last executing test programs:

9m1.675006886s ago: executing program 3 (id=1058):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425", @ANYRES64=r1], 0x4c}}, 0x0)

9m0.551979512s ago: executing program 3 (id=1063):
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
socket(0x10, 0x3, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)
pread64(r3, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a)

8m59.124186946s ago: executing program 3 (id=1064):
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)

8m58.856278865s ago: executing program 3 (id=1066):
socket(0x11, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000000c0), 0x557, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

8m55.187659254s ago: executing program 3 (id=1074):
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
socket(0x10, 0x3, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)
pread64(r3, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a)

8m53.155343322s ago: executing program 3 (id=1081):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0)
listen(r1, 0x20000005)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xed00f2f, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x100, 0xe0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xd, 0x6, 0x275}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
sendfile(0xffffffffffffffff, r4, 0x0, 0x23894)
landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x6, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x1, 0x70bd25, 0x0, {{@in=@local, @in=@multicast1, 0x4e22, 0x0, 0x1ffd, 0x7, 0x0, 0x20, 0x0, 0xc}, {@in=@broadcast, 0x20, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x800000000000001, 0x2cb, 0x6, 0x4000000000000}, {0x4, 0x8}, {0x6, 0x0, 0x6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1b}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac-aes-ce\x00'}, 0x0, 0x60}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4055}, 0x4800)

8m38.092539909s ago: executing program 32 (id=1081):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0)
listen(r1, 0x20000005)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xed00f2f, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x100, 0xe0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xd, 0x6, 0x275}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
sendfile(0xffffffffffffffff, r4, 0x0, 0x23894)
landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x6, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x1, 0x70bd25, 0x0, {{@in=@local, @in=@multicast1, 0x4e22, 0x0, 0x1ffd, 0x7, 0x0, 0x20, 0x0, 0xc}, {@in=@broadcast, 0x20, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x800000000000001, 0x2cb, 0x6, 0x4000000000000}, {0x4, 0x8}, {0x6, 0x0, 0x6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1b}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac-aes-ce\x00'}, 0x0, 0x60}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4055}, 0x4800)

28.235598291s ago: executing program 1 (id=2037):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_open_dev$sndctrl(0x0, 0x5, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1})
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000700)={0x7, 0x1, &(0x7f00000000c0)=[0x401], &(0x7f0000000040), 0x0, 0x0})

26.799318151s ago: executing program 1 (id=2040):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

24.808484206s ago: executing program 1 (id=2044):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x654201, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x38011, r1, 0x0)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

23.400505757s ago: executing program 1 (id=2047):
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0)

21.107878447s ago: executing program 1 (id=2053):
ioperm(0x83, 0x6, 0x8)
arch_prctl$ARCH_GET_CPUID(0x1011)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x7, 0x100000000, {}, 0xfc, 0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
io_uring_enter(r1, 0x3516, 0x300, 0x0, 0x0, 0x0)

19.346020444s ago: executing program 1 (id=2058):
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
dup(0xffffffffffffffff)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048001}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r2 = socket$nl_route(0x10, 0x3, 0x0)
accept4(r2, 0x0, 0x0, 0x0)

17.217581832s ago: executing program 5 (id=2062):
syz_open_dev$ptys(0xc, 0x3, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, 0x0, 0x0, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, r3)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000340)=r4)

16.320558266s ago: executing program 4 (id=2065):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c0000000800", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x1, 0x0, 0x82f, 0x0, 0x10, 0x0, 0x0, 0xf4, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x2, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14.817010093s ago: executing program 0 (id=2067):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0xd, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10})
syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x108001)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
lseek(r4, 0x9, 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

14.816294274s ago: executing program 4 (id=2068):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)

13.281208807s ago: executing program 0 (id=2070):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x654201, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x38011, r1, 0x0)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

12.197072301s ago: executing program 0 (id=2072):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, 0x0)
write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r7, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r4, &(0x7f0000000300)='reno\x00', 0x5)
r8 = socket$inet6(0xa, 0x3, 0x1)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3000, 0x0)
connect$inet6(r8, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8)
r9 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x3, 0x0, 0x1, 0x1}, {{@in6=@remote, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x800}}, 0xe8)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)

12.194903353s ago: executing program 4 (id=2073):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0)
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xbc, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)={0x30, 0x30, 0x30}}, 0x40}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x3, 0x2, 0x16}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/4096, 0x1000, 0x0, 0x24}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0xffffffff}, {0xa, 0x0, 0x5, @mcast1}}}, 0x48)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x88c0}, 0xc014)
syz_open_dev$dri(0x0, 0x0, 0x2)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4694e30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x30)

10.265881481s ago: executing program 2 (id=2074):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket(0x80000000000000a, 0x2, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xeb476000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006)
connect$pppl2tp(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x442, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x0)

10.054861892s ago: executing program 5 (id=2075):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0xd, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10})
syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x108001)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
lseek(r5, 0x9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
fchown(r0, 0x0, 0x0)

8.739571031s ago: executing program 0 (id=2076):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}})

8.60220447s ago: executing program 2 (id=2077):
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0)

7.990460349s ago: executing program 4 (id=2078):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0)
socket(0x200000100000011, 0x3, 0x3)
write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
syz_open_procfs$namespace(0x0, 0x0)
shutdown(r5, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)

7.987004852s ago: executing program 5 (id=2079):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0)
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xbc, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)={0x30, 0x30, 0x30}}, 0x40}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x3, 0x2, 0x16}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/4096, 0x1000, 0x0, 0x24}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0xffffffff}, {0xa, 0x0, 0x5, @mcast1}}}, 0x48)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x88c0}, 0xc014)
timer_delete(0x0)

5.975187693s ago: executing program 4 (id=2080):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
semget$private(0x0, 0x6, 0x3b1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001440)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, [0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}})
socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r4=>0x0)
ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000000c0)={&(0x7f0000001080)=""/4096, 0x1000})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0)

5.851900401s ago: executing program 5 (id=2081):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0xd, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10})
syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x108001)
lseek(r4, 0x9, 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

5.602737063s ago: executing program 2 (id=2082):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r5, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3000, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x1)

5.572331002s ago: executing program 0 (id=2083):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x24200, 0x0)
openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200, 0x104, 0x16}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2, 0x80805, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x3cd842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000300000900020073857a30000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)

4.132119635s ago: executing program 33 (id=2058):
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
dup(0xffffffffffffffff)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048001}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r2 = socket$nl_route(0x10, 0x3, 0x0)
accept4(r2, 0x0, 0x0, 0x0)

4.116025744s ago: executing program 2 (id=2085):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x654201, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x38011, r1, 0x0)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

4.115155731s ago: executing program 5 (id=2086):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0)
socket(0x200000100000011, 0x3, 0x3)
write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
syz_open_procfs$namespace(0x0, 0x0)
shutdown(r5, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)

2.030319801s ago: executing program 2 (id=2087):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = syz_open_dev$loop(0x0, 0x10, 0x4a003)
ioctl$BLKRESETZONE(r0, 0x40101283, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10)
io_setup(0x6, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})

1.735372436s ago: executing program 5 (id=2088):
socket$kcm(0x29, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
unlink(0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mknod$loop(0x0, 0xfff, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0])
syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
ioctl$HIDIOCGUSAGES(r5, 0x40305829, &(0x7f0000008340)={{0x1, 0x3, 0x7f, 0x7, 0x1000, 0x40}, 0x2bf, [0xb704, 0x3ff, 0x6, 0x2, 0xfba9, 0x80000001, 0x1c, 0x8, 0x2, 0x80000000, 0x8, 0x8001, 0xffff, 0x1, 0x248b56bb, 0xf734, 0x46a93a47, 0x51e1, 0x6, 0x6, 0xff, 0xffffffff, 0x8, 0x4, 0x4, 0x6, 0xeb09, 0x101, 0x5, 0x6, 0x8, 0x4, 0x3, 0x88, 0x0, 0x0, 0x1000, 0xfb81, 0x8, 0x40, 0x7, 0xf, 0x3ff, 0x401, 0x5, 0x10, 0xfffffffd, 0x1, 0xc6f8, 0x2, 0x80, 0x2, 0x7, 0xa1a, 0x9, 0x6, 0x1, 0x2, 0x0, 0x6, 0x5, 0x8000, 0x6, 0x2, 0x5819, 0x7, 0x6, 0x4f4, 0x3, 0x80000, 0x1000, 0x2, 0xb, 0x4, 0x7, 0x5, 0x1, 0x2, 0x80000000, 0x0, 0x5, 0x2, 0x8, 0x1, 0x0, 0x6, 0xd985, 0x51, 0x1, 0x5, 0x9, 0x6, 0xfffffffe, 0x79, 0x2, 0x8, 0xffe00, 0xfffffffb, 0x71172ab, 0x3, 0x6, 0x6, 0x1, 0xe96, 0x4, 0xa09, 0x2, 0x4, 0x3, 0xa80c, 0x80000001, 0x9, 0xe7, 0x3e, 0x3, 0x0, 0x4, 0x2cdf, 0x1000, 0x3, 0x5, 0xff, 0x0, 0x4, 0x101, 0xff, 0x1400000, 0xfffffff7, 0x8, 0x8, 0x4, 0xffff, 0x2, 0x9, 0xfff, 0xfd93, 0x0, 0x5, 0x21, 0x4, 0x80000001, 0x401, 0x5, 0xfffffffb, 0x48cd, 0x1, 0x7fff, 0x8000, 0xfffffffe, 0x9, 0x1, 0x6, 0x6, 0xf8, 0xfffffffd, 0xa, 0x6, 0x2, 0xfb2, 0x100, 0x10001, 0x1, 0x40, 0x7, 0x8, 0x3e3, 0x0, 0x6, 0x0, 0x9, 0x0, 0x49, 0x3ff, 0x5, 0x1ff, 0x3, 0xbd, 0xfffffff8, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, 0x38, 0xd, 0x6, 0xfffffffa, 0x6, 0xf, 0x25, 0x2, 0x0, 0x4, 0x9, 0x2896, 0x4, 0x3, 0x3, 0x7, 0x0, 0xb, 0x9, 0xa9, 0x400, 0x8001, 0x8, 0x2, 0xc6ab, 0x18, 0x8, 0x2, 0x0, 0x7, 0x1, 0x6, 0x5, 0x400, 0x3, 0x3, 0x4, 0x1, 0x2, 0x2, 0x7, 0x8, 0x0, 0x7, 0x7, 0x0, 0xffffff64, 0x5, 0x2, 0x6, 0x3, 0x5, 0xc7, 0x7, 0x212, 0x7, 0x5, 0xe19b, 0x7, 0x5, 0x67, 0xa, 0xf60b, 0x1, 0x1, 0x4, 0x98a, 0x6, 0x10, 0x2eb, 0x2f7e, 0x0, 0x4, 0x1d21, 0x9, 0x80, 0xb, 0x1ff, 0xfffffff9, 0x0, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0x20000000, 0x8, 0xa, 0x3ff, 0x0, 0x7, 0x68b32c17, 0x339, 0x2, 0xc, 0x5, 0x40, 0x2d, 0x1ff, 0x91, 0x7f, 0x4, 0x7, 0x1, 0x2, 0x3b1, 0x3, 0x2, 0x3, 0x8001, 0x7, 0xfffffffc, 0x8, 0x0, 0x401c, 0x7, 0x200, 0x8, 0x5, 0xab83, 0x73, 0x8001, 0x1, 0x2, 0x8, 0x7, 0x3, 0x4, 0x8, 0x1, 0x74e, 0x88, 0x198, 0x20, 0x2, 0x328, 0xe5, 0x7, 0x9, 0x86a, 0x3, 0x1, 0x2b, 0xfffffffb, 0x6, 0xa, 0xd2e, 0x80000000, 0x7, 0xfffffff8, 0x0, 0x8, 0x569, 0xa, 0x100, 0xac3, 0x5, 0x6, 0xff, 0xe, 0x81, 0xca, 0xfffffffe, 0x7, 0x8, 0x0, 0x7, 0x5, 0x5, 0x4, 0xe, 0x5, 0x9, 0x7fffffff, 0xfffffffe, 0x1, 0x3de, 0x2, 0x1, 0xfb, 0x2, 0xfffffff8, 0x3ff, 0x8, 0x3, 0x8, 0x31eb, 0x7, 0x5, 0x8, 0x4a0000, 0x0, 0x2, 0xb0, 0x4, 0x8000, 0x80, 0xd05, 0x9, 0x5, 0x8, 0x80, 0x2, 0x5, 0xb, 0x7, 0x0, 0x5, 0x6af, 0x4, 0x8, 0x3, 0x580, 0x7, 0x9, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7ff, 0x4, 0xfffffff8, 0x9, 0x2, 0x3, 0x77ae, 0x1, 0x91c, 0x5, 0x6, 0x3, 0x0, 0x80000000, 0x21000000, 0xfffffffa, 0x3ff, 0xb3, 0x4f8c, 0x4, 0x127, 0x1, 0x2bfe1798, 0x10000, 0x1, 0x44c, 0x0, 0x4, 0x895, 0x8, 0xff9, 0xfffffff7, 0x3, 0x2c, 0x3ff, 0x6, 0x8, 0x7, 0x1, 0x1000, 0xc530, 0x5, 0x8f, 0x0, 0x6, 0x8000, 0x400, 0x7, 0x6, 0x9, 0x1, 0x5f66, 0x10001, 0x1, 0x9, 0x8000, 0x5, 0x80000001, 0x81, 0x6, 0x8, 0x75f, 0xab8, 0x4, 0x4, 0xe0b0, 0xffff, 0xf, 0x2, 0x4, 0x9, 0xffffd40a, 0x2, 0x9, 0x6, 0x2, 0xfffffa86, 0x8, 0x6, 0x101, 0x3, 0xa000000, 0x8, 0x7fffffff, 0x2, 0x6, 0x4, 0x101, 0x1, 0x200, 0x800, 0x9, 0x2, 0x3, 0xf5, 0xb30, 0x9, 0x2, 0x1, 0xd, 0x7fffffff, 0x7, 0x8, 0x0, 0x5, 0x4, 0x1, 0x462, 0x80000001, 0x5, 0x7, 0x3e2b, 0x4, 0x7ff, 0x2, 0x9, 0x3ff, 0x9, 0x8, 0x6, 0x2, 0x1, 0x100, 0xa, 0x5, 0x800, 0x80000000, 0x40, 0x1, 0x10000, 0xffffcd67, 0x5af, 0x3, 0x8, 0x7, 0x0, 0x227, 0x0, 0x8, 0x0, 0x1c18, 0x6, 0x7, 0x0, 0x9, 0xff, 0x6, 0x101, 0x7fff, 0x1, 0x101, 0xd7b, 0x2, 0x6, 0x81, 0x1, 0x10001, 0x3, 0x2, 0x2, 0xbfc8, 0x1, 0x101, 0x23b8, 0x7f, 0x8, 0xad9, 0x8, 0x4, 0xd31, 0x3a64ec4a, 0xffffffcf, 0x81, 0x7, 0x0, 0x2, 0x3, 0x0, 0x9, 0x4af7e4bc, 0x7, 0x4, 0x2, 0x2f8, 0x4, 0x4, 0x1, 0x1ff, 0x1c7, 0x80000000, 0xd, 0x8, 0x0, 0x7, 0x1, 0x3, 0x6, 0x10000, 0x89e7, 0xa, 0x6d, 0x4, 0x9, 0x6, 0xf, 0x4, 0x706, 0x800, 0xfffffff2, 0x7, 0x7, 0x5, 0x6, 0x1, 0x91, 0x1f, 0x0, 0xb, 0x3, 0x8, 0x42, 0xd3, 0x0, 0x0, 0xfffffff4, 0x1, 0x3e, 0x7923, 0x7, 0x7, 0x101, 0x7, 0x9a0, 0x9, 0xbff, 0xf26, 0x800, 0xe00000, 0x7, 0x171, 0x5, 0xa7, 0x23, 0x400, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x5, 0x10, 0x6, 0x7, 0x5, 0x4, 0x1, 0x2, 0x0, 0x3, 0x75, 0x3, 0x5, 0xdec3, 0x7, 0x4, 0xfffffff9, 0x3, 0x6, 0x74b, 0xb126, 0xffffffff, 0xbe25, 0x7, 0x9, 0x9a, 0x6, 0x1800000, 0x76f, 0x4, 0x2, 0x4, 0x1, 0x3, 0xfffffff5, 0x7, 0x6, 0xc, 0x1ff, 0x6a, 0xe3, 0x390e, 0x1, 0x8, 0x7fffffff, 0x47, 0x3, 0x24dc, 0x80000001, 0x3ff, 0xfc, 0x0, 0xfffffffa, 0x4, 0xba, 0x3, 0x3, 0x3ff, 0x3, 0x5, 0xf72, 0x5, 0x8, 0x1258dd22, 0x1, 0x4, 0x88, 0xb5e, 0x4, 0x0, 0x3, 0x9, 0x101, 0xff, 0x3, 0x4, 0x39aa, 0xfffffffd, 0x408, 0x9fb0, 0x400, 0x3, 0xfffffff9, 0x7, 0x8, 0x4, 0xafdb, 0x8001, 0x9, 0x0, 0x2a, 0x40, 0x2e77, 0x0, 0x8, 0x7, 0x6, 0x1, 0x81, 0x10, 0x40, 0x1, 0xef, 0x1, 0x9, 0xc, 0xdd5a, 0x0, 0xffff, 0x2, 0x1000, 0x3, 0x1000, 0x3, 0x4, 0x800, 0xfffffffa, 0x800, 0x7, 0x4, 0xfffffffe, 0xfffffff8, 0x81, 0x3ff, 0x7f, 0x4, 0x7, 0xffffffff, 0x0, 0x401, 0xa, 0x468, 0x1, 0xfffffff9, 0x5, 0x7, 0x8000, 0x0, 0x8, 0x5, 0x6, 0x5, 0x2, 0x2, 0x0, 0x1, 0xae9, 0xb07b, 0x13d2, 0x4, 0xfffffffe, 0xa1ef, 0x9c76, 0xf, 0x2, 0x6865e652, 0x10001, 0xfffffff8, 0xcb93, 0x1, 0x2df8, 0x2, 0x3, 0x8, 0x7f, 0x43c2, 0x9, 0x24, 0x2, 0x7, 0x3ff, 0x0, 0x5, 0xa000, 0x964, 0x1, 0x8001, 0x1, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x8000, 0x1, 0x100, 0x800, 0x7, 0x2d0f, 0x6ea, 0x1, 0x34cd, 0x8, 0x8, 0x9, 0x10000, 0x7, 0x9, 0x5, 0xfffffffa, 0x9, 0x81, 0x11, 0x2, 0x10000, 0x18, 0xffffffff, 0x6, 0x200, 0x8000, 0xad, 0x9, 0x7fffffff, 0xa5, 0x101, 0x0, 0x7, 0x10, 0xa3, 0x7fffffff, 0x5, 0x2, 0x200, 0x8001, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x7, 0x78e7df4e, 0x5, 0x0, 0x3, 0x0, 0x1, 0x1, 0xa, 0x0, 0x0, 0x75, 0x101, 0x69cba428, 0xfff, 0x9, 0x9, 0xfffffc00, 0x1, 0x2, 0xf, 0x6, 0x8, 0x4, 0xc, 0x2, 0x37e, 0x14000, 0x3, 0x8000, 0x0, 0x0, 0x77ef, 0x800, 0x8, 0xffffffb2, 0xc74, 0x2, 0xc, 0x9, 0xfffff000, 0x7fffffff, 0xffffffff, 0x5, 0x1, 0x1000, 0x1000, 0x10, 0x9, 0x9, 0x1ff, 0x7, 0xfffffff9, 0x3, 0x80000000, 0x7, 0x40, 0x9, 0x1, 0x7, 0x0, 0x352, 0x0, 0xa, 0x3ff, 0x7, 0x2, 0x200001, 0x10001, 0xfffffff7, 0x0, 0x7, 0x8, 0x4, 0x9, 0x1, 0xe3, 0x5e48, 0x7, 0xffffffff, 0x8001, 0x805, 0xfffffff7, 0x9, 0x5, 0x3, 0x9c, 0x1, 0x2c, 0x3, 0x9, 0x7f, 0x35, 0x8d, 0x0, 0xffff, 0x6, 0x81, 0xdae, 0x8, 0x0, 0x8, 0x9, 0x0, 0x7, 0xed9a, 0x800, 0x8, 0x8, 0x8, 0xecc, 0x4622, 0xffffffc0, 0x1, 0x1, 0x1000, 0x101, 0x6, 0x6, 0xfff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x9, 0xf, 0x2, 0x5, 0x0, 0xc, 0x1cd30080, 0x9, 0xf, 0xf5b, 0x9, 0x54, 0xfffffffe, 0x3, 0xbc, 0xe]})
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

