ T5879] usb 4-1: Manufacturer: syz
[ 582.127914][ T5879] usb 4-1: SerialNumber: syz
[ 582.238745][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1098'.
[ 582.381167][ T5879] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[ 582.388023][ T5879] cdc_ncm 4-1:1.0: bind() failure
[ 582.458181][ T5879] usb 4-1: USB disconnect, device number 12
[ 582.606042][T10177] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 583.585085][T10187] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 584.891699][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'.
[ 585.978909][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 586.018236][T10211] random: crng reseeded on system resumption
[ 586.360453][ T9] usb 4-1: Using ep0 maxpacket: 32
[ 586.374642][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 586.389070][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 586.403625][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 586.414052][ T5835] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 586.418868][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 586.470286][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 586.509616][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 586.517657][ T9] usb 4-1: Product: syz
[ 586.567464][ T9] usb 4-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏
[ 586.621620][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 586.634546][ T9] usb 4-1: SerialNumber: syz
[ 586.666449][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 586.705337][ T5835] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 586.750443][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 586.800739][ T5835] usb 3-1: config 0 descriptor??
[ 587.266045][T10223] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 587.457398][T10211] bridge0: port 3(syz_tun) entered blocking state
[ 587.583821][T10211] bridge0: port 3(syz_tun) entered disabled state
[ 587.700715][T10211] syz_tun: entered allmulticast mode
[ 587.975585][ T5835] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 587.990161][T10211] syz_tun: entered promiscuous mode
[ 588.019902][T10211] bridge0: port 3(syz_tun) entered blocking state
[ 588.026843][T10211] bridge0: port 3(syz_tun) entered forwarding state
[ 588.036531][ T5835] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[ 588.163339][ T5835] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE
[ 588.529597][ T5835] cp2112 0003:10C4:EA90.000A: error reading lock byte: -32
[ 588.579121][ T5835] usb 3-1: USB disconnect, device number 12
[ 589.085254][ T9] usb 4-1: 0:2 : does not exist
[ 589.128515][ T9] usb 4-1: USB disconnect, device number 13
[ 589.129512][T10210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 589.252288][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1113'.
[ 589.351289][T10207] udevd[10207]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 590.580432][T10249] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 592.957816][ T9812] Bluetooth: hci2: unexpected cc 0x1004 length: 39 > 11
[ 592.966232][ T9812] Bluetooth: hci2: unexpected event for opcode 0x1004
[ 593.894243][T10272] netlink: 'syz.1.1126': attribute type 1 has an invalid length.
[ 593.902244][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'.
[ 594.350713][T10275] netlink: 'syz.4.1124': attribute type 10 has an invalid length.
[ 596.917102][T10308] syz1: rxe_newlink: already configured on ipvlan0
[ 597.009604][ T9812] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 597.019652][ T9812] Bluetooth: hci2: Injecting HCI hardware error event
[ 597.028517][ T9812] Bluetooth: hci2: hardware error 0x00
[ 597.479704][T10309] syz.2.1133: vmalloc error: size 2764800, failed to allocated page array size 5400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 597.509368][T10309] CPU: 1 UID: 0 PID: 10309 Comm: syz.2.1133 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0
[ 597.509394][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 597.509406][T10309] Call Trace:
[ 597.509414][T10309] <TASK>
[ 597.509422][T10309] dump_stack_lvl+0x241/0x360
[ 597.509463][T10309] ? __pfx_dump_stack_lvl+0x10/0x10
[ 597.509483][T10309] ? __pfx__printk+0x10/0x10
[ 597.509520][T10309] ? cpuset_print_current_mems_allowed+0x1f/0x350
[ 597.509542][T10309] ? cpuset_print_current_mems_allowed+0x31e/0x350
[ 597.509567][T10309] warn_alloc+0x278/0x410
[ 597.509602][T10309] ? __pfx_warn_alloc+0x10/0x10
[ 597.509638][T10309] ? vb2_vmalloc_alloc+0xf2/0x340
[ 597.509658][T10309] ? __get_vm_area_node+0x1c8/0x2d0
[ 597.509678][T10309] ? __get_vm_area_node+0x25c/0x2d0
[ 597.509711][T10309] __vmalloc_node_range_noprof+0x62f/0x1380
[ 597.509783][T10309] ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 597.509812][T10309] ? __kasan_kmalloc+0x98/0xb0
[ 597.509847][T10309] vmalloc_user_noprof+0x74/0x80
[ 597.509871][T10309] ? vb2_vmalloc_alloc+0xf2/0x340
[ 597.509889][T10309] vb2_vmalloc_alloc+0xf2/0x340
[ 597.509913][T10309] ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[ 597.509930][T10309] __vb2_queue_alloc+0xa0b/0x16f0
[ 597.509989][T10309] vb2_core_reqbufs+0xd2e/0x17c0
[ 597.510038][T10309] ? __pfx_vb2_core_reqbufs+0x10/0x10
[ 597.510105][T10309] v4l2_m2m_ioctl_reqbufs+0x14b/0x230
[ 597.510130][T10309] __video_do_ioctl+0xc23/0xdd0
[ 597.510176][T10309] ? __pfx___video_do_ioctl+0x10/0x10
[ 597.510207][T10309] ? __might_fault+0xaa/0x120
[ 597.510244][T10309] video_usercopy+0x89b/0x1180
[ 597.510287][T10309] ? __pfx___video_do_ioctl+0x10/0x10
[ 597.510314][T10309] ? __pfx_video_usercopy+0x10/0x10
[ 597.510361][T10309] ? __fget_files+0x2a/0x410
[ 597.510387][T10309] ? __fget_files+0x2a/0x410
[ 597.510410][T10309] v4l2_ioctl+0x189/0x1e0
[ 597.510435][T10309] ? __pfx_v4l2_ioctl+0x10/0x10
[ 597.510462][T10309] __se_sys_ioctl+0xf1/0x160
[ 597.510490][T10309] do_syscall_64+0xf3/0x230
[ 597.510512][T10309] ? clear_bhb_loop+0x35/0x90
[ 597.510541][T10309] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 597.510572][T10309] RIP: 0033:0x7fe60038cde9
[ 597.510594][T10309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 597.510609][T10309] RSP: 002b:00007fe601231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 597.510629][T10309] RAX: ffffffffffffffda RBX: 00007fe6005a6240 RCX: 00007fe60038cde9
[ 597.510642][T10309] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000007
[ 597.510653][T10309] RBP: 00007fe60040e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 597.510664][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 597.510674][T10309] R13: 0000000000000000 R14: 00007fe6005a6240 R15: 00007fff9da3e678
[ 597.510714][T10309] </TASK>
[ 597.510721][T10309] Mem-Info:
[ 598.280157][T10309] active_anon:6607 inactive_anon:0 isolated_anon:0
[ 598.280157][T10309] active_file:10887 inactive_file:38492 isolated_file:0
[ 598.280157][T10309] unevictable:768 dirty:147 writeback:0
[ 598.280157][T10309] slab_reclaimable:8855 slab_unreclaimable:104137
[ 598.280157][T10309] mapped:30826 shmem:1679 pagetables:1012
[ 598.280157][T10309] sec_pagetables:0 bounce:0
[ 598.280157][T10309] kernel_misc_reclaimable:0
[ 598.280157][T10309] free:1323072 free_pcp:5861 free_cma:0
[ 598.468589][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.475471][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.482082][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.488660][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.495259][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.501846][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.508396][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.514996][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.521611][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.528172][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.534769][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.541403][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.547966][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.554608][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.561211][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.567796][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.574404][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.580995][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.587550][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.594140][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.600896][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.607441][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.614033][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.620626][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.627192][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.633803][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.640387][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.646943][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.653531][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.660141][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.666702][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.673294][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.679898][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.686456][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.693110][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.699701][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.706257][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.712851][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.719433][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.725992][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