last executing test programs:

3m59.88012202s ago: executing program 4 (id=1052):
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xc0000)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c00000015000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000000a0010000200000000000000"], 0x5c}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18)
preadv(r1, &(0x7f0000001200)=[{0x0}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000b40)=""/64, 0x40}, {0x0}, {&(0x7f0000000f40)=""/240, 0xf0}, {&(0x7f0000000c00)}, {&(0x7f0000001040)=""/226, 0xe2}, {&(0x7f0000001140)=""/179, 0xb3}], 0x8, 0x0, 0xffffffff)
sendmsg$nl_netfilter(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x14}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x40)
getpgrp(0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
getgroups(0x1, &(0x7f0000000a00)=[0xffffffffffffffff])
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000c40)=""/192, &(0x7f0000000d00)=0x8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
accept4(r0, 0x0, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r6, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x4)

3m56.878467846s ago: executing program 4 (id=1062):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x8, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006c0000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m56.488128678s ago: executing program 4 (id=1064):
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4a9, &(0x7f0000000b40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
close(0xffffffffffffffff)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000], 0x1, 0x400})

3m54.269544089s ago: executing program 4 (id=1068):
shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15)
ioctl$TCFLSH(r3, 0xc0384707, 0x20000000)

3m50.921488387s ago: executing program 4 (id=1079):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x40)
r4 = socket$caif_seqpacket(0x25, 0x5, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0)

3m49.448505777s ago: executing program 4 (id=1080):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x1d, 0x3, 0x4)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x3c}}, 0x0)
sendmsg$key(r2, 0x0, 0x40084)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)

3m34.094073585s ago: executing program 32 (id=1080):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x1d, 0x3, 0x4)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x3c}}, 0x0)
sendmsg$key(r2, 0x0, 0x40084)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)

30.680974969s ago: executing program 5 (id=1662):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(0xffffffffffffffff, 0x40087101, 0x20001100)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000100)="c44060c1d081382bc2cc31ff94e37574", 0x10)
listen(r3, 0x0)
shutdown(r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)

30.530736603s ago: executing program 2 (id=1664):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000440)={0xca, 0xff}, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0))
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000340)={0x0})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xfffffdef}}, 0x0)

29.587189909s ago: executing program 5 (id=1665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9f268000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r5}, 0x10)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe000}, 0x5}], 0x1, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r0], 0x1c}}, 0xe6a4d86a3a7a1790)

27.962080923s ago: executing program 5 (id=1669):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_STOP(r5, 0x5403)

26.95677252s ago: executing program 5 (id=1672):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r1, r0, 0x0, 0x80000000)

26.26465846s ago: executing program 1 (id=1673):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0)

26.179513203s ago: executing program 3 (id=1674):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f000018e000/0x3000)=nil, 0x3000, 0x1)
r2 = io_uring_setup(0x3450, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002700)=""/4118, 0x1000}], 0x0, 0x34}, 0x20)

26.162415088s ago: executing program 5 (id=1675):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(0xffffffffffffffff, 0x40087101, 0x20001100)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000100)="c44060c1d081382bc2cc31ff94e37574", 0x10)
listen(r3, 0x0)
shutdown(r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)

26.036470677s ago: executing program 1 (id=1676):
timerfd_create(0x4, 0x81800)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000012c0)='bbr\x00', 0x4)
pipe2(&(0x7f0000000000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x44)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x4000011)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f6, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x80c0}, 0xc0)
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000380)=0x85000)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x63, 0x0, 0x3631564e, 0x5, 0x6, [{0x8, 0x27}, {0x7, 0x7}, {0x9, 0x54a9}, {0x4, 0x200}, {0xfff, 0x3}, {0xa, 0x58}, {0x0, 0xa}, {0x1, 0xa2}], 0xa, 0x20, 0x3, 0x1, 0x2}})
ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000000)=0xc000c)

25.813488808s ago: executing program 5 (id=1677):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00')

25.794270689s ago: executing program 1 (id=1678):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "460a996ff8a893ca"}}, 0x48}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x4, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x200000000000011, 0x2, 0x0)
setresuid(0x0, 0x0, 0xee00)
socket(0x840000000002, 0x3, 0xff)
connect(r0, &(0x7f00000004c0)=@rc={0x1f, @any, 0x8}, 0x80)
shutdown(r0, 0x1)
openat$vcs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