583.703539ms ago: executing program 0 (id=2089):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0)
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xbc, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)={0x30, 0x30, 0x30}}, 0x40}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x3, 0x2, 0x16}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/4096, 0x1000, 0x0, 0x24}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0xffffffff}, {0xa, 0x0, 0x5, @mcast1}}}, 0x48)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x88c0}, 0xc014)
syz_open_dev$dri(0x0, 0x0, 0x2)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4694e30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x30)

472.680081ms ago: executing program 2 (id=2090):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0)

0s ago: executing program 4 (id=2091):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0)
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xbc, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)={0x30, 0x30, 0x30}}, 0x40}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x3, 0x2, 0x16}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/4096, 0x1000, 0x0, 0x24}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0xffffffff}, {0xa, 0x0, 0x5, @mcast1}}}, 0x48)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x88c0}, 0xc014)
timer_delete(0x0)

kernel console output (not intermixed with test programs):

ep0 maxpacket: 8
[  349.988950][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  350.007759][   T43] usb 4-1: config 0 has no interfaces?
[  350.047282][T12396] ceph: No mds server is up or the cluster is laggy
[  350.198165][   T43] usb 4-1: config 0 has no interfaces?
[  350.212564][   T43] usb 4-1: config 0 has no interfaces?
[  350.286466][   T11] libceph: connect (1)[c::]:6789 error -101
[  350.302758][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  350.311622][T12413] netlink: 68 bytes leftover after parsing attributes in process `syz.2.759'.
[  350.338247][   T43] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  350.576832][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.586162][   T43] usb 4-1: Product: syz
[  350.590408][   T43] usb 4-1: Manufacturer: syz
[  350.595199][   T43] usb 4-1: SerialNumber: syz
[  350.613976][   T43] usb 4-1: config 0 descriptor??
[  350.621938][   T11] libceph: connect (1)[c::]:6789 error -101
[  350.636754][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  350.871593][T12407] ceph: No mds server is up or the cluster is laggy
[  351.104564][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  351.296064][   T11] libceph: connect (1)[c::]:6789 error -101
[  351.311536][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  351.618356][   T43] usb 4-1: USB disconnect, device number 5
[  352.647718][T12432] trusted_key: encrypted_key: key user:syz not found
[  353.042041][T12438] netlink: 68 bytes leftover after parsing attributes in process `syz.0.770'.
[  353.065700][T12438] ieee802154 phy0 wpan0: encryption failed: -22
[  353.134923][T12439] lo speed is unknown, defaulting to 1000
[  353.159757][T12440] trusted_key: encrypted_key: insufficient parameters specified
[  353.167851][T12439] lo speed is unknown, defaulting to 1000
[  353.329529][T12439] lo speed is unknown, defaulting to 1000
[  353.360729][T12439] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  353.599324][T12439] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98
[  353.646454][T12439] lo speed is unknown, defaulting to 1000
[  354.252969][ T5880] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  354.319238][T12439] lo speed is unknown, defaulting to 1000
[  354.348117][T12439] lo speed is unknown, defaulting to 1000
[  354.382757][T12439] lo speed is unknown, defaulting to 1000
[  354.405842][T12439] lo speed is unknown, defaulting to 1000
[  354.453507][ T5880] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.483992][ T5880] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  354.510160][ T5880] usb 1-1: config 0 interface 0 has no altsetting 0
[  354.528011][ T5880] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  354.545913][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.569673][ T5880] usb 1-1: config 0 descriptor??
[  355.394599][   T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  355.561454][   T11] usb 2-1: Using ep0 maxpacket: 8
[  355.572458][T12466] trusted_key: encrypted_key: key user:syz not found
[  355.572568][   T11] usb 2-1: config 0 has no interfaces?
[  355.653449][T12468] overlayfs: failed to resolve './file1': -2
[  356.135488][T12469] netlink: 68 bytes leftover after parsing attributes in process `syz.4.777'.
[  356.261061][   T11] usb 2-1: config 0 has no interfaces?
[  356.277745][   T11] usb 2-1: config 0 has no interfaces?
[  356.288585][   T11] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  356.306557][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.328460][   T11] usb 2-1: Product: syz
[  356.350310][   T11] usb 2-1: Manufacturer: syz
[  356.511419][   T11] usb 2-1: SerialNumber: syz
[  356.511533][ T5880] usbhid 1-1:0.0: can't add hid device: -71
[  356.539458][   T11] usb 2-1: config 0 descriptor??
[  356.567831][ T5880] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  356.665082][ T5880] usb 1-1: USB disconnect, device number 6
[  356.680334][T12475] netlink: 68 bytes leftover after parsing attributes in process `syz.2.781'.
[  356.724894][T12475] ieee802154 phy0 wpan0: encryption failed: -22
[  356.761123][   T11] usb 2-1: USB disconnect, device number 2
[  357.025239][T12486] hub 8-0:1.0: USB hub found
[  357.039262][T12486] hub 8-0:1.0: 1 port detected
[  357.664483][T12494] trusted_key: encrypted_key: insufficient parameters specified
[  358.517556][T12501] trusted_key: encrypted_key: key user:syz not found
[  359.432283][T12510] trusted_key: encrypted_key: key user:syz not found
[  361.471147][T12514] overlayfs: failed to resolve './file1': -2
[  362.027029][T12523] netlink: 68 bytes leftover after parsing attributes in process `syz.2.795'.
[  362.040013][ T5883] libceph: connect (1)[c::]:6789 error -101
[  362.052716][T12523] ieee802154 phy0 wpan0: encryption failed: -22
[  362.059215][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  362.069592][T12529] netlink: 68 bytes leftover after parsing attributes in process `syz.3.794'.
[  362.236771][T12534] netlink: 56 bytes leftover after parsing attributes in process `syz.1.799'.
[  362.343057][   T43] libceph: connect (1)[c::]:6789 error -101
[  362.349155][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  362.357809][ T5883] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  362.573616][T12525] ceph: No mds server is up or the cluster is laggy
[  362.651967][ T5883] usb 5-1: Using ep0 maxpacket: 8
[  362.668041][ T5883] usb 5-1: config 0 has no interfaces?
[  362.686249][ T5883] usb 5-1: config 0 has no interfaces?
[  362.722034][ T5883] usb 5-1: config 0 has no interfaces?
[  362.748004][ T5883] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  362.796451][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.931489][ T5883] usb 5-1: Product: syz
[  362.938650][ T5883] usb 5-1: Manufacturer: syz
[  362.945967][ T5883] usb 5-1: SerialNumber: syz
[  362.972198][ T5883] usb 5-1: config 0 descriptor??
[  364.671461][T12556] trusted_key: encrypted_key: key user:syz not found
[  365.057778][   T11] usb 5-1: USB disconnect, device number 2
[  365.392652][T12562] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  366.387229][T12569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.810'.
[  366.451775][T12569] ieee802154 phy0 wpan0: encryption failed: -22
[  366.902189][T12582] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  367.229755][ T5877] libceph: connect (1)[c::]:6789 error -101
[  367.255861][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  367.356046][T12587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.813'.
[  367.542009][T12583] ceph: No mds server is up or the cluster is laggy
[  367.641816][   T11] libceph: connect (1)[c::]:6789 error -101
[  367.709127][T12588] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  367.797822][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  372.280852][T12640] netlink: 68 bytes leftover after parsing attributes in process `syz.1.829'.
[  372.429000][   T11] libceph: connect (1)[c::]:6789 error -101
[  372.435814][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  372.775667][T12638] ceph: No mds server is up or the cluster is laggy
[  372.821636][T12645] trusted_key: encrypted_key: key user:syz not found
[  372.901874][   T11] libceph: connect (1)[c::]:6789 error -101
[  372.970588][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  375.048340][T12666] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  376.917411][T12678] sctp: failed to load transform for md5: -2
[  376.954587][T12676] input: syz1 as /devices/virtual/input/input30
[  377.293085][T12690] trusted_key: encrypted_key: key user:syz not found
[  378.159609][T12692] input: syz0 as /devices/virtual/input/input31
[  378.423305][T12700] netlink: 68 bytes leftover after parsing attributes in process `syz.3.845'.
[  378.579614][ T5880] libceph: connect (1)[c::]:6789 error -101
[  378.607355][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  378.964163][ T5883] libceph: connect (1)[c::]:6789 error -101
[  379.921801][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  379.983375][T12698] ceph: No mds server is up or the cluster is laggy
[  380.114574][T12713] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  381.991472][ T5883] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  382.325466][T12735] trusted_key: encrypted_key: key user:syz not found
[  382.833078][ T5883] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.995609][ T5883] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  384.773405][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0
[  384.780161][ T5883] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  386.746026][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.768275][ T5883] usb 2-1: config 0 descriptor??
[  386.781927][ T5883] usb 2-1: can't set config #0, error -71
[  386.797105][ T5883] usb 2-1: USB disconnect, device number 3
[  386.941060][T12746] sctp: failed to load transform for md5: -2
[  388.053729][T12761] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  388.342491][T12766] netlink: 68 bytes leftover after parsing attributes in process `syz.4.861'.
[  388.446103][ T5883] libceph: connect (1)[c::]:6789 error -101
[  388.471611][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  388.501110][T12764] ceph: No mds server is up or the cluster is laggy
[  388.759092][ T5883] libceph: connect (1)[c::]:6789 error -101
[  388.911017][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  391.413856][T13334] input: syz1 as /devices/virtual/input/input32
[  391.828364][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  391.835287][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  395.035912][T13361] sctp: failed to load transform for md5: -2
[  395.246871][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.876'.
[  395.415195][ T5884] libceph: connect (1)[c::]:6789 error -101
[  395.423381][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  395.568738][T13364] ceph: No mds server is up or the cluster is laggy
[  397.713742][T13396] trusted_key: encrypted_key: insufficient parameters specified
[  398.323071][T13404] input: syz1 as /devices/virtual/input/input33
[  399.630223][T13414] tipc: Started in network mode
[  399.635637][T13414] tipc: Node identity d2a228d87083, cluster identity 4711
[  399.644628][T13414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.671048][T13414] syzkaller0: entered promiscuous mode
[  399.676848][T13414] syzkaller0: entered allmulticast mode
[  400.219489][T13409] tipc: Resetting bearer <eth:syzkaller0>
[  400.305861][T13409] tipc: Disabling bearer <eth:syzkaller0>
[  400.983757][ T5884] libceph: connect (1)[c::]:6789 error -101
[  400.990767][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  401.505532][ T5884] libceph: connect (1)[c::]:6789 error -101
[  401.551782][T13426] ceph: No mds server is up or the cluster is laggy
[  401.694882][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  401.732681][ T5884] libceph: connect (1)[c::]:6789 error -101
[  401.738771][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  401.746929][T13438] trusted_key: encrypted_key: key user:syz not found
[  401.763775][T13442] netlink: 68 bytes leftover after parsing attributes in process `syz.1.891'.
[  402.521471][T13434] ceph: No mds server is up or the cluster is laggy
[  402.533864][   T43] libceph: connect (1)[c::]:6789 error -101
[  402.723106][T13462] trusted_key: encrypted_key: insufficient parameters specified
[  403.022489][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  403.113810][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  403.675668][T13473] hub 8-0:1.0: USB hub found
[  403.680634][T13473] hub 8-0:1.0: 1 port detected
[  403.745446][T13439] sctp: failed to load transform for md5: -2
[  404.534759][T13472] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  405.424382][T13484] input: syz1 as /devices/virtual/input/input34
[  406.222661][T13498] gtp0: entered promiscuous mode
[  406.227956][T13498] gtp0: entered allmulticast mode
[  408.801692][ T5883] libceph: connect (1)[c::]:6789 error -101
[  408.807715][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  408.849881][T13520] netlink: 68 bytes leftover after parsing attributes in process `syz.2.908'.
[  409.074951][ T5883] libceph: connect (1)[c::]:6789 error -101
[  409.081017][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  409.539495][T13519] ceph: No mds server is up or the cluster is laggy
[  409.608150][ T5883] libceph: connect (1)[c::]:6789 error -101
[  409.703848][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  410.187168][T13541] hub 8-0:1.0: USB hub found
[  410.192222][T13541] hub 8-0:1.0: 1 port detected
[  410.994619][T13554] input: syz1 as /devices/virtual/input/input35
[  414.624733][T13588] netlink: 68 bytes leftover after parsing attributes in process `syz.2.921'.
[  414.853642][T13570] cgroup: fork rejected by pids controller in /syz4
[  415.265021][T13572] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  415.411640][T13918] fuse: Bad value for 'fd'
[  416.517498][T13933] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  418.608936][T13955] input: syz1 as /devices/virtual/input/input36
[  419.522085][T13959] netlink: 56 bytes leftover after parsing attributes in process `syz.4.933'.
[  420.921481][T13973] netlink: 'syz.3.935': attribute type 1 has an invalid length.
[  421.725453][ T5883] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  423.489696][ T5883] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.521578][ T5883] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  423.535033][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0
[  423.553220][ T5883] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  423.567808][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.617951][ T5883] usb 5-1: config 0 descriptor??
[  423.690106][T13986] xt_SECMARK: unable to map security context 'unconfined'
[  424.004607][ T5883] usbhid 5-1:0.0: can't add hid device: -71
[  424.010645][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  424.582079][ T5883] usb 5-1: USB disconnect, device number 3
[  426.600320][T14009] netlink: 56 bytes leftover after parsing attributes in process `syz.4.946'.
[  427.342775][T14022] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  427.505165][T14024] netlink: 'syz.4.949': attribute type 1 has an invalid length.
[  429.511550][T14032] sctp: failed to load transform for md5: -2
[  430.626302][T14050] hub 8-0:1.0: USB hub found
[  430.631454][T14050] hub 8-0:1.0: 1 port detected
[  430.960669][T14054] netlink: 48 bytes leftover after parsing attributes in process `syz.3.959'.
[  431.641168][T14066] netlink: 'syz.0.964': attribute type 1 has an invalid length.
[  431.685364][T14062] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  432.128794][T14076] trusted_key: encrypted_key: key user:syz not found
[  434.345815][T14095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.972'.
[  434.529467][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[  434.566157][T14096] netlink: 'syz.1.971': attribute type 5 has an invalid length.
[  435.137213][T14107] hub 8-0:1.0: USB hub found
[  435.143020][T14107] hub 8-0:1.0: 1 port detected
[  435.176797][T14096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.971'.
[  435.508967][T14096] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  435.584298][T14096] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  435.644486][T14096] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  435.884842][T14096] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  436.068841][T14096] geneve2: entered promiscuous mode
[  437.061393][T14096] geneve2: entered allmulticast mode
[  437.131032][T14133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.983'.
[  437.175980][T14134] trusted_key: encrypted_key: key user:syz not found
[  437.694197][ T5884] libceph: connect (1)[c::]:6789 error -101
[  437.714465][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  437.972807][ T5884] libceph: connect (1)[c::]:6789 error -101
[  437.978922][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  438.413344][T14138] ceph: No mds server is up or the cluster is laggy