.732573][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.739165][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.745717][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.752297][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.758887][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.765439][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.772036][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.778615][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.785201][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.791789][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.798347][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.804946][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.811532][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.818089][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.824674][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.831267][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.837838][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.844429][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.851009][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.857563][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.864139][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.870715][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.877269][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.883851][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.893106][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.899714][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.906302][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.912926][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.919511][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.926069][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.932625][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.939212][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.945769][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.952352][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.958935][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.965544][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.972130][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.978694][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.985308][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.991900][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 598.998441][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.005025][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.011608][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.018164][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.024766][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.031347][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.037896][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.044470][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.051046][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.057607][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.064178][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.070757][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.077298][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.083885][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.090455][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.097039][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.103616][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.110200][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.116755][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.123335][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.129905][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.136441][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.143007][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.149569][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.156106][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.162670][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.169220][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.175814][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.182396][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.188955][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.195492][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.202059][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.208607][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.215195][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.221777][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.228313][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.234889][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.241539][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.248071][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.254676][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.261246][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.267823][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.274453][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.281052][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.287644][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.294234][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.300805][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.307350][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 599.340443][ T9812] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 599.430225][T10309] Node 0 active_anon:48436kB inactive_anon:0kB active_file:43500kB inactive_file:153892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150296kB dirty:632kB writeback:0kB shmem:27188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11068kB pagetables:4024kB sec_pagetables:0kB all_unreclaimable? no
[ 599.463247][T10309] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 599.496332][T10309] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 599.527282][T10309] lowmem_reserve[]: 0 2491 2491 0 0
[ 599.533336][T10309] Node 0 DMA32 free:1371560kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:48396kB inactive_anon:0kB active_file:43500kB inactive_file:153328kB unevictable:1536kB writepending:632kB present:3129332kB managed:2550852kB mlocked:0kB bounce:0kB free_pcp:1156kB local_pcp:996kB free_cma:0kB
[ 599.564965][T10309] lowmem_reserve[]: 0 0 0 0 0
[ 599.570007][T10309] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[ 599.597373][T10309] lowmem_reserve[]: 0 0 0 0 0
[ 599.602825][T10309] Node 1 Normal free:3904948kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 599.635801][T10309] lowmem_reserve[]: 0 0 0 0 0
[ 599.641078][T10309] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 599.655633][T10309] Node 0 DMA32: 15*4kB (UME) 41*8kB (UME) 34*16kB (UME) 320*32kB (UME) 372*64kB (UME) 69*128kB (UME) 74*256kB (UME) 35*512kB (UME) 11*1024kB (UME) 8*2048kB (UME) 309*4096kB (M) = 1373988kB
[ 599.675119][T10309] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 599.688099][T10309] Node 1 Normal: 241*4kB (UME) 74*8kB (UME) 40*16kB (UE) 217*32kB (UE) 96*64kB (UME) 26*128kB (UME) 15*256kB (UM) 11*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3904948kB
[ 599.863134][T10309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 599.873062][T10309] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 599.882552][T10309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 599.892158][T10309] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 599.901496][T10309] 50835 total pagecache pages
[ 599.906152][T10309] 0 pages in swap cache
[ 599.910318][T10309] Free swap = 124600kB
[ 599.914451][T10309] Total swap = 124996kB
[ 599.918585][T10309] 2097051 pages RAM
[ 599.923696][T10309] 0 pages HighMem/MovableOnly
[ 599.928354][T10309] 427552 pages reserved
[ 599.932527][T10309] 0 pages cma reserved
[ 600.566318][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034aaec00: rx timeout, send abort
[ 600.787186][T10337] netlink: 'syz.4.1139': attribute type 10 has an invalid length.
[ 601.076106][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034aaec00: abort rx timeout. Force session deactivation
[ 601.428938][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 601.631086][ T9] usb 4-1: Using ep0 maxpacket: 32
[ 601.647708][ T9] usb 4-1: config 0 has an invalid interface number: 244 but max is 0
[ 601.666321][ T9] usb 4-1: config 0 has no interface number 0
[ 602.583151][ T9] usb 4-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 602.600897][ T9] usb 4-1: config 0 interface 244 has no altsetting 0
[ 603.489157][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c
[ 603.498202][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 603.565916][ T9] usb 4-1: config 0 descriptor??
[ 603.594166][ T9] usb 4-1: can't set config #0, error -71
[ 603.614184][ T9] usb 4-1: USB disconnect, device number 14
[ 604.873250][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 604.883078][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 604.953499][T10379] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 605.192060][T10383] netlink: 'syz.5.1152': attribute type 18 has an invalid length.
[ 605.268889][T10384] netlink: 16366 bytes leftover after parsing attributes in process `syz.5.1152'.
[ 605.293137][T10383] netlink: 16366 bytes leftover after parsing attributes in process `syz.5.1152'.
[ 606.045073][T10388] netlink: 'syz.1.1154': attribute type 10 has an invalid length.
[ 611.099134][T10426] netlink: 'syz.5.1165': attribute type 18 has an invalid length.