25.235674317s ago: executing program 33 (id=1677):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00')

25.221018282s ago: executing program 2 (id=1680):
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$packet(0x11, 0x3, 0x300)
r0 = syz_io_uring_setup(0xecd, &(0x7f00000008c0)={0x0, 0x8000, 0x100}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x10a5, 0x10a5, 0x3, 0x0, 0x0)
io_uring_enter(r0, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0)
io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, 0x0, 0x800)

25.220629655s ago: executing program 3 (id=1681):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200))

24.887712057s ago: executing program 2 (id=1682):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
fchdir(0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_STOP(r4, 0x5403)

24.861613483s ago: executing program 3 (id=1683):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859224ad54afac1f2875397bdb22d0000b445a1a93c01000000000000007d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x2]}})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x0, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="1860000000000000f306855925"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)

24.11626179s ago: executing program 0 (id=1684):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000008000000000000000100000d000000000400000001000000000000002e2f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

24.114315744s ago: executing program 3 (id=1685):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)

23.79713173s ago: executing program 2 (id=1686):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0)

23.774477273s ago: executing program 3 (id=1687):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(0xffffffffffffffff, 0x40087101, 0x20001100)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000100)="c44060c1d081382bc2cc31ff94e37574", 0x10)
listen(r3, 0x0)
shutdown(r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)

23.720626521s ago: executing program 0 (id=1688):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6b2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x5000, 0x200})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23.660826979s ago: executing program 2 (id=1689):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000300b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

23.563758954s ago: executing program 2 (id=1690):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000440)={0xca, 0xff}, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0))
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000340)={0x0})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xfffffdef}}, 0x0)

23.02066082s ago: executing program 0 (id=1691):
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
setreuid(0x0, 0xee00)
writev(r0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0])

23.020440108s ago: executing program 3 (id=1692):
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e"], 0x0)

22.815124286s ago: executing program 34 (id=1692):
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e"], 0x0)

22.767455739s ago: executing program 0 (id=1694):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(0x4)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0x3000, 0x11000, 0x8})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$packet(r4, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15", 0x1b, 0x0, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22.643922658s ago: executing program 1 (id=1695):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
fchdir(0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_STOP(r4, 0x5403)

21.523518535s ago: executing program 1 (id=1696):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)

21.449391125s ago: executing program 0 (id=1697):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x29, 0x11, &(0x7f0000000340), 0x8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setresuid(0x0, 0x0, 0xee00)
socket(0x840000000002, 0x3, 0xff)
connect(r1, &(0x7f00000004c0)=@rc={0x1f, @any, 0x8}, 0x80)
capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00))
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
rt_tgsigqueueinfo(0x0, 0x0, 0x6, &(0x7f0000000440)={0x18, 0xd6d, 0x372})

20.211090629s ago: executing program 0 (id=1698):
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getrlimit(0xd, &(0x7f0000000180))
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e})
sigaltstack(&(0x7f0000000040)={0x0}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c00)=""/4111, 0x100f}], 0x1}}], 0x1, 0x122, 0x0)
r5 = socket(0x15, 0x5, 0x0)
getsockopt$nfc_llcp(r5, 0x114, 0x2721, 0x0, 0x20000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='vxfs\x00', 0x18642, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

20.143483333s ago: executing program 1 (id=1699):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000300b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.633749854s ago: executing program 35 (id=1690):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000440)={0xca, 0xff}, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0))
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000340)={0x0})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xfffffdef}}, 0x0)

923.087422ms ago: executing program 36 (id=1698):
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getrlimit(0xd, &(0x7f0000000180))
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e})
sigaltstack(&(0x7f0000000040)={0x0}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c00)=""/4111, 0x100f}], 0x1}}], 0x1, 0x122, 0x0)
r5 = socket(0x15, 0x5, 0x0)
getsockopt$nfc_llcp(r5, 0x114, 0x2721, 0x0, 0x20000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='vxfs\x00', 0x18642, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

0s ago: executing program 37 (id=1699):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000300b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