[  439.451618][ T5883] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  439.859764][ T5883] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.002528][ T5883] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  440.115024][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0
[  440.163795][ T5883] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  440.211356][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.265956][ T5883] usb 1-1: config 0 descriptor??
[  440.953487][T14172] input: syz1 as /devices/virtual/input/input37
[  441.851709][ T5883] usbhid 1-1:0.0: can't add hid device: -71
[  441.982143][ T5883] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  441.993266][ T5883] usb 1-1: USB disconnect, device number 7
[  442.662046][T14179] netlink: 48 bytes leftover after parsing attributes in process `syz.2.997'.
[  442.986737][T14188] trusted_key: encrypted_key: key user:syz not found
[  443.719951][T14202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1002'.
[  445.364868][ T5877] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  445.574686][T14214] xt_SECMARK: unable to map security context 'unconfined'
[  445.664987][ T5877] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  445.676128][ T5877] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  445.754003][ T5877] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  445.855347][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.863038][T14230] input: syz1 as /devices/virtual/input/input38
[  450.061465][ T5877] usb 5-1: can't set config #27, error -71
[  450.101008][ T5877] usb 5-1: USB disconnect, device number 4
[  450.473571][T14243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1012'.
[  450.551716][T14244] trusted_key: encrypted_key: key user:syz not found
[  452.088682][T14250] ceph: No mds server is up or the cluster is laggy
[  452.102619][ T5877] libceph: connect (1)[c::]:6789 error -101
[  452.108778][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  453.266499][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  453.280195][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  453.668006][ T5826] Bluetooth: hci4: command 0x0406 tx timeout
[  454.022862][T14273] input: syz1 as /devices/virtual/input/input39
[  454.112990][T14283] lo speed is unknown, defaulting to 1000
[  454.127941][T14283] lo speed is unknown, defaulting to 1000
[  454.139146][T14283] lo speed is unknown, defaulting to 1000
[  454.743714][T14283] infiniband syz2: set active
[  454.748615][T14283] infiniband syz2: added lo
[  454.824083][   T43] lo speed is unknown, defaulting to 1000
[  454.879545][T14283] RDS/IB: syz2: added
[  454.884219][T14283] smc: adding ib device syz2 with port count 1
[  454.890538][T14283] smc:    ib device syz2 port 1 has pnetid 
[  454.898553][T14283] lo speed is unknown, defaulting to 1000
[  454.955397][ T5883] lo speed is unknown, defaulting to 1000
[  455.077448][T14283] lo speed is unknown, defaulting to 1000
[  455.205942][T14283] lo speed is unknown, defaulting to 1000
[  455.333127][T14283] lo speed is unknown, defaulting to 1000
[  455.459822][T14283] lo speed is unknown, defaulting to 1000
[  456.024090][T14296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1028'.
[  459.103380][T14321] trusted_key: encrypted_key: key user:syz not found
[  459.438006][T14324] netlink: 'syz.0.1035': attribute type 275 has an invalid length.
[  470.362578][T14348] ceph: No mds server is up or the cluster is laggy
[  470.376781][   T43] libceph: connect (1)[c::]:6789 error -101
[  470.390823][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  471.762706][ T5884] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  471.989925][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.039920][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  472.115440][ T5884] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  472.170235][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.229382][ T5884] usb 1-1: config 0 descriptor??
[  472.674867][ T5884] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  472.882544][ T5884] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  472.920182][ T5884] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  473.306937][T14388] trusted_key: encrypted_key: key user:syz not found
[  473.345263][T14389] trusted_key: encrypted_key: insufficient parameters specified
[  476.636408][ T5956] libceph: connect (1)[c::]:6789 error -101
[  476.685417][ T5956] libceph: mon0 (1)[c::]:6789 connect error
[  476.968235][ T5884] cp2112 0003:10C4:EA90.0001: error requesting version
[  476.994061][ T5956] libceph: connect (1)[c::]:6789 error -101
[  477.008591][ T5956] libceph: mon0 (1)[c::]:6789 connect error
[  477.014958][ T5884] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71
[  477.125127][T14406] ceph: No mds server is up or the cluster is laggy
[  477.141588][ T5884] usb 1-1: USB disconnect, device number 8
[  480.683377][T14458] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  483.098098][T14468] trusted_key: encrypted_key: key user:syz not found
[  483.113921][ T5884] libceph: connect (1)[c::]:6789 error -101
[  483.151410][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  483.428634][T14467] ceph: No mds server is up or the cluster is laggy
[  483.436288][ T5884] libceph: connect (1)[c::]:6789 error -101
[  483.451826][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  487.673768][ T5956] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  488.010543][T14522] hub 8-0:1.0: USB hub found
[  488.019045][T14522] hub 8-0:1.0: 1 port detected
[  488.221671][T14524] trusted_key: encrypted_key: insufficient parameters specified
[  488.791580][ T5956] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.819702][ T5956] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  489.036108][ T5956] usb 3-1: config 0 interface 0 has no altsetting 0
[  489.071465][ T5956] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  489.108244][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.369000][ T5956] usb 3-1: config 0 descriptor??
[  489.381537][ T5956] usb 3-1: can't set config #0, error -71
[  489.386585][ T5956] usb 3-1: USB disconnect, device number 9
[  489.869210][ T5884] libceph: connect (1)[c::]:6789 error -101
[  489.869388][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  489.949224][T14529] ceph: No mds server is up or the cluster is laggy
[  490.150572][T14542] trusted_key: encrypted_key: key user:syz not found
[  493.271826][T14575] hub 8-0:1.0: USB hub found
[  493.284347][T14575] hub 8-0:1.0: 1 port detected
[  495.283522][T14589] rdma_rxe: rxe_newlink: failed to add lo
[  497.999905][T14604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  498.017612][T14604] syzkaller0: entered promiscuous mode
[  498.024681][T14604] syzkaller0: entered allmulticast mode
[  498.940993][T14602] tipc: Resetting bearer <eth:syzkaller0>
[  498.989064][T14602] tipc: Disabling bearer <eth:syzkaller0>
[  499.266561][T14606] trusted_key: encrypted_key: key user:syz not found
[  500.001224][T14612] fuse: Bad value for 'group_id'
[  500.140977][T14612] fuse: Bad value for 'group_id'
[  501.053392][T14628] trusted_key: encrypted_key: key user:syz not found
[  503.460774][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'.
[  503.586507][T14643] netlink: 'syz.0.1116': attribute type 5 has an invalid length.
[  503.879618][T14643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1116'.
[  503.937216][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  503.972051][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  503.988444][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  504.042036][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  504.050425][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  504.645009][T14643] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  504.705372][T14643] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  504.772279][T14643] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  504.830749][T14643] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  504.891752][T14643] geneve2: entered promiscuous mode
[  504.918238][T14643] geneve2: entered allmulticast mode
[  505.148824][T14659] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  505.248460][T14648] lo speed is unknown, defaulting to 1000
[  505.273504][T14648] lo speed is unknown, defaulting to 1000
[  505.589098][ T3478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.738194][T14661] trusted_key: encrypted_key: key user:syz not found
[  506.046970][ T3478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.144203][ T5826] Bluetooth: hci5: command tx timeout
[  507.025952][T14667] fuse: Bad value for 'group_id'
[  507.031053][T14667] fuse: Bad value for 'group_id'
[  507.053158][ T3478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.403142][ T3478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.914056][T14684] hub 8-0:1.0: USB hub found
[  507.919365][T14684] hub 8-0:1.0: 1 port detected
[  508.368811][ T5826] Bluetooth: hci5: command tx timeout
[  508.877802][   T43] libceph: connect (1)[c::]:6789 error -101
[  509.210402][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  509.231987][T14686] ceph: No mds server is up or the cluster is laggy
[  509.650351][T14648] chnl_net:caif_netlink_parms(): no params data found
[  510.384334][   T51] Bluetooth: hci5: command tx timeout
[  510.707380][ T3478] team0: left allmulticast mode
[  510.712709][ T3478] team_slave_0: left allmulticast mode
[  510.744421][ T3478] team_slave_1: left allmulticast mode
[  511.340789][T14713] trusted_key: encrypted_key: key user:syz not found
[  511.345227][ T3478] team0: left promiscuous mode
[  511.361797][ T3478] team_slave_0: left promiscuous mode
[  511.367730][ T3478] team_slave_1: left promiscuous mode
[  511.375505][ T3478] bridge0: port 3(team0) entered disabled state
[  511.393174][ T3478] bridge_slave_1: left allmulticast mode
[  511.399162][ T3478] bridge_slave_1: left promiscuous mode
[  511.406058][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.418250][ T3478] bridge_slave_0: left allmulticast mode
[  511.424340][ T3478] bridge_slave_0: left promiscuous mode
[  511.431726][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.452254][ T5956] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  511.744883][ T5956] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.769528][ T5956] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  511.809418][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0
[  511.829691][ T5956] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  511.863710][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.896572][ T5956] usb 5-1: config 0 descriptor??
[  512.446848][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  512.461384][   T51] Bluetooth: hci5: command 0x0419 tx timeout
[  512.521243][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  512.604163][ T3478] bond0 (unregistering): Released all slaves
[  512.791170][T14723] fuse: Bad value for 'group_id'
[  512.858096][T14723] fuse: Bad value for 'group_id'
[  513.711409][ T5956] usbhid 5-1:0.0: can't add hid device: -71
[  513.717445][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  513.748034][ T5956] usb 5-1: USB disconnect, device number 5
[  513.873897][T14648] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.190816][T14648] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.239063][T14746] hub 8-0:1.0: USB hub found
[  514.244928][T14746] hub 8-0:1.0: 1 port detected
[  514.780872][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  514.795461][T14734] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  514.806173][ T5826] Bluetooth: hci5: command 0x0419 tx timeout
[  514.822768][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  514.841662][T14648] bridge_slave_0: entered allmulticast mode
[  514.849451][T14648] bridge_slave_0: entered promiscuous mode
[  514.872033][T14648] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.879215][T14648] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.961737][T14648] bridge_slave_1: entered allmulticast mode
[  515.010601][T14648] bridge_slave_1: entered promiscuous mode
[  516.053547][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'.
[  516.250732][T14759] netlink: 'syz.1.1139': attribute type 5 has an invalid length.
[  516.392486][T14759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1139'.
[  516.541697][   T43] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  516.730199][T14648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.823168][T14648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.156160][   T43] usb 1-1: config 0 has no interfaces?
[  517.236077][T14648] team0: Port device team_slave_0 added
[  517.254566][   T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  517.527282][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.702587][   T43] usb 1-1: Product: syz
[  517.707078][   T43] usb 1-1: Manufacturer: syz
[  517.717988][   T43] usb 1-1: SerialNumber: syz
[  517.761501][T14648] team0: Port device team_slave_1 added
[  517.796246][   T43] usb 1-1: config 0 descriptor??
[  518.638797][ T3478] hsr_slave_0: left promiscuous mode
[  518.658187][ T3478] hsr_slave_1: left promiscuous mode
[  518.685475][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.717500][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.853947][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.964554][T14788] trusted_key: encrypted_key: key user:syz not found
[  519.432575][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  519.695390][ T3478] veth1_macvtap: left promiscuous mode
[  519.736758][ T3478] veth0_macvtap: left promiscuous mode
[  519.785203][ T3478] veth1_vlan: left promiscuous mode
[  519.814103][ T3478] veth0_vlan: left promiscuous mode
[  519.874322][   T11] usb 1-1: USB disconnect, device number 9
[  521.257920][T14815] hub 8-0:1.0: USB hub found
[  521.266659][T14815] hub 8-0:1.0: 1 port detected
[  522.174956][T14823] trusted_key: encrypted_key: key user:syz not found
[  522.733479][T14828] input: syz1 as /devices/virtual/input/input40
[  523.645414][T14830] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  524.224342][T14838] trusted_key: encrypted_key: key user:syz not found
[  525.905826][   T43] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  526.743473][   T43] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.758844][   T43] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  527.262900][   T43] usb 2-1: config 0 interface 0 has no altsetting 0
[  527.269733][   T43] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  527.278876][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.611770][ T5880] libceph: connect (1)[c::]:6789 error -101
[  527.620244][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  527.675775][T14849] ceph: No mds server is up or the cluster is laggy
[  527.706338][   T43] usb 2-1: config 0 descriptor??
[  527.748868][   T43] usb 2-1: can't set config #0, error -71
[  527.765238][   T43] usb 2-1: USB disconnect, device number 4
[  528.833896][T14866] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  528.959171][ T3478] team0 (unregistering): Port device team_slave_1 removed
[  529.923037][T14874] input: syz1 as /devices/virtual/input/input41
[  530.151730][ T3478] team0 (unregistering): Port device team_slave_0 removed
[  530.351464][  T979] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  530.548509][  T979] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.580458][  T979] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  530.629952][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  530.660553][  T979] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  530.698471][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.708327][T14887] fuse: Bad value for 'fd'
[  530.770047][  T979] usb 2-1: config 0 descriptor??
[  530.940871][T14889] trusted_key: encrypted_key: insufficient parameters specified
[  531.291675][T14893] trusted_key: encrypted_key: key user:syz not found
[  532.168108][  T979] usbhid 2-1:0.0: can't add hid device: -71
[  532.191419][  T979] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  532.202495][  T979] usb 2-1: USB disconnect, device number 5
[  532.398804][T14898] fuse: Bad value for 'user_id'
[  532.410361][T14898] fuse: Bad value for 'user_id'
[  532.480581][T14899] trusted_key: encrypted_key: key user:syz not found
[  533.269875][T14648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  533.287953][T14648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.334964][T14648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.046901][T14648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.201238][T14648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.450772][T14648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.752959][T14648] hsr_slave_0: entered promiscuous mode
[  535.759614][T14648] hsr_slave_1: entered promiscuous mode
[  535.802298][T14648] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  535.873336][T14648] Cannot create hsr debugfs directory
[  537.080913][T14925] input: syz1 as /devices/virtual/input/input42
[  537.191104][T14938] overlayfs: failed to resolve './file0': -2
[  538.725131][T14953] syz.4.1184 uses obsolete (PF_INET,SOCK_PACKET)
[  540.491181][T14972] trusted_key: encrypted_key: insufficient parameters specified
[  541.213729][T14648] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  541.368054][T14648] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  541.645183][T14648] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  542.358985][T14648] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  543.677162][T14648] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.751864][T14999] overlayfs: failed to resolve './file0': -2