[ 611.138868][ T29] audit: type=1800 audit(1738899195.950:3): pid=10430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1168" name="bus" dev="tmpfs" ino=1358 res=0 errno=0
[ 611.177380][T10432] netlink: 16366 bytes leftover after parsing attributes in process `syz.5.1165'.
[ 611.225028][T10426] netlink: 16366 bytes leftover after parsing attributes in process `syz.5.1165'.
[ 613.409949][T10452] capability: warning: `syz.1.1174' uses 32-bit capabilities (legacy support in use)
[ 615.895781][T10475] kernel profiling enabled (shift: 9)
[ 616.455166][T10474] syz1: rxe_newlink: already configured on ipvlan0
[ 616.530199][T10477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'.
[ 618.609591][ T9812] Bluetooth: hci5: command 0x0406 tx timeout
[ 618.858862][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 619.450477][ T8] usb 4-1: Using ep0 maxpacket: 16
[ 619.889917][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 620.066406][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 620.107305][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 621.077108][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 621.086138][ T8] usb 4-1: Product: syz
[ 621.090724][ T8] usb 4-1: Manufacturer: syz
[ 621.095343][ T8] usb 4-1: SerialNumber: syz
[ 621.129048][ T8] usb 4-1: can't set config #1, error -71
[ 621.157916][ T8] usb 4-1: USB disconnect, device number 15
[ 621.434795][T10514] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 621.530826][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'.
[ 621.638521][T10517] xt_socket: unknown flags 0x50
[ 622.799900][ T25] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 623.079164][ T25] usb 3-1: device descriptor read/64, error -71
[ 623.592689][ T25] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[ 623.788311][ T25] usb 3-1: device descriptor read/64, error -71
[ 624.106156][ T25] usb usb3-port1: attempt power cycle
[ 624.468884][ T25] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[ 624.503730][ T25] usb 3-1: device descriptor read/8, error -71
[ 624.763864][ T25] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[ 624.903126][T10541] netlink: 'syz.1.1199': attribute type 2 has an invalid length.
[ 625.420226][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 625.426567][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 625.889223][ T25] usb 3-1: device not accepting address 16, error -71
[ 626.639252][ T25] usb usb3-port1: unable to enumerate USB device
[ 627.825130][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 628.020861][T10559] fuse: root generation should be zero
[ 628.029667][T10562] netlink: 'syz.4.1204': attribute type 6 has an invalid length.
[ 628.085622][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1204'.
[ 628.110689][T10568] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 628.117161][ T25] usb 3-1: Using ep0 maxpacket: 8
[ 628.132468][ T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 628.165556][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 628.178486][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 628.196598][ T25] usb 3-1: Product: syz
[ 628.201117][ T25] usb 3-1: Manufacturer: syz
[ 628.205816][ T25] usb 3-1: SerialNumber: syz
[ 628.238578][ T25] usb 3-1: config 0 descriptor??
[ 630.337059][ T25] usb 3-1: USB disconnect, device number 17
[ 631.306783][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1212'.
[ 632.484029][T10605] netlink: 'syz.3.1213': attribute type 2 has an invalid length.
[ 636.057717][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'.
[ 636.073515][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'.
[ 637.128901][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 637.686565][ T8] usb 6-1: Using ep0 maxpacket: 8
[ 638.375774][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 638.397111][ T8] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 638.408792][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 639.216084][T10658] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 639.231687][ T8] usb 6-1: Product: syz
[ 639.235966][ T8] usb 6-1: Manufacturer: syz
[ 639.242187][ T8] usb 6-1: SerialNumber: syz
[ 639.263615][ T8] usb 6-1: config 0 descriptor??
[ 639.785541][ T8] usb 6-1: can't set config #0, error -71
[ 639.819528][ T8] usb 6-1: USB disconnect, device number 6
[ 639.880331][T10663] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 640.033527][T10664] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1228'.
[ 640.470600][T10665] xt_socket: unknown flags 0x50
[ 641.755097][T10677] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 644.628842][ T54] Bluetooth: hci4: unexpected cc 0x1004 length: 39 > 11
[ 644.636857][ T54] Bluetooth: hci4: unexpected event for opcode 0x1004
[ 647.519956][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'.
[ 647.822897][T10722] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1245'.
[ 648.783078][ T54] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 648.791862][ T54] Bluetooth: hci4: Injecting HCI hardware error event
[ 648.801356][ T54] Bluetooth: hci4: hardware error 0x00
[ 649.224676][ T29] audit: type=1800 audit(1738899234.010:4): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1251" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[ 650.542227][T10759] netlink: 'syz.2.1253': attribute type 2 has an invalid length.
[ 650.940004][ T54] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 654.241577][T10784] syz.5.1258: attempt to access beyond end of device
[ 654.241577][T10784] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 654.254437][T10784] exFAT-fs (nbd5): unable to read boot sector
[ 654.260873][T10784] exFAT-fs (nbd5): failed to read boot sector
[ 654.266976][T10784] exFAT-fs (nbd5): failed to recognize exfat type
[ 654.287157][T10779] syz1: rxe_newlink: already configured on ipvlan0
[ 655.833494][T10785] team0: Device gtp0 is of different type
[ 657.464434][T10806] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1261'.
[ 663.329012][ T29] audit: type=1800 audit(1738899248.000:5): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1280" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[ 665.983439][T10878] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1283'.
[ 668.452530][T10906] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 669.011149][T10895] netlink: 'syz.5.1289': attribute type 6 has an invalid length.
[ 669.074262][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1289'.
[ 671.311278][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'.
[ 671.379094][ T9812] Bluetooth: hci3: command 0x1003 tx timeout
[ 671.383443][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 672.426218][T10946] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 673.629043][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 673.854449][T10955] netlink: 'syz.4.1307': attribute type 6 has an invalid length.
[ 673.890826][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'.
[ 673.902524][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 673.932772][ T25] usb 2-1: config 0 has no interfaces?
[ 673.944935][ T25] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 673.974098][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 674.015424][ T25] usb 2-1: config 0 descriptor??
[ 674.270339][ T25] usb 2-1: USB disconnect, device number 21
[ 674.474014][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1309'.
[ 676.669128][ T54] Bluetooth: hci5: command 0x0406 tx timeout
[ 677.740954][T11012] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 678.709662][T11016] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 678.741602][T11016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1323'.
[ 679.146803][ T25] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[ 679.250694][T11041] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1327'.