][ T5900] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  237.542851][ T5900] usb 3-1: Using ep0 maxpacket: 16
[  237.646852][ T7957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.561'.
[  238.384707][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  238.398054][ T5900] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  238.407416][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.423640][ T5900] usb 3-1: config 0 descriptor??
[  238.557605][ T7969] syz.1.564: attempt to access beyond end of device
[  238.557605][ T7969] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  238.570532][ T7969] exFAT-fs (nbd1): unable to read boot sector
[  238.583182][ T7969] exFAT-fs (nbd1): failed to read boot sector
[  238.589622][ T7969] exFAT-fs (nbd1): failed to recognize exfat type
[  238.729964][ T5900] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19
[  238.741374][ T5208] bcm5974 3-1:0.0: could not read from device
[  238.744876][ T5900] usb 3-1: USB disconnect, device number 14
[  238.758493][ T5208] bcm5974 3-1:0.0: could not read from device
[  238.851672][ T7973] binder: BINDER_SET_CONTEXT_MGR already set
[  238.857826][ T7973] binder: 7963:7973 ioctl 4018620d 20000100 returned -16
[  239.493628][ T7976] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000001777777777777777777777'
[  239.561261][ T7977] loop1: detected capacity change from 0 to 512
[  239.583178][ T7977] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.565: invalid indirect mapped block 256 (level 2)
[  239.620247][ T7977] EXT4-fs (loop1): 2 truncates cleaned up
[  239.647228][ T7977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.813417][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.150697][ T8013] overlayfs: failed to resolve './file1': -2
[  242.659539][ T8021] syz.0.576: attempt to access beyond end of device
[  242.659539][ T8021] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[  242.673099][ T8021] exFAT-fs (nbd0): unable to read boot sector
[  242.679892][ T8021] exFAT-fs (nbd0): failed to read boot sector
[  242.686126][ T8021] exFAT-fs (nbd0): failed to recognize exfat type
[  243.181686][ T8026] syz.2.578[8026] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  243.184025][ T8026] syz.2.578[8026] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  243.230815][ T8026] syz.2.578[8026] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  247.057483][ T8063] 9pnet_fd: Insufficient options for proto=fd
[  247.151387][ T8069] syz.2.591: attempt to access beyond end of device
[  247.151387][ T8069] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  247.164386][ T8069] exFAT-fs (nbd2): unable to read boot sector
[  247.170485][ T8069] exFAT-fs (nbd2): failed to read boot sector
[  247.176662][ T8069] exFAT-fs (nbd2): failed to recognize exfat type
[  247.547463][ T8078] binder: 8072:8078 ioctl c0306201 0 returned -14
[  248.617265][ T8081] xt_nat: multiple ranges no longer supported
[  251.707100][ T8112] 9pnet_fd: Insufficient options for proto=fd
[  253.395815][ T8122] syz.4.608: attempt to access beyond end of device
[  253.395815][ T8122] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  253.408881][ T8122] (syz.4.608,8122,1):ocfs2_get_sector:1769 ERROR: status = -5
[  253.416480][ T8122] (syz.4.608,8122,1):ocfs2_sb_probe:749 ERROR: status = -5
[  253.423753][ T8122] (syz.4.608,8122,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  253.432854][ T8122] (syz.4.608,8122,1):ocfs2_fill_super:1178 ERROR: status = -5
[  253.510140][ T8133] binder: 8128:8133 ioctl c0306201 0 returned -14
[  253.544928][ T8132] syz.3.607: attempt to access beyond end of device
[  253.544928][ T8132] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  253.558589][ T8132] exFAT-fs (nbd3): unable to read boot sector
[  253.565010][ T8132] exFAT-fs (nbd3): failed to read boot sector
[  253.571413][ T8132] exFAT-fs (nbd3): failed to recognize exfat type
[  254.432013][ T8141] xt_nat: multiple ranges no longer supported
[  255.148325][    C1] sd 0:0:1:0: [sda] tag#4943 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  255.158782][    C1] sd 0:0:1:0: [sda] tag#4943 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  255.874873][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.881456][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  258.717877][ T8174] input: syz0 as /devices/virtual/input/input20
[  259.517780][ T8182] binder: 8170:8182 ioctl c0306201 0 returned -14
[  260.514218][ T8186] netlink: 312 bytes leftover after parsing attributes in process `syz.3.623'.
[  261.612865][ T5898] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  262.952958][ T5898] usb 2-1: Using ep0 maxpacket: 8
[  263.385029][ T5898] usb 2-1: config 1 has an invalid descriptor of length 88, skipping remainder of the config
[  263.418446][ T8206] 8021q: adding VLAN 0 to HW filter on device bond1
[  263.452088][ T5898] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  263.466144][ T5898] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  263.475300][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.483803][ T5898] usb 2-1: Product: syz
[  263.487996][ T5898] usb 2-1: Manufacturer: syz
[  263.492607][ T5898] usb 2-1: SerialNumber: syz
[  263.574000][ T8210] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000001777777777777777777777'
[  263.598709][ T8210] loop3: detected capacity change from 0 to 512