[  544.264475][T14648] 8021q: adding VLAN 0 to HW filter on device team0
[  544.282710][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.289871][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.919908][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.927120][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.090985][T14648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  546.101633][T14648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  546.511461][T15025] trusted_key: encrypted_key: key user:syz not found
[  547.690447][T14648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.223278][T14648] veth0_vlan: entered promiscuous mode
[  551.319764][T14648] veth1_vlan: entered promiscuous mode
[  551.634606][T14648] veth0_macvtap: entered promiscuous mode
[  552.194999][T14648] veth1_macvtap: entered promiscuous mode
[  552.289056][T14648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.338340][T14648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  552.359749][T14648] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.441412][T14648] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  552.450690][T14648] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  552.460709][T14648] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.572806][T15088] trusted_key: encrypted_key: insufficient parameters specified
[  552.661496][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  553.041777][T15099] trusted_key: encrypted_key: key user:syz not found
[  553.719420][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.742289][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.813220][ T5877] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  553.878555][T15101] fuse: Unknown parameter 'grou00000000000000000000'
[  553.900191][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.915885][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.967485][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.979146][ T5877] usb 2-1: config 0 descriptor??
[  554.949029][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.980143][T15108] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  554.999976][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  556.515998][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[  556.591413][T15111] Bluetooth: hci5: command 0x0419 tx timeout
[  556.707930][T15125] netlink: 'syz.0.1213': attribute type 5 has an invalid length.
[  556.800965][T15129] rdma_rxe: rxe_newlink: failed to add lo
[  557.502877][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1213'.
[  558.046136][ T5877] usbhid 2-1:0.0: can't add hid device: -71
[  558.069884][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  558.187470][T15142] fuse: Bad value for 'fd'
[  558.208589][ T5877] usb 2-1: USB disconnect, device number 6
[  560.278618][T15165] trusted_key: encrypted_key: key user:syz not found
[  561.094833][T15170] fuse: Unknown parameter 'grou00000000000000000000'
[  562.063943][ T5883] libceph: connect (1)[c::]:6789 error -101
[  562.741536][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  562.750096][T15183] ceph: No mds server is up or the cluster is laggy
[  562.770342][ T5877] libceph: connect (1)[c::]:6789 error -101
[  562.780868][T15189] ceph: No mds server is up or the cluster is laggy
[  562.796946][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  562.917588][T15195] tipc: Started in network mode
[  562.922858][T15195] tipc: Node identity 8ee2d63c6a3a, cluster identity 4711
[  562.930588][T15195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  562.948051][T15195] syzkaller0: entered promiscuous mode
[  562.954520][T15195] syzkaller0: entered allmulticast mode
[  563.007700][ T5880] libceph: connect (1)[c::]:6789 error -101
[  563.094432][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  564.045009][   T43] tipc: Node number set to 3839415868
[  564.115383][T15199] rdma_rxe: rxe_newlink: failed to add lo
[  564.682134][  T979] libceph: connect (1)[c::]:6789 error -101
[  564.689356][  T979] libceph: mon0 (1)[c::]:6789 connect error
[  564.695956][T15193] tipc: Resetting bearer <eth:syzkaller0>
[  565.145730][T15193] tipc: Disabling bearer <eth:syzkaller0>
[  565.251583][ T5883] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  565.577339][ T5883] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  565.715974][ T5883] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  565.729638][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0
[  565.879170][T15217] trusted_key: encrypted_key: key user:syz not found
[  566.421385][ T5883] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  566.459444][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.514135][T15214] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  566.543596][ T5877] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  566.545473][ T5883] usb 5-1: config 0 descriptor??
[  566.762422][ T5877] usb 2-1: config 0 has no interfaces?
[  566.781454][ T5877] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  566.790525][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.850151][ T5877] usb 2-1: Product: syz
[  566.876505][ T5877] usb 2-1: Manufacturer: syz
[  566.881142][ T5877] usb 2-1: SerialNumber: syz
[  567.000959][T15226] fuse: Unknown parameter 'grou00000000000000000000'
[  567.094090][ T5877] usb 2-1: config 0 descriptor??
[  568.061864][ T5883] usbhid 5-1:0.0: can't add hid device: -71
[  568.192191][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  568.340636][ T5883] usb 5-1: USB disconnect, device number 6
[  569.106228][T15243] ceph: No mds server is up or the cluster is laggy
[  569.113235][ T5884] libceph: connect (1)[c::]:6789 error -101
[  569.120339][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  569.703618][ T5884] libceph: connect (1)[c::]:6789 error -101
[  570.083863][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  570.160869][T15251] ceph: No mds server is up or the cluster is laggy
[  571.452800][ T5884] usb 2-1: USB disconnect, device number 7
[  572.181514][   T11] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  572.593790][T15276] rdma_rxe: rxe_newlink: failed to add lo
[  573.212847][   T11] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  573.281758][   T11] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  573.352605][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  573.391644][   T11] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  573.441607][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.476372][   T11] usb 5-1: config 0 descriptor??
[  574.712253][ T5883] libceph: connect (1)[c::]:6789 error -101
[  574.718377][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  574.728226][T15293] ceph: No mds server is up or the cluster is laggy
[  574.837801][   T11] usbhid 5-1:0.0: can't add hid device: -71
[  574.844032][   T11] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  574.974614][   T11] usb 5-1: USB disconnect, device number 7
[  575.185763][T15302] fuse: Unknown parameter 'group_i00000000000000000000'
[  576.157241][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  576.169093][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  576.927038][T15315] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  577.961916][  T979] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  578.223939][  T979] usb 3-1: Using ep0 maxpacket: 16
[  578.324011][  T979] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  578.462412][  T979] usb 3-1: config 0 has no interface number 0
[  578.497975][  T979] usb 3-1: config 0 interface 41 has no altsetting 0
[  578.520552][  T979] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  578.530415][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.677465][  T979] usb 3-1: Product: syz
[  578.750635][T15343] rdma_rxe: rxe_newlink: failed to add lo
[  579.337178][  T979] usb 3-1: Manufacturer: syz
[  579.361564][  T979] usb 3-1: SerialNumber: syz
[  579.432511][  T979] usb 3-1: config 0 descriptor??
[  579.490837][  T979] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22
[  579.699048][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'.
[  579.781293][T15327] loop6: detected capacity change from 0 to 7
[  579.800916][T15327] Dev loop6: unable to read RDB block 7
[  579.819772][T15327]  loop6: unable to read partition table
[  579.837723][T15327] loop6: partition table beyond EOD, truncated
[  579.875137][T15327] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  580.013513][   T43] usb 3-1: USB disconnect, device number 10
[  581.052109][T15372] fuse: Unknown parameter 'group_i00000000000000000000'
[  581.685769][T15383] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1260'.
[  582.497162][T15390] trusted_key: encrypted_key: key user:syz not found
[  583.396400][T15404] overlayfs: failed to resolve './file0': -2
[  584.580389][ T5877] libceph: connect (1)[c::]:6789 error -101
[  584.611491][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  585.021505][T15111] Bluetooth: hci5: command 0x0419 tx timeout
[  585.501824][ T5877] libceph: connect (1)[c::]:6789 error -101
[  585.507917][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  585.683316][T15415] ceph: No mds server is up or the cluster is laggy
[  586.140191][T15432] fuse: Unknown parameter 'group_i00000000000000000000'
[  586.173640][T15433] binder: 15426:15433 ioctl c0306201 0 returned -14
[  586.824159][T15443] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  586.917197][T15441] input: syz1 as /devices/virtual/input/input43
[  587.112995][T15451] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1273'.
[  591.006141][T15480] fuse: Unknown parameter 'group_id00000000000000000000'
[  591.257600][T15462] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  593.467618][T15511] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  595.392920][T15543] input: syz1 as /devices/virtual/input/input44
[  595.783699][T15548] siw: device registration error -23
[  596.432214][T15550] fuse: Unknown parameter 'group_id00000000000000000000'
[  597.712429][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'.
[  597.737201][T15559] netlink: 'syz.0.1292': attribute type 5 has an invalid length.
[  597.746929][T15559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1292'.
[  599.901412][T14979] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  600.763402][T14979] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  600.787139][T15593] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  600.821439][T14979] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  600.880073][T14979] usb 6-1: config 0 interface 0 has no altsetting 0
[  601.057756][T14979] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  601.071920][T14979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.157207][T14979] usb 6-1: config 0 descriptor??
[  602.741785][ T5884] libceph: connect (1)[c::]:6789 error -101
[  602.747956][T14979] usbhid 6-1:0.0: can't add hid device: -71
[  602.757536][T15613] ceph: No mds server is up or the cluster is laggy
[  602.764502][T14979] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  602.790183][T14979] usb 6-1: USB disconnect, device number 2
[  602.802026][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  603.006604][T15620] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  603.943002][T14979] libceph: connect (1)[c::]:6789 error -101
[  603.949097][T14979] libceph: mon0 (1)[c::]:6789 connect error
[  603.956430][T15625] ceph: No mds server is up or the cluster is laggy
[  604.231932][T15633] input: syz1 as /devices/virtual/input/input45
[  604.929049][T15635] trusted_key: encrypted_key: key user:syz not found
[  605.661817][T15111] Bluetooth: hci5: command 0x0419 tx timeout
[  607.976587][ T5883] libceph: connect (1)[c::]:6789 error -101
[  608.077254][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  608.427547][T15677] ceph: No mds server is up or the cluster is laggy
[  608.525785][T15685] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  610.711488][T14979] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  611.446655][T14979] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.586937][T14979] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  611.625509][T14979] usb 6-1: config 0 interface 0 has no altsetting 0
[  612.058086][T14979] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  612.088037][T14979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.102258][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'.
[  612.111162][T15701] netlink: 'syz.2.1317': attribute type 5 has an invalid length.
[  612.119013][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'.
[  612.132930][T15701] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  612.141671][T15701] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  612.150247][T15701] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  612.158864][T15701] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  612.167530][T15701] geneve2: entered promiscuous mode
[  612.172741][T15701] geneve2: entered allmulticast mode
[  612.488269][T14979] usb 6-1: config 0 descriptor??
[  612.564322][T15710] trusted_key: encrypted_key: key user:syz not found
[  613.541386][T14979] usb 6-1: can't set config #0, error -71
[  613.671502][T14979] usb 6-1: USB disconnect, device number 3
[  613.838296][T15712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  613.846058][T15712] syzkaller0: entered promiscuous mode
[  613.851557][T15712] syzkaller0: entered allmulticast mode
[  614.605644][T15711] tipc: Resetting bearer <eth:syzkaller0>
[  614.733179][T15711] tipc: Disabling bearer <eth:syzkaller0>
[  617.070402][T15762] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  617.111315][   T43] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  617.859154][   T43] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.921697][   T43] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  618.078708][   T43] usb 5-1: config 0 interface 0 has no altsetting 0
[  618.085447][   T43] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  618.095053][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.139066][   T43] usb 5-1: config 0 descriptor??
[  618.430290][ T5880] libceph: connect (1)[c::]:6789 error -101
[  618.473967][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  618.812875][ T5883] libceph: connect (1)[c::]:6789 error -101
[  618.823309][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  618.868037][T15771] ceph: No mds server is up or the cluster is laggy
[  621.368254][   T43] usbhid 5-1:0.0: can't add hid device: -71
[  621.402944][   T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  621.506211][ T5880] libceph: connect (1)[c::]:6789 error -101
[  621.752551][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  621.782023][   T43] usb 5-1: USB disconnect, device number 8
[  621.812429][T15791] ceph: No mds server is up or the cluster is laggy
[  623.476796][   T43] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  623.570750][T15803] ceph: No mds server is up or the cluster is laggy
[  623.597744][   T11] libceph: connect (1)[c::]:6789 error -101
[  623.610808][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  623.773287][   T43] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.794676][   T43] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  623.977014][T15813] fuse: Bad value for 'user_id'
[  623.985109][   T43] usb 6-1: config 0 interface 0 has no altsetting 0
[  624.002154][T15813] fuse: Bad value for 'user_id'
[  624.109520][   T43] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  624.151298][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.207479][   T43] usb 6-1: config 0 descriptor??
[  624.486326][T15826] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1338'.
[  625.566838][   T43] usbhid 6-1:0.0: can't add hid device: -71
[  625.573699][   T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  626.201641][ T5880] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  626.301470][   T43] usb 6-1: USB disconnect, device number 4
[  626.435968][ T5880] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  626.467049][ T5880] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  626.513207][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  626.530258][ T5880] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  626.574262][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.617172][ T5880] usb 5-1: config 0 descriptor??
[  627.327764][T15850] input: syz1 as /devices/virtual/input/input46
[  628.476429][ T5880] usbhid 5-1:0.0: can't add hid device: -71
[  628.483948][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  628.506668][ T5880] usb 5-1: USB disconnect, device number 9
[  629.732715][T15111] Bluetooth: hci5: command 0x0419 tx timeout
[  630.251119][T15881] trusted_key: encrypted_key: key user:syz not found
[  631.723946][T15894] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1350'.
[  632.081184][T15896] hub 8-0:1.0: USB hub found
[  632.087078][T15896] hub 8-0:1.0: 1 port detected
[  633.808691][T15922] tipc: Started in network mode
[  633.813794][T15922] tipc: Node identity 3256ba734e5c, cluster identity 4711
[  633.822025][T15922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  633.838319][T15922] syzkaller0: entered promiscuous mode
[  633.843940][T15922] syzkaller0: entered allmulticast mode
[  634.872716][T15835] tipc: Node number set to 2081077875