[ 680.033605][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 680.127874][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 680.148231][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 680.162452][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 680.170685][ T25] usb 6-1: SerialNumber: syz
[ 680.420914][ T25] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[ 680.523920][ T25] usb-storage 6-1:1.0: USB Mass Storage device detected
[ 680.634324][ T25] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 680.672082][ T25] scsi host1: usb-storage 6-1:1.0
[ 682.328890][ T8] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[ 682.510576][ T8] usb 2-1: not running at top speed; connect to a high speed hub
[ 682.522349][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 682.546358][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 682.567534][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 682.824083][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 682.834193][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 682.847133][ T8] usb 2-1: Product: syz
[ 682.861885][ T8] usb 2-1: Manufacturer: syz
[ 682.867547][ T8] usb 2-1: SerialNumber: syz
[ 682.953578][T11080] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1341'.
[ 683.585712][ T46] usb 6-1: USB disconnect, device number 7
[ 684.237295][ T8] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[ 684.278852][ T8] cdc_ncm 2-1:1.0: bind() failure
[ 684.319648][ T8] usb 2-1: USB disconnect, device number 22
[ 685.130605][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1342'.
[ 686.661058][T11127] syz1: rxe_newlink: already configured on ipvlan0
[ 686.889985][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 686.904092][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 687.708972][ T1206] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 688.017168][ T1206] usb 3-1: device descriptor read/64, error -71
[ 688.303741][ T1206] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 688.680133][ T1206] usb 3-1: device descriptor read/64, error -71
[ 688.849116][ T1206] usb usb3-port1: attempt power cycle
[ 689.253577][ T1206] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 689.346295][ T1206] usb 3-1: device descriptor read/8, error -71
[ 689.619433][ T1206] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 689.913236][ T1206] usb 3-1: device descriptor read/8, error -71
[ 690.200385][ T1206] usb usb3-port1: unable to enumerate USB device
[ 690.355587][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'.
[ 691.545448][T11175] syz1: rxe_newlink: already configured on ipvlan0
[ 692.569378][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'.
[ 693.502887][T11193] syz.3.1374: attempt to access beyond end of device
[ 693.502887][T11193] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 693.521024][T11193] exFAT-fs (nbd3): unable to read boot sector
[ 693.527145][T11193] exFAT-fs (nbd3): failed to read boot sector
[ 693.533349][T11193] exFAT-fs (nbd3): failed to recognize exfat type
[ 697.478963][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 697.992184][ T25] usb 4-1: device descriptor read/64, error -71
[ 698.229041][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 698.282355][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 698.543276][ T5888] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 698.611183][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 698.774268][ T5888] usb 3-1: config 0 descriptor??
[ 699.177883][ T5888] kaweth 3-1:0.0: Firmware present in device.
[ 699.403881][ T5888] kaweth 3-1:0.0: Error reading configuration (-32), no net device created
[ 699.496840][ T5888] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[ 699.590112][ T5888] usb 3-1: USB disconnect, device number 22
[ 705.213722][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 705.590776][T11285] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 705.607479][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1404'.
[ 705.647025][ T8] usb 3-1: device descriptor read/64, error -71
[ 705.959101][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 706.319765][ T8] usb 3-1: device descriptor read/64, error -71
[ 706.493261][ T8] usb usb3-port1: attempt power cycle
[ 707.495293][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 707.557456][ T8] usb 3-1: device descriptor read/8, error -71
[ 708.021557][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 708.247542][ T8] usb 3-1: device descriptor read/8, error -71
[ 708.420596][ T8] usb usb3-port1: unable to enumerate USB device
[ 709.048960][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 709.352334][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 709.368845][ T8] usb 3-1: config 0 has no interfaces?
[ 709.374387][ T8] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 709.392840][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 709.410232][ T8] usb 3-1: config 0 descriptor??
[ 709.639379][ T8] usb 3-1: USB disconnect, device number 27
[ 711.888978][T10001] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 712.258983][T10001] usb 2-1: Using ep0 maxpacket: 16
[ 712.881433][T10001] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 712.918887][T10001] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 712.968322][T10001] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 712.992732][T10001] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 713.033990][T10001] usb 2-1: Manufacturer: syz
[ 713.114347][T10001] usb 2-1: config 0 descriptor??
[ 713.210033][T11366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1425'.
[ 713.285836][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 713.539003][ T8] usb 5-1: Using ep0 maxpacket: 16
[ 714.533474][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 714.585618][ T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[ 714.613402][T11294] usb 2-1: USB disconnect, device number 23
[ 714.619447][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 714.670412][ T8] usb 5-1: config 0 descriptor??
[ 714.909070][ T5883] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[ 715.050443][T11383] netlink: 'syz.1.1431': attribute type 18 has an invalid length.
[ 715.120570][ T8] usbhid 5-1:0.0: can't add hid device: -71
[ 715.289408][T11385] netlink: 16366 bytes leftover after parsing attributes in process `syz.1.1431'.
[ 715.351947][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 715.365147][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 715.375575][T11384] netlink: 16366 bytes leftover after parsing attributes in process `syz.1.1431'.
[ 715.399764][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 715.411113][ T8] usb 5-1: USB disconnect, device number 10
[ 715.423693][ T5883] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 715.470515][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 715.519769][ T5883] usb 6-1: SerialNumber: syz
[ 715.548112][ T5883] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[ 715.582459][ T5883] usb-storage 6-1:1.0: USB Mass Storage device detected
[ 715.619353][ T5883] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 715.647179][ T5883] scsi host1: usb-storage 6-1:1.0
[ 715.807538][T11394] smc: net device bond0 applied user defined pnetid SYZ2
[ 715.816255][T11394] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2
[ 716.323503][ T5888] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 716.951747][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 716.973138][ T5888] usb 4-1: config 0 has no interfaces?
[ 716.982453][ T5888] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 716.993120][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 717.016086][ T5888] usb 4-1: config 0 descriptor??
[ 718.089592][ T5883] usb 4-1: USB disconnect, device number 18
[ 718.191350][ T46] usb 6-1: USB disconnect, device number 8
[ 719.644572][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1444'.
[ 719.989370][ T5883] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 720.458866][ T5883] usb 4-1: Using ep0 maxpacket: 16
[ 720.506573][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 720.526386][ T5883] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 720.538692][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 720.568777][ T5883] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 720.576809][ T5883] usb 4-1: Manufacturer: syz
[ 720.599833][ T5883] usb 4-1: config 0 descriptor??