[  263.649493][ T5898] usb 2-1: USB disconnect, device number 12
[  263.879560][ T8210] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.629: invalid indirect mapped block 256 (level 2)
[  264.102190][ T8210] EXT4-fs (loop3): 2 truncates cleaned up
[  264.391308][ T8210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.676361][ T5858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.994297][ T8256] Invalid source name
[  270.011935][ T8256] UBIFS error (pid: 8256): cannot open "./file0", error -22
[  275.276301][    T9] IPVS: starting estimator thread 0...
[  275.571774][ T8298] IPVS: using max 19 ests per chain, 45600 per kthread
[  276.770124][ T8314] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  276.788943][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'.
[  276.843973][   T62] Bluetooth: hci11: Frame reassembly failed (-84)
[  278.592980][ T8336] xt_nat: multiple ranges no longer supported
[  278.965103][ T5856] Bluetooth: hci11: Opcode 0x1003 failed: -110
[  280.860758][ T8355] syz.4.670: attempt to access beyond end of device
[  280.860758][ T8355] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  280.874463][ T8355] exFAT-fs (nbd4): unable to read boot sector
[  280.880562][ T8355] exFAT-fs (nbd4): failed to read boot sector
[  280.886688][ T8355] exFAT-fs (nbd4): failed to recognize exfat type
[  281.328340][ T8358] 9pnet: Could not find request transport: fd0x0000000000000003
[  281.454983][ T8376] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  282.462799][ T8389] syz.4.682: attempt to access beyond end of device
[  282.462799][ T8389] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  282.475543][ T8389] exFAT-fs (nbd4): unable to read boot sector
[  282.481654][ T8389] exFAT-fs (nbd4): failed to read boot sector
[  282.488078][ T8389] exFAT-fs (nbd4): failed to recognize exfat type
[  282.928587][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  283.204566][    T9] usb 3-1: Using ep0 maxpacket: 8
[  283.230131][    T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  283.327447][    T9] usb 3-1: config 0 has no interface number 0
[  283.469653][    T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  283.480793][    T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  283.492500][    T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  283.503671][    T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  283.516796][    T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  283.525939][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.546838][    T9] usb 3-1: config 0 descriptor??
[  284.282548][ T8404] 9pnet: Could not find request transport: fd0x0000000000000003
[  284.397558][    T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  284.413892][    T9] usb 3-1: USB disconnect, device number 15
[  284.429375][    T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  285.167255][ T8433] syz.2.695: attempt to access beyond end of device
[  285.167255][ T8433] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  285.182022][ T8433] exFAT-fs (nbd2): unable to read boot sector
[  285.188222][ T8433] exFAT-fs (nbd2): failed to read boot sector
[  285.194381][ T8433] exFAT-fs (nbd2): failed to recognize exfat type
[  286.412484][ T8448] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.699'.
[  289.543079][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  290.087879][    T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  290.097044][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.144051][    T9] usb 2-1: config 0 descriptor??
[  290.222937][   T29] audit: type=1326 audit(1730321859.911:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0079b7e719 code=0x7ffc0000
[  290.246957][   T29] audit: type=1326 audit(1730321859.911:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0079b7e719 code=0x7ffc0000
[  290.270005][   T29] audit: type=1326 audit(1730321859.931:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0079b7e719 code=0x7ffc0000
[  290.292871][   T29] audit: type=1326 audit(1730321859.941:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0079b7e753 code=0x7ffc0000
[  290.315456][   T29] audit: type=1326 audit(1730321859.941:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0079b7e753 code=0x7ffc0000
[  290.337734][   T29] audit: type=1326 audit(1730321859.951:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0079b7e719 code=0x7ffc0000
[  290.672918][ T5900] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  291.820309][ T8498] syz.0.712: attempt to access beyond end of device
[  291.820309][ T8498] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0
[  291.834909][ T8498] XFS (nbd0): SB validate failed with error -5.
[  291.852982][    T9] usb 2-1: Cannot set autoneg
[  291.906854][    T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  292.095450][    T9] usb 2-1: USB disconnect, device number 13
[  292.952821][ T5900] usb 3-1: Using ep0 maxpacket: 16
[  292.960316][ T5900] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  292.968864][ T5900] usb 3-1: config 0 has no interface number 0
[  292.975081][ T5900] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  292.985089][ T5900] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  292.997377][ T5900] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  293.006609][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.014693][ T5900] usb 3-1: Product: syz