[  635.147510][T15919] tipc: Resetting bearer <eth:syzkaller0>
[  635.385747][T15919] tipc: Disabling bearer <eth:syzkaller0>
[  637.429957][T15938] input: syz1 as /devices/virtual/input/input47
[  637.586588][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  637.601292][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  637.614951][ T5880] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  637.840388][ T5880] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  637.871192][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  638.122005][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  638.386567][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.137110][ T5880] usbtmc 5-1:16.0: bulk endpoints not found
[  640.135529][ T5880] libceph: connect (1)[c::]:6789 error -101
[  640.205098][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  640.540878][ T5880] libceph: connect (1)[c::]:6789 error -101
[  640.795258][T15960] ceph: No mds server is up or the cluster is laggy
[  640.808122][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  642.342309][ T5877] usb 5-1: USB disconnect, device number 10
[  644.173563][   T43] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  645.357274][   T24] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[  646.564341][T15835] libceph: connect (1)[c::]:6789 error -101
[  646.571351][T15835] libceph: mon0 (1)[c::]:6789 connect error
[  646.984499][T16006] input: syz1 as /devices/virtual/input/input48
[  646.997168][   T43] libceph: connect (1)[c::]:6789 error -101
[  647.331954][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  647.348901][T16000] ceph: No mds server is up or the cluster is laggy
[  649.954597][T16033] hub 8-0:1.0: USB hub found
[  649.960547][T16033] hub 8-0:1.0: 1 port detected
[  650.472947][   T24] libceph: connect (1)[c::]:6789 error -101
[  650.479997][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  650.963685][   T24] libceph: connect (1)[c::]:6789 error -101
[  650.971492][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  651.026656][T16035] ceph: No mds server is up or the cluster is laggy
[  651.055739][T14979] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  651.510724][T14979] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.254435][T14979] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  652.274254][T14979] usb 5-1: config 0 interface 0 has no altsetting 0
[  652.280898][T14979] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  652.302144][T14979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.779685][ T5826] Bluetooth: hci5: command 0x0419 tx timeout
[  652.864741][T14979] usb 5-1: config 0 descriptor??
[  652.907381][   T43] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  653.064379][T14979] usb 5-1: can't set config #0, error -71
[  653.073705][   T43] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  653.081064][T14979] usb 5-1: USB disconnect, device number 11
[  653.136871][   T43] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  653.190963][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  653.251586][   T43] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  653.299540][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.324738][   T43] usb 1-1: config 0 descriptor??
[  653.607389][T16063] trusted_key: encrypted_key: key user:syz not found
[  655.288997][   T43] usbhid 1-1:0.0: can't add hid device: -71
[  655.351319][T14979] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  655.351896][   T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  655.498188][   T43] usb 1-1: USB disconnect, device number 10
[  656.701334][T15111] Bluetooth: hci5: command 0x0419 tx timeout
[  657.834450][T16085] hub 8-0:1.0: USB hub found
[  657.840185][T16085] hub 8-0:1.0: 1 port detected
[  658.762852][T16084] syzkaller1: entered promiscuous mode
[  658.781395][T16084] syzkaller1: entered allmulticast mode
[  659.155775][T16084] netlink: 'syz.2.1395': attribute type 275 has an invalid length.
[  659.332968][   T11] libceph: connect (1)[c::]:6789 error -101
[  659.333152][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  659.611810][   T11] libceph: connect (1)[c::]:6789 error -101
[  659.638141][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  659.790516][T16095] ceph: No mds server is up or the cluster is laggy
[  660.268772][ T5877] libceph: connect (1)[c::]:6789 error -101
[  660.316221][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  660.782740][T15835] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  661.341823][T14979] usb 6-1: device descriptor read/all, error -110
[  662.054966][T15835] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  662.094921][T15835] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  662.696594][T14979] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  662.739748][ T5883] libceph: connect (1)[c::]:6789 error -101
[  662.772894][   T11] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  662.798254][T16112] ceph: No mds server is up or the cluster is laggy
[  662.808413][T15835] usb 2-1: config 0 interface 0 has no altsetting 0
[  662.821534][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  662.831451][T14979] usb 6-1: device descriptor read/64, error -32
[  662.846276][T15835] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  662.981816][T14979] usb usb6-port1: attempt power cycle
[  663.007456][   T11] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  663.017571][T15835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.064140][   T11] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  663.093348][T15835] usb 2-1: config 0 descriptor??
[  663.113547][   T11] usb 3-1: config 0 interface 0 has no altsetting 0
[  663.134121][   T11] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  663.141806][T15835] usb 2-1: can't set config #0, error -71
[  663.144602][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.189942][T15835] usb 2-1: USB disconnect, device number 8
[  663.676830][   T11] usb 3-1: config 0 descriptor??
[  663.700002][   T11] usb 3-1: can't set config #0, error -71
[  663.748479][   T11] usb 3-1: USB disconnect, device number 12
[  664.666196][T16140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  664.678147][T16140] syzkaller0: entered promiscuous mode
[  664.683864][T16140] syzkaller0: entered allmulticast mode
[  666.839920][T16137] tipc: Resetting bearer <eth:syzkaller0>
[  667.740052][T16137] tipc: Disabling bearer <eth:syzkaller0>
[  667.770879][T16148] bridge0: port 3(team0) entered blocking state
[  667.777283][T16148] bridge0: port 3(team0) entered disabled state
[  667.783784][T16148] team0: entered allmulticast mode
[  667.788916][T16148] team_slave_0: entered allmulticast mode
[  667.794680][T16148] team_slave_1: entered allmulticast mode
[  667.803051][T16148] team0: entered promiscuous mode
[  667.808110][T16148] team_slave_0: entered promiscuous mode
[  667.813995][T16148] team_slave_1: entered promiscuous mode
[  667.820078][T16148] bridge0: port 3(team0) entered blocking state
[  667.826426][T16148] bridge0: port 3(team0) entered forwarding state
[  669.773174][T16167] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  670.897013][T16172] tipc: New replicast peer: 0.0.0.0
[  670.947376][T16172] tipc: Enabled bearer <udp:syz2>, priority 10
[  671.174279][T16178] trusted_key: encrypted_key: key user:syz not found
[  672.881288][T16192] tipc: Started in network mode
[  672.893008][T16192] tipc: Node identity 9a5235d71742, cluster identity 4711
[  672.901122][T16192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  673.736631][T16190] tipc: Disabling bearer <eth:syzkaller0>
[  676.541947][T15835] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  677.816376][T15835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.827859][T15835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.974121][T15835] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  678.062967][T15835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.769039][T15835] usb 5-1: config 0 descriptor??
[  680.821290][T16244] overlayfs: failed to resolve './file1': -2
[  681.478211][T15835] usbhid 5-1:0.0: can't add hid device: -71
[  681.513266][T15835] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  681.524837][T15835] usb 5-1: USB disconnect, device number 12
[  684.463210][ T5883] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  684.792981][ T5883] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  684.804675][ T5883] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  685.447365][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0
[  685.572095][ T5883] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  685.721717][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.774504][ T5883] usb 1-1: config 0 descriptor??
[  685.794124][ T5883] usb 1-1: can't set config #0, error -71
[  685.879732][T16285] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  686.425321][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'.
[  686.520500][ T5883] usb 1-1: USB disconnect, device number 11
[  686.542321][T16288] input: syz1 as /devices/virtual/input/input49
[  686.553156][T16286] netlink: 'syz.1.1437': attribute type 5 has an invalid length.
[  686.580633][T16286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1437'.
[  686.769256][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1438'.
[  687.901787][T16289] netlink: 'syz.5.1438': attribute type 5 has an invalid length.
[  688.651757][T16289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1438'.
[  688.807052][T16289] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  688.835247][T16289] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  688.979282][T16289] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  689.477479][T16289] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  689.507937][T16289] geneve2: entered promiscuous mode
[  689.520193][T16289] geneve2: entered allmulticast mode
[  689.794345][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'.
[  689.963751][T16311] netlink: 'syz.4.1445': attribute type 5 has an invalid length.
[  690.921910][T16311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1445'.
[  691.038132][T16323] loop6: detected capacity change from 0 to 7
[  691.077407][T16323] Dev loop6: unable to read RDB block 7
[  691.099516][T16323]  loop6: unable to read partition table
[  691.113049][T16323] loop6: partition table beyond EOD, truncated
[  691.751364][T16323] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  692.200348][T16311] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  692.224301][T16311] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  692.835446][T16311] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  692.994593][ T5883] libceph: connect (1)[c::]:6789 error -101
[  693.000721][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  693.013759][T16311] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  694.652368][T16337] ceph: No mds server is up or the cluster is laggy
[  694.661860][ T5883] libceph: connect (1)[c::]:6789 error -101
[  694.667942][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  694.799526][T16311] geneve2: entered promiscuous mode
[  694.806269][T16311] geneve2: entered allmulticast mode
[  697.311292][   T11] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  697.473917][  T979] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  698.066286][   T11] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.079711][   T11] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  698.096047][   T11] usb 6-1: config 0 interface 0 has no altsetting 0
[  698.102911][   T11] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  698.113144][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.126072][   T11] usb 6-1: config 0 descriptor??
[  698.320554][   T11] usb 6-1: can't set config #0, error -71
[  698.334071][  T979] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.995815][   T11] usb 6-1: USB disconnect, device number 9
[  699.003239][  T979] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  699.024692][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  699.031036][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  699.084779][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  699.114407][  T979] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  699.143498][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.168628][  T979] usb 2-1: config 0 descriptor??
[  699.181441][  T979] usb 2-1: can't set config #0, error -71
[  699.803090][  T979] usb 2-1: USB disconnect, device number 9
[  700.548779][ T5877] libceph: connect (1)[c::]:6789 error -101
[  700.568028][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  700.762698][T16386] ceph: No mds server is up or the cluster is laggy
[  701.405935][ T5877] libceph: connect (1)[c::]:6789 error -101
[  701.413813][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  701.577782][ T5883] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  703.669970][   T43] libceph: connect (1)[c::]:6789 error -101
[  703.678684][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  703.783620][T16420] ceph: No mds server is up or the cluster is laggy
[  703.983486][T16424] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  705.459194][ T5883] usb 2-1: device descriptor read/all, error -71
[  705.853103][   T43] libceph: connect (1)[c::]:6789 error -101
[  706.075630][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  706.133073][T16433] ceph: No mds server is up or the cluster is laggy
[  707.804187][ T5826] Bluetooth: hci5: command 0x0419 tx timeout
[  711.061312][ T5877] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  711.370635][ T5877] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  711.404476][ T5877] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  712.411401][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0
[  712.418663][ T5877] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  712.429477][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.755205][T16484] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  713.721999][ T5877] usb 6-1: config 0 descriptor??
[  713.842199][ T5877] usb 6-1: can't set config #0, error -71
[  713.890861][T16489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  715.501549][ T5877] usb 6-1: USB disconnect, device number 10
[  715.977167][T16487] tipc: Disabling bearer <eth:syzkaller0>
[  716.070972][T16486] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  717.003994][T16509] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  717.255558][T16516] fuse: Unknown parameter 'use00000000000000000000'
[  719.574198][   T11] libceph: connect (1)[c::]:6789 error -101
[  719.585515][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  720.761679][ T5877] libceph: connect (1)[c::]:6789 error -101
[  720.767784][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  721.489541][T16533] ceph: No mds server is up or the cluster is laggy
[  722.372448][   T11] libceph: connect (1)[c::]:6789 error -101
[  722.378547][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  723.481466][   T43] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  723.657625][T16558] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  723.733270][   T43] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  723.765677][   T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  723.938101][   T43] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  723.970195][   T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  724.011039][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.082638][   T43] usbtmc 2-1:16.0: bulk endpoints not found
[  724.619491][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'.
[  724.686254][T16567] netlink: 'syz.0.1502': attribute type 5 has an invalid length.
[  724.749438][T16567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1502'.
[  724.820160][T16572] fuse: Unknown parameter 'use00000000000000000000'
[  726.357116][   T11] usb 2-1: USB disconnect, device number 12
[  727.470120][T16588] ceph: No mds server is up or the cluster is laggy
[  727.477161][ T5883] libceph: connect (1)[c::]:6789 error -101
[  727.487174][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  729.221404][ T5883] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  729.407962][ T5883] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  729.417159][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.441276][ T5883] usb 3-1: Product: syz
[  729.447173][ T5883] usb 3-1: Manufacturer: syz
[  729.461288][ T5883] usb 3-1: SerialNumber: syz
[  729.614683][ T5883] usb 3-1: config 0 descriptor??
[  730.230536][ T5883] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  730.501759][ T5877] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  730.665354][ T5877] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  730.731220][ T5877] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  730.749482][ T5877] usb 1-1: config 0 interface 0 has no altsetting 0
[  730.756749][ T5877] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  730.929117][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.963498][ T5877] usb 1-1: config 0 descriptor??
[  730.995693][  T979] libceph: connect (1)[c::]:6789 error -101
[  731.019253][  T979] libceph: mon0 (1)[c::]:6789 connect error
[  731.236086][T16613] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  731.306576][  T979] libceph: connect (1)[c::]:6789 error -101
[  731.316385][  T979] libceph: mon0 (1)[c::]:6789 connect error