[ 723.748186][ T5883] usb 4-1: USB disconnect, device number 19
[ 725.222561][T11471] netlink: 'syz.3.1453': attribute type 18 has an invalid length.
[ 726.197530][T11474] netlink: 16366 bytes leftover after parsing attributes in process `syz.3.1453'.
[ 726.235537][T11471] netlink: 16366 bytes leftover after parsing attributes in process `syz.3.1453'.
[ 728.460757][ T5879] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 728.619416][ T5879] usb 2-1: Using ep0 maxpacket: 16
[ 729.059467][ T5879] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[ 729.074226][ T5879] usb 2-1: config 0 has no interface number 0
[ 729.083385][ T5879] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 729.106088][ T5879] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 729.173787][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 729.199032][ T5879] usb 2-1: Product: syz
[ 729.203246][ T5879] usb 2-1: Manufacturer: syz
[ 729.239487][ T5879] usb 2-1: SerialNumber: syz
[ 729.261502][ T5879] usb 2-1: config 0 descriptor??
[ 729.530185][ T5879] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 730.280009][ T5879] usb 2-1: USB disconnect, device number 24
[ 731.241036][T11527] mac80211_hwsim hwsim5 �: renamed from wlan1 (while UP)
[ 734.163996][T11553] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 734.986208][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'.
[ 738.632154][T11587] netlink: 'syz.3.1486': attribute type 18 has an invalid length.
[ 738.884342][T11590] netlink: 16366 bytes leftover after parsing attributes in process `syz.3.1486'.
[ 739.658777][T11594] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 739.675888][T11594] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1488'.
[ 740.104979][T11587] netlink: 16366 bytes leftover after parsing attributes in process `syz.3.1486'.
[ 740.947860][ T5888] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 742.355590][ T5888] usb 3-1: Using ep0 maxpacket: 32
[ 744.201303][ T5888] usb 3-1: device descriptor read/all, error -71
[ 745.879852][ T5879] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 746.455075][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 746.487338][T11653] 9pnet_fd: Insufficient options for proto=fd
[ 746.500195][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 746.548868][ T5879] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 746.580316][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 746.800164][ T5879] usb 2-1: config 0 descriptor??
[ 747.501127][ T5879] usbhid 2-1:0.0: can't add hid device: -32
[ 747.510128][ T5879] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[ 747.628885][ T5879] usb 2-1: USB disconnect, device number 25
[ 747.744442][T11669] syz1: rxe_newlink: already configured on ipvlan0
[ 747.984943][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 748.300161][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 748.310365][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 749.075554][T11685] netlink: 'syz.2.1512': attribute type 18 has an invalid length.
[ 749.415020][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1513'.
[ 749.471297][T11689] netlink: 16366 bytes leftover after parsing attributes in process `syz.2.1512'.
[ 749.487402][T11685] netlink: 16366 bytes leftover after parsing attributes in process `syz.2.1512'.
[ 749.670335][T11695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1517'.
[ 751.671410][T11719] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 751.773014][T11721] syz.4.1524: attempt to access beyond end of device
[ 751.773014][T11721] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[ 751.788073][T11721] exFAT-fs (nbd4): unable to read boot sector
[ 751.794220][T11721] exFAT-fs (nbd4): failed to read boot sector
[ 751.800308][T11721] exFAT-fs (nbd4): failed to recognize exfat type
[ 752.292853][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 752.821204][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 752.842932][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 752.854918][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 752.865298][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 752.884382][ T8] usb 2-1: config 0 descriptor??
[ 753.325583][ T8] usbhid 2-1:0.0: can't add hid device: -32
[ 753.348941][ T5879] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 753.362108][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[ 753.386326][ T8] usb 2-1: USB disconnect, device number 26
[ 753.518950][ T5879] usb 5-1: Using ep0 maxpacket: 8
[ 753.538309][ T5879] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 753.562939][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 753.575773][ T5879] usb 5-1: Product: syz
[ 753.582861][ T5879] usb 5-1: Manufacturer: syz
[ 753.587691][ T5879] usb 5-1: SerialNumber: syz
[ 753.609998][ T5879] usb 5-1: config 0 descriptor??
[ 753.631636][ T5879] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 753.784409][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1531'.
[ 755.698824][ T5879] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 756.008984][ T5879] usb 4-1: Using ep0 maxpacket: 16
[ 756.017338][ T5879] usb 4-1: config 0 has an invalid interface number: 68 but max is 0
[ 756.452211][ T5879] usb 4-1: config 0 has no interface number 0
[ 756.512299][ T5879] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 756.644298][ T5879] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 756.824473][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 756.848210][ T5879] usb 4-1: Product: syz
[ 756.855911][ T5879] usb 4-1: Manufacturer: syz
[ 756.888165][ T5879] usb 4-1: SerialNumber: syz
[ 756.939264][ T5879] usb 4-1: config 0 descriptor??
[ 756.974130][ T5888] usb 5-1: USB disconnect, device number 11
[ 757.031239][ T5879] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 757.202418][ T5879] usb 4-1: USB disconnect, device number 20
[ 757.209331][ T1103] usb 4-1: Failed to submit usb control message: -71
[ 757.225870][ T1103] usb 4-1: unable to send the bmi data to the device: -71
[ 757.248359][ T1103] usb 4-1: unable to get target info from device
[ 757.258085][ T1103] usb 4-1: could not get target info (-71)
[ 757.270425][ T1103] usb 4-1: could not probe fw (-71)
[ 757.780223][T11798] fuse: Bad value for 'fd'
[ 760.239208][ T5888] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 760.511949][T11820] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1550'.
[ 760.548787][ T5888] usb 4-1: Using ep0 maxpacket: 16
[ 760.563195][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 760.589664][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 760.602191][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 760.635701][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 760.655455][ T5888] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 760.664129][ T5888] usb 4-1: Manufacturer: syz
[ 760.673235][T11819] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 760.695580][ T5888] usb 4-1: config 0 descriptor??
[ 762.528962][ T9803] Bluetooth: hci5: command 0x0406 tx timeout
[ 762.637243][T11841] syz.5.1554: attempt to access beyond end of device
[ 762.637243][T11841] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 762.654244][T11841] exFAT-fs (nbd5): unable to read boot sector
[ 762.661213][T11841] exFAT-fs (nbd5): failed to read boot sector
[ 762.667766][T11841] exFAT-fs (nbd5): failed to recognize exfat type
[ 762.749040][ T5888] usb 4-1: USB disconnect, device number 21
[ 764.298309][T11852] fuse: Bad value for 'fd'
[ 769.168761][ C0] vkms_vblank_simulate: vblank timer overrun
[ 775.519670][T11940] 9pnet: Unknown protocol version 9p200
[ 775.533908][T11940] siw: device registration error -23
[ 778.088991][ T25] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[ 778.369334][ T25] usb 6-1: not running at top speed; connect to a high speed hub
[ 778.399071][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 778.437107][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 778.452326][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 778.764879][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 779.095018][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 779.187327][ T25] usb 6-1: Product: syz
[ 779.192579][ T25] usb 6-1: Manufacturer: syz
[ 779.227022][ T25] usb 6-1: SerialNumber: syz
[ 779.955924][ T25] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[ 780.232138][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1593'.
[ 780.915086][ T25] cdc_ncm 6-1:1.0: bind() failure
[ 780.950383][ T25] usb 6-1: USB disconnect, device number 9
[ 782.630710][T11993] 9pnet: Unknown protocol version 9p200
[ 782.645740][T11993] siw: device registration error -23
[ 785.802679][T12011] syz1: rxe_newlink: already configured on ipvlan0
[ 786.686513][ T5879] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[ 787.087376][ T5879] usb 6-1: not running at top speed; connect to a high speed hub
[ 787.096961][ T5879] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 787.155307][ T5879] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 787.180052][ T5879] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 787.450137][ T5879] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 787.468897][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 787.591924][ T5879] usb 6-1: Product: syz
[ 787.596217][ T5879] usb 6-1: Manufacturer: syz
[ 787.609174][ T5879] usb 6-1: SerialNumber: syz
[ 788.010934][ T5879] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[ 788.017825][ T5879] cdc_ncm 6-1:1.0: bind() failure
[ 788.073990][ T5879] usb 6-1: USB disconnect, device number 10
[ 788.117592][T12039] kvm: emulating exchange as write
[ 794.389752][ T5879] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[ 795.700716][ T5879] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 795.708335][ T5879] usb 2-1: can't read configurations, error -71
[ 799.128850][ T46] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[ 799.834849][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 800.026681][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 800.050567][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 800.072466][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 800.155157][ T46] usb 3-1: SerialNumber: syz
[ 800.195701][ T46] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 800.225636][ T46] usb-storage 3-1:1.0: USB Mass Storage device detected
[ 800.251967][ T46] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 800.276958][ T46] scsi host1: usb-storage 3-1:1.0
[ 800.969228][T12141] input input38: cannot allocate more than FF_MAX_EFFECTS effects
[ 801.317539][T12147] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 801.378915][ T8] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[ 801.691176][ T46] usb 3-1: USB disconnect, device number 30
[ 801.701534][ T8] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 801.721133][ T8] usb 5-1: can't read configurations, error -71
[ 802.796391][T12159] 9pnet_fd: Insufficient options for proto=fd
[ 805.305405][T12188] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 805.856312][T12191] xt_socket: unknown flags 0x50
[ 808.268919][T10001] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[ 808.803776][T10001] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 809.704692][T10001] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 809.743962][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 809.751224][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 809.765604][T10001] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 809.774899][T10001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 809.807362][T10001] usb 3-1: SerialNumber: syz
[ 809.868912][T10001] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 809.898648][T10001] usb-storage 3-1:1.0: USB Mass Storage device detected
[ 810.398263][T10001] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 810.412200][T10001] scsi host1: usb-storage 3-1:1.0
[ 810.565943][T12238] input input39: cannot allocate more than FF_MAX_EFFECTS effects
[ 811.799968][T12247] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 811.905213][T12251] xt_socket: unknown flags 0x50
[ 812.495710][ T29] audit: type=1800 audit(1738899397.300:6): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1668" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[ 812.510446][ T8] usb 3-1: USB disconnect, device number 31
[ 813.816672][T12267] 9pnet_fd: Insufficient options for proto=fd
[ 818.112491][ T29] audit: type=1800 audit(1738899402.930:7): pid=12307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1681" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[ 818.219002][ T5835] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 818.385491][ T5835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 818.408770][ T5835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 818.430022][ T5835] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 818.448866][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 818.456883][ T5835] usb 6-1: SerialNumber: syz
[ 818.487246][ T5835] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[ 818.509201][ T5835] usb-storage 6-1:1.0: USB Mass Storage device detected
[ 818.530721][ T5835] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 818.559083][ T5835] scsi host1: usb-storage 6-1:1.0
[ 818.900618][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'.
[ 819.761453][T12327] input input40: cannot allocate more than FF_MAX_EFFECTS effects
[ 820.334090][ T8] usb 6-1: USB disconnect, device number 11
[ 822.059361][ T5879] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 822.218794][ T5835] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 822.497674][T12353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1692'.
[ 822.557371][ T5879] usb 4-1: config index 0 descriptor too short (expected 530, got 18)
[ 822.566082][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 822.577079][ T5879] usb 4-1: config 0 has no interfaces?
[ 822.596516][ T5879] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 822.598854][ T5835] usb 5-1: device descriptor read/64, error -71
[ 822.606589][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 822.620846][ T5879] usb 4-1: Product: syz
[ 822.625099][ T5879] usb 4-1: Manufacturer: syz
[ 822.629849][ T5879] usb 4-1: SerialNumber: syz
[ 822.643071][ T5879] usb 4-1: config 0 descriptor??
[ 822.903722][ T5835] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 823.193292][ T5835] usb 5-1: device descriptor read/64, error -71
[ 823.478439][ T5835] usb usb5-port1: attempt power cycle
[ 823.496808][ T5879] usb 4-1: USB disconnect, device number 22
[ 823.879113][ T5835] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 824.015679][ T5835] usb 5-1: device descriptor read/8, error -71
[ 824.529170][ T54] Bluetooth: hci5: command 0x0406 tx timeout
[ 825.138798][ T5835] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 825.378934][ T5835] usb 5-1: device not accepting address 17, error -71
[ 825.396428][ T5835] usb usb5-port1: unable to enumerate USB device
[ 827.885531][T12389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1704'.