[  731.478834][T16619] ceph: No mds server is up or the cluster is laggy
[  731.657595][ T5883] usb 3-1: USB disconnect, device number 13
[  731.768169][T16628] fuse: Unknown parameter 'use00000000000000000000'
[  734.077006][ T5877] usbhid 1-1:0.0: can't add hid device: -71
[  734.086800][ T5877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  734.097757][ T5877] usb 1-1: USB disconnect, device number 12
[  734.570673][T16649] trusted_key: encrypted_key: key user:syz not found
[  735.503358][T16651] ceph: No mds server is up or the cluster is laggy
[  735.517250][ T5883] libceph: connect (1)[c::]:6789 error -101
[  735.541542][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  736.386940][ T5883] libceph: connect (1)[c::]:6789 error -101
[  736.399822][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  737.782751][   T11] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  737.899041][T16680] xt_SECMARK: unable to map security context 'unconfined'
[  738.180254][   T11] usb 5-1: config 0 has no interfaces?
[  738.400180][ T5877] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  738.801461][T15835] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  738.966470][T15835] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  739.152714][   T11] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  739.161996][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.175598][T15835] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  739.207101][T15835] usb 6-1: config 0 interface 0 has no altsetting 0
[  739.219508][T15835] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  739.219723][   T11] usb 5-1: Product: syz
[  739.241852][T15835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.297864][T15835] usb 6-1: config 0 descriptor??
[  739.306167][   T11] usb 5-1: Manufacturer: syz
[  739.313543][   T11] usb 5-1: SerialNumber: syz
[  739.323019][   T11] usb 5-1: config 0 descriptor??
[  739.429721][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'.
[  739.439523][T16690] netlink: 'syz.0.1529': attribute type 5 has an invalid length.
[  739.448450][T16690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1529'.
[  740.953673][  T979] usb 5-1: USB disconnect, device number 13
[  741.211992][T15835] usbhid 6-1:0.0: can't add hid device: -71
[  741.223724][T15835] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  741.415604][T15835] usb 6-1: USB disconnect, device number 11
[  741.843953][ T5883] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  742.254799][ T5883] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  742.292895][ T5883] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  742.322157][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0
[  742.328912][ T5883] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  742.338507][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.352356][ T5883] usb 5-1: config 0 descriptor??
[  744.037400][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1536'.
[  744.151569][ T5877] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  744.252964][ T5883] usbhid 5-1:0.0: can't add hid device: -71
[  744.261381][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  744.593919][ T5877] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  744.621254][ T5877] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  744.632165][ T5883] usb 5-1: USB disconnect, device number 14
[  744.634519][ T5877] usb 2-1: config 0 interface 0 has no altsetting 0
[  744.648205][ T5877] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  744.658367][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.680926][ T5877] usb 2-1: config 0 descriptor??
[  745.840779][ T5883] libceph: connect (1)[c::]:6789 error -101
[  745.849773][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  745.867425][T16728] ceph: No mds server is up or the cluster is laggy
[  746.181398][ T5877] usbhid 2-1:0.0: can't add hid device: -71
[  746.187568][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  746.209466][ T5877] usb 2-1: USB disconnect, device number 14
[  746.507329][T16739] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  747.011390][T16747] binder: 16745:16747 ioctl c0306201 0 returned -14
[  749.010422][ T5877] libceph: connect (1)[c::]:6789 error -101
[  749.041946][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  749.175033][T16758] ceph: No mds server is up or the cluster is laggy
[  749.282210][ T5883] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  750.497830][T16769] trusted_key: encrypted_key: key user:syz not found
[  750.547394][ T5883] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  751.512959][ T5883] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  751.523120][  T979] libceph: connect (1)[c::]:6789 error -101
[  751.531738][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'.
[  751.531784][T16770] netlink: 'syz.1.1544': attribute type 5 has an invalid length.
[  751.531812][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1544'.
[  751.534091][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0
[  751.571805][T16774] ceph: No mds server is up or the cluster is laggy
[  751.578924][ T5883] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  751.588385][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.599684][ T5883] usb 1-1: config 0 descriptor??
[  751.607253][  T979] libceph: mon0 (1)[c::]:6789 connect error
[  751.615685][ T5883] usb 1-1: can't set config #0, error -71
[  751.678350][ T5883] usb 1-1: USB disconnect, device number 13
[  754.181972][ T5883] libceph: connect (1)[c::]:6789 error -101
[  754.196913][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  754.962368][T16804] ceph: No mds server is up or the cluster is laggy
[  756.221941][ T5826] Bluetooth: hci5: command 0x0419 tx timeout
[  757.747165][T16835] xt_SECMARK: unable to map security context 'unconfined'
[  758.639227][T16843] trusted_key: encrypted_key: key user:syz not found
[  758.743272][T16844] binder: 16839:16844 ioctl c0306201 0 returned -14
[  758.838364][T16846] netlink: 'syz.0.1562': attribute type 275 has an invalid length.
[  760.467711][ T5884] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  760.696339][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  760.705055][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  760.878298][ T5884] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  760.909630][ T5884] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  761.881575][T15111] Bluetooth: hci5: command 0x0419 tx timeout
[  762.094150][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0
[  762.100967][ T5884] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  762.299532][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.322199][ T5884] usb 2-1: config 0 descriptor??
[  762.944293][   T24] libceph: connect (1)[c::]:6789 error -101
[  762.951804][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  763.272038][   T24] libceph: connect (1)[c::]:6789 error -101
[  763.404963][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  763.426578][T16878] ceph: No mds server is up or the cluster is laggy
[  763.839434][ T5884] usbhid 2-1:0.0: can't add hid device: -71
[  763.923862][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  764.653993][ T5884] usb 2-1: USB disconnect, device number 15
[  764.760009][T16889] binder: 16883:16889 ioctl c0306201 0 returned -14
[  765.362308][T16897] trusted_key: encrypted_key: key user:syz not found
[  766.483011][T16894] binder: 16891:16894 ioctl c0306201 0 returned -14
[  767.391680][T16913] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  770.250023][ T5884] libceph: connect (1)[c::]:6789 error -101
[  770.268519][T16932] ceph: No mds server is up or the cluster is laggy
[  770.290307][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  770.437947][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'.
[  770.447113][T16939] netlink: 'syz.2.1584': attribute type 5 has an invalid length.
[  770.484961][T16939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1584'.
[  771.668375][T16948] trusted_key: encrypted_key: key user:syz not found
[  773.323973][T16957] ceph: No mds server is up or the cluster is laggy
[  773.363790][   T11] libceph: connect (1)[c::]:6789 error -101
[  773.552031][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  773.585391][T16955] binder: 16950:16955 ioctl c0306201 0 returned -14
[  773.758111][T16968] fuse: Unknown parameter 'user_id00000000000000000000'
[  774.161492][ T5877] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  774.277258][T16975] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  774.425903][ T5877] usb 5-1: config 0 has no interfaces?
[  774.438156][ T5877] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  774.447474][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.455976][ T5877] usb 5-1: Product: syz
[  774.460188][ T5877] usb 5-1: Manufacturer: syz
[  774.465037][ T5877] usb 5-1: SerialNumber: syz
[  774.488791][ T5877] usb 5-1: config 0 descriptor??
[  775.832805][T16985] binder: 16983:16985 ioctl c0306201 0 returned -14
[  777.986590][T16994] binder: 16987:16994 ioctl c0306201 0 returned -14
[  780.270409][T17017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  783.743189][ T5883] libceph: connect (1)[c::]:6789 error -101
[  783.829800][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  784.287472][ T5884] libceph: connect (1)[c::]:6789 error -101
[  784.438365][T17020] ceph: No mds server is up or the cluster is laggy
[  784.779081][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  784.879604][ T5883] usb 5-1: USB disconnect, device number 15
[  784.900583][T17012] tipc: Disabling bearer <eth:syzkaller0>
[  785.754887][ T5884] libceph: connect (1)[c::]:6789 error -101
[  785.773753][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  785.787288][T17033] ceph: No mds server is up or the cluster is laggy
[  786.733758][ T5884] libceph: connect (1)[c::]:6789 error -101
[  786.739785][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  786.909380][T17040] ceph: No mds server is up or the cluster is laggy
[  789.659745][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1617'.
[  789.669036][T17076] netlink: 'syz.5.1617': attribute type 5 has an invalid length.
[  789.698054][T17076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1617'.
[  789.815448][T17077] xt_SECMARK: unable to map security context 'unconfined'
[  791.665750][ T5956] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  791.843328][ T5956] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  791.939086][ T5956] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  792.021239][ T5956] usb 3-1: config 0 interface 0 has no altsetting 0
[  792.034248][ T5956] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  792.061618][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.102069][ T5956] usb 3-1: config 0 descriptor??
[  792.745404][T17093] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  793.989489][ T5956] usbhid 3-1:0.0: can't add hid device: -71
[  794.002774][ T5956] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  794.034368][ T5956] usb 3-1: USB disconnect, device number 14
[  794.227876][T17098] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  797.040377][T17131] fuse: Bad value for 'fd'
[  797.860738][ T5883] libceph: connect (1)[c::]:6789 error -101
[  798.181523][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  798.340451][T17147] ceph: No mds server is up or the cluster is laggy
[  798.392658][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'.
[  798.442027][ T5884] libceph: connect (1)[c::]:6789 error -101
[  798.442189][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  798.513691][T17153] netlink: 'syz.4.1633': attribute type 5 has an invalid length.
[  798.517555][T17153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1633'.
[  802.587406][T17175] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  803.817734][T17184] binder: 17180:17184 ioctl c0306201 0 returned -14
[  803.995755][T17183] netlink: 'syz.0.1640': attribute type 275 has an invalid length.
[  804.474306][T17198] fuse: Bad value for 'fd'
[  811.072195][ T5883] libceph: connect (1)[c::]:6789 error -101
[  811.078294][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  811.159566][T17259] ceph: No mds server is up or the cluster is laggy
[  811.542094][T17268] fuse: Unknown parameter '0x0000000000000005'
[  812.621441][T15111] Bluetooth: hci5: command 0x0419 tx timeout
[  813.612725][T17284] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  814.481229][   T11] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  815.213469][   T11] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  815.375982][   T11] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  815.457007][   T11] usb 6-1: config 0 interface 0 has no altsetting 0
[  815.471258][   T11] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  815.480347][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.536033][   T11] usb 6-1: config 0 descriptor??
[  815.561315][   T11] usb 6-1: can't set config #0, error -71
[  815.583037][   T11] usb 6-1: USB disconnect, device number 12
[  818.040403][T17325] fuse: Unknown parameter '0x0000000000000005'
[  818.267432][T17328] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  818.830649][T17329] xt_SECMARK: unable to map security context 'unconfined'
[  819.883218][   T11] libceph: connect (1)[c::]:6789 error -101
[  819.889312][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  820.114421][T17334] ceph: No mds server is up or the cluster is laggy
[  821.086435][ T5877] libceph: connect (1)[c::]:6789 error -101
[  821.111761][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  821.971748][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  821.978136][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  821.990549][T17344] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  822.002573][ T5877] libceph: connect (1)[c::]:6789 error -101
[  822.031616][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  823.661992][   T30] audit: type=1326 audit(1749126636.728:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.1.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  826.565811][T17374] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  827.560793][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'.
[  827.570813][T17386] netlink: 'syz.4.1685': attribute type 5 has an invalid length.
[  827.580857][T17386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1685'.
[  829.021236][T15835] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  829.196571][T15835] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  829.501240][T15835] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  829.794119][T15835] usb 6-1: config 0 interface 0 has no altsetting 0
[  829.895832][T15835] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  830.026958][T15835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  830.200064][T15835] usb 6-1: config 0 descriptor??
[  830.680775][   T43] libceph: connect (1)[c::]:6789 error -101
[  830.692546][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  830.992315][   T43] libceph: connect (1)[c::]:6789 error -101
[  831.057490][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  831.090179][T17416] kvm: pic: non byte write
[  831.149021][T17411] ceph: No mds server is up or the cluster is laggy
[  832.162451][T15835] usbhid 6-1:0.0: can't add hid device: -71
[  832.172525][T15835] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  832.252578][T17424] ceph: No mds server is up or the cluster is laggy
[  832.277832][ T5877] libceph: connect (1)[c::]:6789 error -101
[  832.302445][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  832.360753][T17422] binder: 17420:17422 ioctl c0306201 0 returned -14
[  832.442330][T15835] usb 6-1: USB disconnect, device number 13
[  833.560781][ T5956] libceph: connect (1)[c::]:6789 error -101
[  833.573322][ T5956] libceph: mon0 (1)[c::]:6789 connect error
[  833.611018][T17438] ceph: No mds server is up or the cluster is laggy
[  837.292022][   T30] audit: type=1326 audit(1749126650.648:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  837.445638][   T30] audit: type=1326 audit(1749126650.648:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  837.469817][   T30] audit: type=1326 audit(1749126650.648:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  837.520909][   T30] audit: type=1326 audit(1749126650.648:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  838.103407][   T30] audit: type=1326 audit(1749126650.648:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  838.243678][   T30] audit: type=1326 audit(1749126650.648:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  838.280673][   T30] audit: type=1326 audit(1749126650.648:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  838.362226][   T30] audit: type=1326 audit(1749126650.648:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  838.953375][T17487] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  839.017190][   T30] audit: type=1326 audit(1749126650.648:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  839.047613][   T30] audit: type=1326 audit(1749126650.648:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17460 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  841.154551][T17505] binder: 17503:17505 ioctl c0306201 0 returned -14
[  841.944063][T17526] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  845.531245][   T11] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  846.440428][T17562] input: syz1 as /devices/virtual/input/input50