[ 828.898944][ T5835] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[ 829.201635][T12404] tipc: Started in network mode
[ 829.206619][T12404] tipc: Node identity 2007ff, cluster identity 4711
[ 829.213375][T12404] tipc: Node number set to 2099199
[ 829.914994][ T5835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 829.951277][ T29] audit: type=1800 audit(1738899414.760:8): pid=12405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1707" name="bus" dev="tmpfs" ino=1365 res=0 errno=0
[ 829.982740][ T5835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 830.751759][ T5835] usb 5-1: string descriptor 0 read error: -71
[ 830.819962][ T5835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 830.916214][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 831.357845][ T5835] usb 5-1: can't set config #1, error -71
[ 831.676113][ T5835] usb 5-1: USB disconnect, device number 18
[ 832.367300][ T5879] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 832.643971][ T5879] usb 3-1: Using ep0 maxpacket: 16
[ 832.651907][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 832.662312][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 832.697510][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[ 832.727573][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 832.948492][ T5879] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 833.071080][ T5879] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 833.204212][ T5879] usb 3-1: Manufacturer: syz
[ 833.475193][ T5879] usb 3-1: config 0 descriptor??
[ 834.619662][T12449] tipc: Started in network mode
[ 834.624917][T12449] tipc: Node identity 2007ff, cluster identity 4711
[ 834.631850][T12449] tipc: Node number set to 2099199
[ 835.358543][ T5879] usb 3-1: USB disconnect, device number 32
[ 836.686087][T12465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1723'.
[ 836.908923][ T8] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[ 837.455122][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 837.472830][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 837.501751][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 837.530431][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 837.562682][ T8] usb 2-1: SerialNumber: syz
[ 837.625265][ T8] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 837.651551][ T8] usb-storage 2-1:1.0: USB Mass Storage device detected
[ 837.683746][ T8] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 837.700721][T12475] netlink: 'syz.3.1727': attribute type 18 has an invalid length.
[ 837.722763][ T8] scsi host1: usb-storage 2-1:1.0
[ 837.761802][T12477] netlink: 16366 bytes leftover after parsing attributes in process `syz.3.1727'.
[ 837.822380][T12475] netlink: 16366 bytes leftover after parsing attributes in process `syz.3.1727'.
[ 838.215290][T12484] input input41: cannot allocate more than FF_MAX_EFFECTS effects
[ 839.722565][ T5879] usb 2-1: USB disconnect, device number 29
[ 839.772168][T12492] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 839.781348][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1732'.
[ 839.837315][T12496] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 840.720180][T12498] xt_socket: unknown flags 0x50
[ 843.149253][T12521] netlink: 'syz.4.1740': attribute type 18 has an invalid length.
[ 843.277379][T12526] netlink: 16366 bytes leftover after parsing attributes in process `syz.4.1740'.
[ 843.329182][T12521] netlink: 16366 bytes leftover after parsing attributes in process `syz.4.1740'.
[ 847.345655][T12544] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 847.355145][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1745'.
[ 851.321167][T12580] : renamed from bond0 (while UP)
[ 851.971985][ T9803] Bluetooth: hci3: command 0x1003 tx timeout
[ 852.009072][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 852.241543][T12577] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 852.251043][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1757'.
[ 853.614822][ T29] audit: type=1800 audit(1738899438.420:9): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1761" name="file1" dev="tmpfs" ino=1419 res=0 errno=0
[ 858.362599][T12637] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 858.441741][T12637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1771'.
[ 860.288890][ T9803] Bluetooth: hci3: command 0x1003 tx timeout
[ 860.288912][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 865.548251][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1783'.
[ 865.558474][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1783'.
[ 865.732243][T12687] xt_policy: output policy not valid in PREROUTING and INPUT
[ 867.057683][ T7805] bridge0: port 3(syz_tun) entered disabled state
[ 867.223240][ T7805] syz_tun (unregistering): left allmulticast mode
[ 867.231493][ T7805] syz_tun (unregistering): left promiscuous mode
[ 867.278823][ T7805] bridge0: port 3(syz_tun) entered disabled state
[ 871.175489][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 871.200709][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 871.219767][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 871.419938][ T46] usb 5-1: Using ep0 maxpacket: 16
[ 871.442410][ T46] usb 5-1: config 0 has no interfaces?
[ 871.461180][ T46] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 871.483930][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 871.510354][ T46] usb 5-1: Product: syz
[ 871.529592][ T9803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 871.539939][ T9803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 871.548255][ T46] usb 5-1: Manufacturer: syz
[ 871.563631][ T9803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 871.573051][ T46] usb 5-1: SerialNumber: syz
[ 871.581203][ T9803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 871.596253][ T46] usb 5-1: config 0 descriptor??
[ 871.598903][ T9803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 871.610870][ T9803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 871.824535][ T8] usb 5-1: USB disconnect, device number 19
[ 872.130771][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 872.172512][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 872.339392][T12734] lo speed is unknown, defaulting to 1000
[ 873.293628][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 873.338848][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 873.650141][ T54] Bluetooth: hci3: command tx timeout
[ 873.704114][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 873.768991][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 874.386544][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 874.417543][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 874.820344][ T9803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 874.830411][ T9803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 874.839115][ T9803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 874.847729][ T9803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 874.855868][ T9803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 874.866315][ T9803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 875.047554][T12734] chnl_net:caif_netlink_parms(): no params data found
[ 875.729929][ T9803] Bluetooth: hci3: command tx timeout
[ 876.013040][T12734] bridge0: port 1(bridge_slave_0) entered blocking state
[ 876.024455][T12734] bridge0: port 1(bridge_slave_0) entered disabled state
[ 876.032292][T12734] bridge_slave_0: entered allmulticast mode
[ 876.041273][T12734] bridge_slave_0: entered promiscuous mode
[ 876.050122][T12766] lo speed is unknown, defaulting to 1000
[ 876.069353][T12784] Bluetooth: MGMT ver 1.23
[ 876.076542][T12734] bridge0: port 2(bridge_slave_1) entered blocking state
[ 876.084752][T12734] bridge0: port 2(bridge_slave_1) entered disabled state
[ 876.092904][T12734] bridge_slave_1: entered allmulticast mode
[ 876.252130][T12734] bridge_slave_1: entered promiscuous mode
[ 876.342408][T12734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 876.418314][T12734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 876.927008][T12734] team0: Port device team_slave_0 added
[ 876.929090][ T9803] Bluetooth: hci0: command tx timeout
[ 876.973100][T12734] team0: Port device team_slave_1 added
[ 877.003190][ T35] bridge_slave_1: left allmulticast mode
[ 877.009697][ T35] bridge_slave_1: left promiscuous mode
[ 877.017828][ T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 877.031146][ T35] bridge_slave_0: left allmulticast mode
[ 877.036889][ T35] bridge_slave_0: left promiscuous mode
[ 877.043673][ T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 877.324347][ T35] xfrm0 (unregistering): left allmulticast mode
[ 877.821199][ T9803] Bluetooth: hci3: command tx timeout
[ 878.523274][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 878.534780][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 878.545778][ T35] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 878.599013][ T35] bond0 (unregistering): Released all slaves
[ 878.696597][T12734] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 878.714380][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 878.748231][T12734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 878.929821][T12734] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 878.936806][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 879.016739][ T9803] Bluetooth: hci0: command tx timeout
[ 879.040944][T12734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 879.889104][ T9803] Bluetooth: hci3: command tx timeout
[ 880.350350][T12734] hsr_slave_0: entered promiscuous mode
[ 880.364365][T12734] hsr_slave_1: entered promiscuous mode
[ 880.380148][T12734] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 880.408536][T12734] Cannot create hsr debugfs directory
[ 880.749248][T12766] chnl_net:caif_netlink_parms(): no params data found
[ 881.266604][ T9803] Bluetooth: hci0: command tx timeout
[ 881.794766][T12841] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN PTI
[ 881.807388][T12841] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f]
[ 881.815805][T12841] CPU: 1 UID: 0 PID: 12841 Comm: syz.3.1821 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0
[ 881.826047][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 881.836099][T12841] RIP: 0010:qca_close+0x72/0x2e0
[ 881.841039][T12841] Code: 14 f8 f5 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 20 c8 5c f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a
[ 881.860633][T12841] RSP: 0018:ffffc9000419fb90 EFLAGS: 00010206
[ 881.866688][T12841] RAX: 000000000000002b RBX: ffff888035547c00 RCX: ffff888056c0bc00
[ 881.874647][T12841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a
[ 881.882604][T12841] RBP: 1ffff11006aa8fb7 R08: ffffffff81880be3 R09: 1ffffffff286112b
[ 881.890562][T12841] R10: dffffc0000000000 R11: ffffffff88c98ba0 R12: 0000000000000000
[ 881.898519][T12841] R13: dffffc0000000000 R14: ffff888035547db8 R15: 0000000000000000
[ 881.906476][T12841] FS: 0000555558b0e500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 881.915391][T12841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 881.921958][T12841] CR2: 000000110c4aceb0 CR3: 000000007eb3a000 CR4: 00000000003526f0
[ 881.929921][T12841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 881.937877][T12841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 881.945835][T12841] Call Trace:
[ 881.949100][T12841] <TASK>
[ 881.952019][T12841] ? __die_body+0x5f/0xb0
[ 881.956345][T12841] ? die_addr+0xb0/0xe0
[ 881.960491][T12841] ? exc_general_protection+0x3dd/0x5d0
[ 881.966038][T12841] ? asm_exc_general_protection+0x26/0x30
[ 881.971749][T12841] ? __pfx_qca_close+0x10/0x10
[ 881.976506][T12841] ? enable_work+0x2e3/0x360
[ 881.981085][T12841] ? qca_close+0x72/0x2e0
[ 881.985409][T12841] hci_uart_tty_close+0x205/0x290
[ 881.990424][T12841] tty_ldisc_kill+0xa3/0x1a0
[ 881.995004][T12841] tty_ldisc_release+0x1a1/0x200
[ 881.999934][T12841] tty_release_struct+0x2b/0xe0
[ 882.004778][T12841] tty_release+0xd06/0x12c0
[ 882.009273][T12841] ? __pfx_tty_release+0x10/0x10
[ 882.014203][T12841] __fput+0x3e9/0x9f0
[ 882.018183][T12841] task_work_run+0x24f/0x310
[ 882.022768][T12841] ? _raw_spin_unlock+0x28/0x50
[ 882.027608][T12841] ? __pfx_task_work_run+0x10/0x10
[ 882.032711][T12841] ? syscall_exit_to_user_mode+0xa3/0x340
[ 882.038425][T12841] syscall_exit_to_user_mode+0x13f/0x340
[ 882.044049][T12841] do_syscall_64+0x100/0x230
[ 882.048629][T12841] ? clear_bhb_loop+0x35/0x90
[ 882.053302][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 882.059185][T12841] RIP: 0033:0x7f04b638cde9
[ 882.063591][T12841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 882.083184][T12841] RSP: 002b:00007ffd01e9bfa8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 882.091592][T12841] RAX: 0000000000000000 RBX: 00007f04b65a7ba0 RCX: 00007f04b638cde9
[ 882.099551][T12841] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 882.107503][T12841] RBP: 00007f04b65a7ba0 R08: 0000000000000240 R09: 0000001b01e9c29f
[ 882.115459][T12841] R10: 00007f04b65a7ac0 R11: 0000000000000246 R12: 00000000000d735b
[ 882.123414][T12841] R13: 00007ffd01e9c0a0 R14: ffffffffffffffff R15: 00007ffd01e9c0c0
[ 882.131381][T12841] </TASK>
[ 882.134384][T12841] Modules linked in:
[ 882.139223][T12841] ---[ end trace 0000000000000000 ]---
[ 882.144708][T12841] RIP: 0010:qca_close+0x72/0x2e0
[ 882.153557][T12841] Code: 14 f8 f5 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 20 c8 5c f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a
[ 882.174248][T12841] RSP: 0018:ffffc9000419fb90 EFLAGS: 00010206
[ 882.180366][T12841] RAX: 000000000000002b RBX: ffff888035547c00 RCX: ffff888056c0bc00
[ 882.188346][T12841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 882.196359][T12841] RBP: 1ffff11006aa8fb7 R08: ffffffff81880be3 R09: 1ffffffff286112b
[ 882.204835][T12841] R10: dffffc0000000000 R11: ffffffff88c98ba0 R12: 0000000000000000
[ 882.212962][T12841] R13: dffffc0000000000 R14: ffff888035547db8 R15: 0000000000000000
[ 882.221035][T12841] FS: 0000555558b0e500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 882.230120][T12841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 882.236915][T12841] CR2: 0000200000001040 CR3: 000000007eb3a000 CR4: 00000000003526f0
[ 882.244975][T12841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 882.252984][T12841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 882.261223][T12841] Kernel panic - not syncing: Fatal exception
[ 882.267527][T12841] Kernel Offset: disabled
[ 882.271833][T12841] Rebooting in 86400 seconds..