[  846.644819][   T11] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.804100][   T11] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  846.923649][   T11] usb 6-1: config 0 interface 0 has no altsetting 0
[  846.992761][   T11] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  847.016601][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.059633][T17564] fuse: Unknown parameter 'fd0x0000000000000005'
[  847.068057][   T11] usb 6-1: config 0 descriptor??
[  847.278930][T17568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1729'.
[  848.642238][   T11] usbhid 6-1:0.0: can't add hid device: -71
[  848.648287][   T11] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  848.672523][   T11] usb 6-1: USB disconnect, device number 14
[  848.721338][   T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  849.845130][ T5877] libceph: connect (1)[c::]:6789 error -101
[  849.863085][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  849.875023][   T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  849.907698][T17587] ceph: No mds server is up or the cluster is laggy
[  850.092536][   T43] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  850.104397][   T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  850.113843][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.139289][T17572] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  850.650093][   T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  850.975816][T17601] input: syz1 as /devices/virtual/input/input51
[  852.522024][T17609] fuse: Unknown parameter 'fd0x0000000000000005'
[  853.644492][   T43] usb 3-1: USB disconnect, device number 15
[  854.920476][T16325] udevd[16325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  854.981575][ T5884] libceph: connect (1)[c::]:6789 error -101
[  855.004191][T17626] ceph: No mds server is up or the cluster is laggy
[  855.023364][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  855.881567][ T5884] libceph: connect (1)[c::]:6789 error -101
[  855.887745][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  856.171500][T15111] Bluetooth: hci5: command 0x0419 tx timeout
[  857.073265][T17650] input: syz1 as /devices/virtual/input/input52
[  857.821535][T17645] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  858.134053][T17661] vivid-002: disconnect
[  858.769778][T17651] vivid-002: reconnect
[  858.927379][   T30] kauditd_printk_skb: 49 callbacks suppressed
[  858.927391][   T30] audit: type=1326 audit(1749126672.128:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  858.966845][   T30] audit: type=1326 audit(1749126672.128:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  859.262990][   T30] audit: type=1326 audit(1749126672.128:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  859.315967][   T30] audit: type=1326 audit(1749126672.128:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  859.342453][   T30] audit: type=1326 audit(1749126672.128:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  860.365423][   T30] audit: type=1326 audit(1749126672.128:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  860.388984][   T30] audit: type=1326 audit(1749126672.128:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  860.592721][   T30] audit: type=1326 audit(1749126672.138:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  860.614987][   T30] audit: type=1326 audit(1749126672.138:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  861.071198][   T30] audit: type=1326 audit(1749126672.138:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17651 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  863.010042][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1755'.
[  863.051428][T17689] netlink: 'syz.5.1755': attribute type 5 has an invalid length.
[  863.059184][T17689] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1755'.
[  863.172221][T17708] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  864.499629][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'.
[  865.413204][T17716] netlink: 'syz.2.1760': attribute type 5 has an invalid length.
[  865.478221][T17716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1760'.
[  866.814599][T17731] trusted_key: encrypted_key: key user:syz not found
[  867.761283][   T11] libceph: connect (1)[c::]:6789 error -101
[  867.788840][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  868.333873][   T11] libceph: connect (1)[c::]:6789 error -101
[  868.376647][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  868.871285][T17736] ceph: No mds server is up or the cluster is laggy
[  869.939927][T17762] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  870.345341][T17765] binder: 17760:17765 ioctl c0306201 0 returned -14
[  871.821223][T17757] Bluetooth: hci5: command 0x0419 tx timeout
[  871.838044][T17778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  874.174960][T17769] tipc: Disabling bearer <eth:syzkaller0>
[  874.639986][T17789] trusted_key: encrypted_key: key user:syz not found
[  874.773599][T17792] binder: 17790:17792 ioctl c0306201 0 returned -14
[  877.150701][T17821] binder: 17812:17821 ioctl c0306201 0 returned -14
[  878.071988][T17834] xt_SECMARK: unable to map security context 'unconfined'
[  880.420420][T17850] binder: 17844:17850 ioctl c0306201 0 returned -14
[  880.808257][ T5883] libceph: connect (1)[c::]:6789 error -101
[  880.827423][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  880.980538][T17852] ceph: No mds server is up or the cluster is laggy
[  883.304837][T17872] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1799'.
[  883.435943][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  883.443386][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  883.505236][ T5877] libceph: connect (1)[c::]:6789 error -101
[  883.589250][T17875] overlayfs: failed to resolve './file0': -2
[  884.002083][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  884.039031][T17871] ceph: No mds server is up or the cluster is laggy
[  884.239294][T17881] input: syz0 as /devices/virtual/input/input53
[  885.230314][T18227] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  886.911382][T18235] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  889.150916][T18264] overlayfs: failed to resolve './file0': -2
[  889.632773][T18267] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  890.108491][T18273] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1813'.
[  890.257549][T18272] ceph: No mds server is up or the cluster is laggy
[  890.264647][   T43] libceph: connect (1)[c::]:6789 error -101
[  890.275058][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  890.485051][T18278] input: syz0 as /devices/virtual/input/input54
[  891.337614][T18286] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  891.462286][T18288] siw: device registration error -23
[  894.362632][T18317] overlayfs: failed to resolve './file0': -2
[  895.447377][T18323] trusted_key: encrypted_key: key user:syz not found
[  897.854598][   T43] libceph: connect (1)[c::]:6789 error -101
[  898.231709][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  898.237806][T18339] ceph: No mds server is up or the cluster is laggy
[  898.332521][   T43] libceph: connect (1)[c::]:6789 error -101
[  898.339618][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  898.397530][T18349] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1829'.
[  898.633699][T15835] libceph: connect (1)[c::]:6789 error -101
[  898.640691][T15835] libceph: mon0 (1)[c::]:6789 connect error
[  898.970584][T18356] binder: 18353:18356 ioctl c0306201 0 returned -14
[  899.271957][T15835] libceph: connect (1)[c::]:6789 error -101
[  899.280974][T15835] libceph: mon0 (1)[c::]:6789 connect error
[  899.761791][T18344] ceph: No mds server is up or the cluster is laggy
[  900.914159][T18368] overlayfs: failed to resolve './file1': -2
[  902.121688][T18375] overlayfs: failed to resolve './file0': -2
[  903.122178][T18385] trusted_key: encrypted_key: key user:syz not found
[  905.104927][T15835] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  905.330974][T15835] usb 5-1: Using ep0 maxpacket: 16
[  905.430758][T15835] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  905.441901][T15835] usb 5-1: config 0 has no interface number 0
[  905.448093][T15835] usb 5-1: config 0 interface 41 has no altsetting 0
[  905.457258][T15835] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  905.466763][T15835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.476935][T15835] usb 5-1: Product: syz
[  905.482298][T15835] usb 5-1: Manufacturer: syz
[  905.486988][T15835] usb 5-1: SerialNumber: syz
[  905.563595][T15835] usb 5-1: config 0 descriptor??
[  905.579820][T15835] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[  905.984774][T18424] overlayfs: failed to resolve './file1': -2
[  906.520212][T18396] loop6: detected capacity change from 0 to 7
[  906.548630][T18396] Dev loop6: unable to read RDB block 7
[  906.625390][T18396]  loop6: unable to read partition table
[  906.747049][T18431] overlayfs: failed to resolve './file0': -2
[  907.501682][T18396] loop6: partition table beyond EOD, truncated
[  907.521153][T18396] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  907.637288][ T5883] usb 5-1: USB disconnect, device number 16
[  909.631778][T18452] trusted_key: encrypted_key: key user:syz not found
[  910.175304][T18459] netlink: 'syz.1.1859': attribute type 1 has an invalid length.
[  910.344364][   T43] libceph: connect (1)[c::]:6789 error -101
[  910.350426][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  910.382128][T18463] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1857'.
[  910.721245][   T43] libceph: connect (1)[c::]:6789 error -101
[  910.810632][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  911.471663][   T43] libceph: connect (1)[c::]:6789 error -101
[  911.477749][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  911.513806][T18460] ceph: No mds server is up or the cluster is laggy
[  912.147628][T17757] Bluetooth: hci5: command 0x0419 tx timeout
[  913.450995][T18499] trusted_key: encrypted_key: insufficient parameters specified
[  914.590322][T18508] trusted_key: encrypted_key: key user:syz not found
[  914.625327][ T5877] libceph: connect (1)[c::]:6789 error -101
[  914.749016][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  915.013681][ T5877] libceph: connect (1)[c::]:6789 error -101
[  915.014511][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  915.047150][T18506] ceph: No mds server is up or the cluster is laggy
[  915.241699][T18511] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  915.492268][T18514] netlink: 'syz.2.1872': attribute type 1 has an invalid length.
[  916.258004][T18524] binder: 18521:18524 ioctl c0306201 0 returned -14
[  918.586146][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  918.586164][   T30] audit: type=1326 audit(1749126731.848:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  918.648762][   T30] audit: type=1326 audit(1749126731.848:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  918.670301][    C1] vkms_vblank_simulate: vblank timer overrun
[  920.051145][   T30] audit: type=1326 audit(1749126731.858:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  920.072712][    C1] vkms_vblank_simulate: vblank timer overrun
[  920.522776][T18557] trusted_key: encrypted_key: key user:syz not found
[  920.582469][   T30] audit: type=1326 audit(1749126731.858:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  920.655076][   T30] audit: type=1326 audit(1749126731.858:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  920.658749][T18559] netlink: 'syz.1.1884': attribute type 1 has an invalid length.
[  920.848094][   T30] audit: type=1326 audit(1749126731.858:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  920.869699][    C1] vkms_vblank_simulate: vblank timer overrun
[  920.900112][   T30] audit: type=1326 audit(1749126731.858:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  920.921704][    C1] vkms_vblank_simulate: vblank timer overrun
[  921.083313][   T30] audit: type=1326 audit(1749126731.858:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  921.104947][    C1] vkms_vblank_simulate: vblank timer overrun
[  921.202843][T18567] bridge0: port 3(team0) entered blocking state
[  921.209747][T18567] bridge0: port 3(team0) entered disabled state
[  921.217052][T18567] team0: entered allmulticast mode
[  921.222268][T18567] team_slave_0: entered allmulticast mode
[  921.228068][T18567] team_slave_1: entered allmulticast mode
[  921.248530][T18567] team0: entered promiscuous mode
[  921.253745][T18567] team_slave_0: entered promiscuous mode
[  921.261031][T18567] team_slave_1: entered promiscuous mode
[  921.271110][T18567] bridge0: port 3(team0) entered blocking state
[  921.278370][T18567] bridge0: port 3(team0) entered forwarding state
[  921.607912][   T30] audit: type=1326 audit(1749126731.858:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  921.677572][   T30] audit: type=1326 audit(1749126731.858:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18534 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[  921.823687][ T5883] libceph: connect (1)[c::]:6789 error -101
[  921.829717][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  921.843060][T18568] ceph: No mds server is up or the cluster is laggy
[  922.250226][T18575] binder: 18573:18575 ioctl c0306201 0 returned -14
[  922.381913][T18582] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  923.114315][   T43] libceph: connect (1)[c::]:6789 error -101
[  923.120445][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  923.759455][T18601] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1891'.
[  924.378223][   T43] libceph: connect (1)[c::]:6789 error -101
[  924.395176][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  925.259304][T18620] netlink: 'syz.2.1898': attribute type 1 has an invalid length.
[  925.279476][T18594] ceph: No mds server is up or the cluster is laggy
[  926.087899][   T43] libceph: connect (1)[c::]:6789 error -101
[  926.884377][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  928.081393][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  928.081411][   T30] audit: type=1326 audit(1749126741.278:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  928.109064][    C0] vkms_vblank_simulate: vblank timer overrun
[  928.241414][T18640] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  928.242816][   T30] audit: type=1326 audit(1749126741.278:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  928.295572][   T30] audit: type=1326 audit(1749126741.278:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  928.320674][   T30] audit: type=1326 audit(1749126741.288:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  929.191441][   T30] audit: type=1326 audit(1749126741.288:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  929.213420][   T30] audit: type=1326 audit(1749126741.288:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  929.256258][   T30] audit: type=1326 audit(1749126741.288:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  929.278288][   T30] audit: type=1326 audit(1749126741.288:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  929.300413][   T30] audit: type=1326 audit(1749126741.288:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  929.322310][   T30] audit: type=1326 audit(1749126741.288:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18635 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[  931.359618][T18769] overlayfs: failed to resolve './file1': -2
[  933.745591][T18788] cgroup: fork rejected by pids controller in /syz2
[  938.168048][T19429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1923'.
[  938.372935][T19428] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  939.647986][T19452] trusted_key: encrypted_key: key user:syz not found
[  940.732283][T15835] libceph: connect (1)[c::]:6789 error -101
[  940.834079][T15835] libceph: mon0 (1)[c::]:6789 connect error
[  941.004726][T19447] ceph: No mds server is up or the cluster is laggy
[  941.091562][ T5883] libceph: connect (1)[c::]:6789 error -101
[  941.097681][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  943.762372][T19509] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1937'.
[  943.902473][ T5956] libceph: connect (1)[c::]:6789 error -101
[  944.080540][T19508] ceph: No mds server is up or the cluster is laggy
[  944.219984][ T5956] libceph: mon0 (1)[c::]:6789 connect error
[  944.767372][ T5883] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  945.108046][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  945.109129][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  945.696847][T19527] trusted_key: encrypted_key: key user:syz not found
[  945.753936][ T5883] usb 6-1: Using ep0 maxpacket: 32
[  947.529213][ T5883] usb 6-1: device descriptor read/all, error -71
[  948.298786][T19563] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1951'.
[  948.805340][T19562] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  951.815885][T19588] trusted_key: encrypted_key: key user:syz not found
[  953.427966][T19609] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present
[  954.852982][ T5883] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  955.381434][ T5883] usb 3-1: Using ep0 maxpacket: 32
[  956.258931][ T5883] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  956.404315][ T5883] usb 3-1: config 0 has no interface number 0
[  956.989677][ T5883] usb 3-1: config 0 interface 12 has no altsetting 0
[  960.387447][T19677] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  961.950998][ T5883] usb 3-1: string descriptor 0 read error: -71
[  961.957994][ T5883] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  962.088132][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.113242][ T5883] usb 3-1: config 0 descriptor??
[  962.124834][ T5883] usb 3-1: can't set config #0, error -71
[  962.142996][ T5883] usb 3-1: USB disconnect, device number 16
[  962.711857][T19697] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present
[  967.481541][T19742] trusted_key: encrypted_key: key user:syz not found
[  968.060042][ T5883] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  968.553090][ T5883] usb 5-1: Using ep0 maxpacket: 32
[  968.684914][ T5883] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  968.721601][ T5883] usb 5-1: config 0 has no interface number 0
[  968.727763][ T5883] usb 5-1: config 0 interface 12 has no altsetting 0
[  974.016009][ T5883] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  974.061697][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.092205][ T5883] usb 5-1: config 0 descriptor??
[  974.108005][ T5883] usb 5-1: can't set config #0, error -71
[  974.128395][ T5883] usb 5-1: USB disconnect, device number 17
[  974.493814][T20499] trusted_key: encrypted_key: key user:syz not found
[  974.510315][ T5956] libceph: connect (1)[c::]:6789 error -101
[  974.573583][ T5956] libceph: mon0 (1)[c::]:6789 connect error
[  975.062161][T20495] ceph: No mds server is up or the cluster is laggy
[  975.080014][ T5956] libceph: connect (1)[c::]:6789 error -101
[  975.090079][ T5956] libceph: mon0 (1)[c::]:6789 connect error
[  975.427794][T20506] binder: 20498:20506 ioctl c0306201 0 returned -14
[  982.481274][T14979] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  982.641151][T14979] usb 2-1: Using ep0 maxpacket: 32
[  984.734644][T20724] binder: 20722:20724 ioctl c0306201 0 returned -14
[  985.237971][T20731] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  987.263550][T14979] usb 2-1: device descriptor read/all, error -71
[  989.368187][T20767] trusted_key: encrypted_key: key user:syz not found
[  990.003302][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  990.003319][   T30] audit: type=1326 audit(1749126803.398:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20762 comm="syz.5.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4798e929 code=0x7fc00000
[  990.038091][    C1] vkms_vblank_simulate: vblank timer overrun
[  990.465962][T20778] binder: 20775:20778 ioctl c0306201 0 returned -14
[  991.025517][T20790] hub 8-0:1.0: USB hub found
[  991.031334][T20790] hub 8-0:1.0: 1 port detected
[  992.688693][ T5883] libceph: connect (1)[c::]:6789 error -101
[  992.694801][T20797] ceph: No mds server is up or the cluster is laggy
[  992.695682][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  993.961145][ T5956] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  994.312258][T17757] Bluetooth: hci5: command 0x0419 tx timeout
[  994.740802][ T5956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  994.892414][ T5956] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  994.933595][ T5956] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  994.944506][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.529864][ T5956] usb 5-1: usb_control_msg returned -32
[  995.573355][ T5956] usbtmc 5-1:16.0: can't read capabilities
[  996.201387][ T5883] usb 5-1: USB disconnect, device number 18
[  996.304985][T20839] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  997.636677][   T30] audit: type=1326 audit(1749126811.018:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.1.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e538e929 code=0x7fc00000
[  997.906851][T20845] binder: 20843:20845 ioctl c0306201 0 returned -14
[ 1001.415945][T20881] ceph: No mds server is up or the cluster is laggy
[ 1001.423561][ T5877] libceph: connect (1)[c::]:6789 error -101
[ 1001.429559][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[ 1001.844997][ T5877] libceph: connect (1)[c::]:6789 error -101
[ 1002.017283][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[ 1002.482832][T20895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2064'.
[ 1003.425247][   T30] audit: type=1326 audit(1749126816.818:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20897 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d978e929 code=0x7fc00000
[ 1003.765797][T20909] binder: 20907:20909 ioctl c0306201 0 returned -14
[ 1005.862233][T20926] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1006.224293][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[ 1006.230703][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[ 1008.652750][T20939] binder: 20937:20939 ioctl c0306201 0 returned -14
[ 1012.141219][   T30] audit: type=1326 audit(1749126825.058:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1012.236123][T20964] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[ 1012.336253][T20969] binder: 20958:20969 ioctl c0306201 0 returned -14
[ 1012.716028][T20970] vivid-000: disconnect
[ 1012.723172][   T30] audit: type=1326 audit(1749126825.058:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1012.746285][   T30] audit: type=1326 audit(1749126825.058:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1012.768351][   T30] audit: type=1326 audit(1749126825.058:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1012.807076][   T30] audit: type=1326 audit(1749126825.058:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1012.901171][   T30] audit: type=1326 audit(1749126825.058:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1012.958749][   T30] audit: type=1326 audit(1749126825.058:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1013.011318][   T30] audit: type=1326 audit(1749126825.058:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1013.074591][T20954] vivid-000: reconnect
[ 1013.089086][   T30] audit: type=1326 audit(1749126825.058:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1013.111208][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1013.133348][   T30] audit: type=1326 audit(1749126825.058:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79258e929 code=0x7fc00000
[ 1014.968756][T20981] siw: device registration error -23
[ 1015.787796][T15835] libceph: connect (1)[c::]:6789 error -101
[ 1016.813519][T15835] libceph: mon0 (1)[c::]:6789 connect error
[ 1016.920258][T20995] ceph: No mds server is up or the cluster is laggy
[ 1018.251939][T17757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1018.265326][T17757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1018.273789][T17757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1018.292319][T17757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1018.302445][T17757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1018.487980][T21011] binder: 21008:21011 ioctl c0306201 0 returned -14
[ 1019.261313][    C0] ------------[ cut here ]------------
[ 1019.267144][    C0] refcount_t: addition on 0; use-after-free.
[ 1019.274588][    C0] WARNING: CPU: 0 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0
[ 1019.283760][    C0] Modules linked in:
[ 1019.287931][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) 
[ 1019.299324][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1019.309485][    C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[ 1019.315688][    C0] Code: 00 00 e8 49 41 06 fd 5b 41 5e e9 d1 4f a7 06 cc e8 3b 41 06 fd c6 05 17 cc cf 0a 01 90 48 c7 c7 00 65 e1 8b e8 87 ef c9 fc 90 <0f> 0b 90 90 eb d7 e8 1b 41 06 fd c6 05 f8 cb cf 0a 01 90 48 c7 c7
[ 1019.335399][    C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246
[ 1019.341585][    C0] RAX: 53dc528b7c407200 RBX: 0000000000000002 RCX: ffffffff8de95280
[ 1019.349595][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[ 1019.357659][    C0] RBP: ffffc900000079b0 R08: 0000000000000003 R09: 0000000000000004
[ 1019.365723][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff88807fcfc100
[ 1019.373777][    C0] R13: dffffc0000000000 R14: ffff88807fcfc26c R15: ffff88807e87c000
[ 1019.381861][    C0] FS:  0000000000000000(0000) GS:ffff888125c89000(0000) knlGS:0000000000000000
[ 1019.390830][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1019.397525][    C0] CR2: 000000110c2aa2b4 CR3: 000000007e33e000 CR4: 00000000003526f0
[ 1019.405601][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1019.413651][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1019.421736][    C0] Call Trace:
[ 1019.425090][    C0]  <IRQ>
[ 1019.427972][    C0]  tipc_crypto_xmit+0x1820/0x22c0
[ 1019.433157][    C0]  ? __pfx_tipc_crypto_xmit+0x10/0x10
[ 1019.438612][    C0]  tipc_bearer_xmit_skb+0x245/0x400
[ 1019.443949][    C0]  ? tipc_bearer_xmit_skb+0xa9/0x400
[ 1019.449280][    C0]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[ 1019.455136][    C0]  tipc_disc_timeout+0x580/0x6d0
[ 1019.460139][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[ 1019.465762][    C0]  call_timer_fn+0x17b/0x5f0
[ 1019.470398][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[ 1019.475953][    C0]  ? call_timer_fn+0xbe/0x5f0
[ 1019.480671][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1019.485894][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1019.491191][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1019.496425][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[ 1019.502007][    C0]  __run_timer_base+0x61a/0x860
[ 1019.506937][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1019.512472][    C0]  run_timer_softirq+0xb7/0x180
[ 1019.517360][    C0]  handle_softirqs+0x286/0x870
[ 1019.522248][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[ 1019.527056][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1019.532427][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1019.537663][    C0]  __irq_exit_rcu+0xca/0x1f0
[ 1019.542338][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1019.547594][    C0]  irq_exit_rcu+0x9/0x30
[ 1019.551963][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1019.557638][    C0]  </IRQ>
[ 1019.560603][    C0]  <TASK>
[ 1019.563637][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1019.569659][    C0] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90
[ 1019.575768][    C0] Code: cc e8 91 8d cb 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 eb 16 e8 c4 10 ce 09 e8 7f dc 34 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc f3 0f 1e fa 49 be 00 00 00 00 00 fc
[ 1019.595518][    C0] RSP: 0018:ffffffff8de07b48 EFLAGS: 00000286
[ 1019.601705][    C0] RAX: 53dc528b7c407200 RBX: ffff8880b863c5d8 RCX: 53dc528b7c407200
[ 1019.609743][    C0] RDX: 0000000000000000 RSI: ffffffff8d96923c RDI: ffffffff8be1af80
[ 1019.617870][    C0] RBP: ffffffff8de07d70 R08: ffffffff8f9fd5f7 R09: 1ffffffff1f3fabe
[ 1019.625930][    C0] R10: dffffc0000000000 R11: fffffbfff1f3fabf R12: ffffffff8de95280
[ 1019.633983][    C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8880b863c5d8
[ 1019.642173][    C0]  __schedule+0x18f5/0x4cb0
[ 1019.646758][    C0]  ? schedule_idle+0x52/0x90
[ 1019.651458][    C0]  ? __pfx___schedule+0x10/0x10
[ 1019.656379][    C0]  ? flush_smp_call_function_queue+0x116/0x250
[ 1019.662664][    C0]  ? __pfx_tick_nohz_idle_exit+0x10/0x10
[ 1019.668362][    C0]  schedule_idle+0x52/0x90
[ 1019.672914][    C0]  do_idle+0x4ad/0x510
[ 1019.677033][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1019.682361][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1019.687002][    C0]  ? do_idle+0x10/0x510
[ 1019.691293][    C0]  cpu_startup_entry+0x44/0x60
[ 1019.696102][    C0]  rest_init+0x2de/0x300
[ 1019.700386][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1019.706012][    C0]  start_kernel+0x47d/0x500
[ 1019.710559][    C0]  x86_64_start_reservations+0x24/0x30
[ 1019.716140][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1019.721353][    C0]  common_startup_64+0x13e/0x147
[ 1019.726363][    C0]  </TASK>
[ 1019.729456][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1019.736730][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) 
[ 1019.747991][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1019.758097][    C0] Call Trace:
[ 1019.761362][    C0]  <IRQ>
[ 1019.764187][    C0]  dump_stack_lvl+0x99/0x250
[ 1019.768781][    C0]  ? __asan_memcpy+0x40/0x70
[ 1019.773363][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1019.778553][    C0]  ? __pfx__printk+0x10/0x10
[ 1019.783136][    C0]  panic+0x2db/0x790
[ 1019.787034][    C0]  ? __pfx_panic+0x10/0x10
[ 1019.791447][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1019.796641][    C0]  ? __warn+0x303/0x4b0
[ 1019.800793][    C0]  __warn+0x31b/0x4b0
[ 1019.804759][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1019.810209][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1019.815647][    C0]  report_bug+0x2be/0x4f0
[ 1019.819971][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1019.825411][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1019.830853][    C0]  ? refcount_warn_saturate+0xfc/0x1d0
[ 1019.836295][    C0]  handle_bug+0x84/0x160
[ 1019.840523][    C0]  exc_invalid_op+0x1a/0x50
[ 1019.845022][    C0]  asm_exc_invalid_op+0x1a/0x20
[ 1019.849856][    C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[ 1019.855918][    C0] Code: 00 00 e8 49 41 06 fd 5b 41 5e e9 d1 4f a7 06 cc e8 3b 41 06 fd c6 05 17 cc cf 0a 01 90 48 c7 c7 00 65 e1 8b e8 87 ef c9 fc 90 <0f> 0b 90 90 eb d7 e8 1b 41 06 fd c6 05 f8 cb cf 0a 01 90 48 c7 c7
[ 1019.875510][    C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246
[ 1019.881564][    C0] RAX: 53dc528b7c407200 RBX: 0000000000000002 RCX: ffffffff8de95280
[ 1019.889525][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[ 1019.897480][    C0] RBP: ffffc900000079b0 R08: 0000000000000003 R09: 0000000000000004
[ 1019.905432][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff88807fcfc100
[ 1019.913386][    C0] R13: dffffc0000000000 R14: ffff88807fcfc26c R15: ffff88807e87c000
[ 1019.921359][    C0]  ? refcount_warn_saturate+0xf9/0x1d0
[ 1019.926801][    C0]  tipc_crypto_xmit+0x1820/0x22c0
[ 1019.931819][    C0]  ? __pfx_tipc_crypto_xmit+0x10/0x10
[ 1019.937197][    C0]  tipc_bearer_xmit_skb+0x245/0x400
[ 1019.942384][    C0]  ? tipc_bearer_xmit_skb+0xa9/0x400
[ 1019.947664][    C0]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[ 1019.953374][    C0]  tipc_disc_timeout+0x580/0x6d0
[ 1019.958320][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[ 1019.963778][    C0]  call_timer_fn+0x17b/0x5f0
[ 1019.968357][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[ 1019.973798][    C0]  ? call_timer_fn+0xbe/0x5f0
[ 1019.978461][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1019.983563][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1019.988746][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1019.993931][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[ 1019.999374][    C0]  __run_timer_base+0x61a/0x860
[ 1020.004216][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1020.009578][    C0]  run_timer_softirq+0xb7/0x180
[ 1020.014413][    C0]  handle_softirqs+0x286/0x870
[ 1020.019171][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[ 1020.023923][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1020.029197][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1020.034392][    C0]  __irq_exit_rcu+0xca/0x1f0
[ 1020.038978][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1020.044262][    C0]  irq_exit_rcu+0x9/0x30
[ 1020.048527][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1020.054164][    C0]  </IRQ>
[ 1020.057096][    C0]  <TASK>
[ 1020.060080][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1020.066061][    C0] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90
[ 1020.072037][    C0] Code: cc e8 91 8d cb 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 eb 16 e8 c4 10 ce 09 e8 7f dc 34 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc f3 0f 1e fa 49 be 00 00 00 00 00 fc
[ 1020.091639][    C0] RSP: 0018:ffffffff8de07b48 EFLAGS: 00000286
[ 1020.097698][    C0] RAX: 53dc528b7c407200 RBX: ffff8880b863c5d8 RCX: 53dc528b7c407200
[ 1020.105655][    C0] RDX: 0000000000000000 RSI: ffffffff8d96923c RDI: ffffffff8be1af80
[ 1020.113613][    C0] RBP: ffffffff8de07d70 R08: ffffffff8f9fd5f7 R09: 1ffffffff1f3fabe
[ 1020.121567][    C0] R10: dffffc0000000000 R11: fffffbfff1f3fabf R12: ffffffff8de95280
[ 1020.129522][    C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8880b863c5d8
[ 1020.137489][    C0]  __schedule+0x18f5/0x4cb0
[ 1020.141992][    C0]  ? schedule_idle+0x52/0x90
[ 1020.146564][    C0]  ? __pfx___schedule+0x10/0x10
[ 1020.151400][    C0]  ? flush_smp_call_function_queue+0x116/0x250
[ 1020.157540][    C0]  ? __pfx_tick_nohz_idle_exit+0x10/0x10
[ 1020.163161][    C0]  schedule_idle+0x52/0x90
[ 1020.167564][    C0]  do_idle+0x4ad/0x510
[ 1020.171619][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1020.176800][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1020.181385][    C0]  ? do_idle+0x10/0x510
[ 1020.185529][    C0]  cpu_startup_entry+0x44/0x60
[ 1020.190276][    C0]  rest_init+0x2de/0x300
[ 1020.194502][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1020.200032][    C0]  start_kernel+0x47d/0x500
[ 1020.204521][    C0]  x86_64_start_reservations+0x24/0x30
[ 1020.209962][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1020.215060][    C0]  common_startup_64+0x13e/0x147
[ 1020.219987][    C0]  </TASK>
[ 1020.223237][    C0] Kernel Offset: disabled
[ 1020.227553][    C0] Rebooting in 86400 seconds..