[  293.018867][ T5900] usb 3-1: Manufacturer: syz
[  293.023527][ T5900] usb 3-1: SerialNumber: syz
[  293.100855][ T5900] usb 3-1: config 0 descriptor??
[  293.109484][ T8481] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  293.141599][ T8481] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  294.018574][ T5900] asix 3-1:0.251: probe with driver asix failed with error -71
[  294.037147][ T5900] usb 3-1: USB disconnect, device number 16
[  294.266599][ T8522] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  295.052857][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  295.205382][    T8] usb 4-1: Using ep0 maxpacket: 8
[  295.215793][    T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  295.224271][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  295.260809][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  295.332780][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  295.373698][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  295.387319][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  295.396812][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.603654][ T5929] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  295.631279][    T8] usb 4-1: usb_control_msg returned -32
[  295.679842][    T8] usbtmc 4-1:16.0: can't read capabilities
[  295.774854][ T5929] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  295.808852][ T5929] usb 3-1: config 0 has no interface number 0
[  295.845695][ T5929] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  295.885407][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.903551][ T5929] usb 3-1: Product: syz
[  295.907756][ T5929] usb 3-1: Manufacturer: syz
[  295.912363][ T5929] usb 3-1: SerialNumber: syz
[  295.969451][ T5929] usb 3-1: config 0 descriptor??
[  296.053028][    T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  296.790877][ T5929] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  296.862272][ T5929] usb 3-1: USB disconnect, device number 17
[  297.209879][ T5929] usb 4-1: USB disconnect, device number 11
[  298.101407][   T29] audit: type=1326 audit(1730321867.791:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  298.130694][   T29] audit: type=1326 audit(1730321867.791:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  298.164227][   T29] audit: type=1326 audit(1730321867.791:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  298.192351][   T29] audit: type=1326 audit(1730321867.791:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  299.100378][   T29] audit: type=1326 audit(1730321867.791:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  299.142924][   T29] audit: type=1326 audit(1730321867.791:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  299.165130][    T8] usb 1-1: device descriptor read/64, error -71
[  299.171859][   T29] audit: type=1326 audit(1730321867.791:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  299.194130][   T29] audit: type=1326 audit(1730321867.801:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  299.329429][   T29] audit: type=1326 audit(1730321867.801:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  299.351625][   T29] audit: type=1326 audit(1730321867.801:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79ed7e719 code=0x7ffc0000
[  299.800961][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.747'.
[  299.858555][    T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  300.208628][    T8] usb 1-1: Using ep0 maxpacket: 16
[  300.236513][    T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  300.250173][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  300.261225][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  300.272160][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  300.281386][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.289645][    T8] usb 1-1: Product: syz
[  300.295258][    T8] usb 1-1: Manufacturer: syz
[  300.299949][    T8] usb 1-1: SerialNumber: syz
[  301.070053][    T8] usb 1-1: 0:2 : does not exist
[  301.098600][    T8] usb 1-1: USB disconnect, device number 16
[  301.154870][ T8627] netlink: 'syz.3.756': attribute type 29 has an invalid length.
[  301.184347][ T8627] netlink: 'syz.3.756': attribute type 29 has an invalid length.
[  301.258817][ T8630] syz.1.746: attempt to access beyond end of device
[  301.258817][ T8630] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0
[  301.474471][ T6592] udevd[6592]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  302.301601][ T8630] SQUASHFS error: Failed to read block 0x0: -5
[  302.403526][ T8630] unable to read squashfs_super_block
[  303.762009][ T8644] sctp: failed to load transform for md5: -2
[  304.893329][ T8679] binder: 8672:8679 ioctl c0306201 0 returned -14
[  306.530317][ T8752] Bluetooth: MGMT ver 1.23
[  307.101399][ T8752] Illegal XDP return value 4294967262 on prog  (id 171) dev N/A, expect packet loss!
[  307.164894][ T5900] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  307.379108][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  307.446767][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  307.469708][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  307.481291][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  307.495374][ T5900] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  307.504985][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.513296][ T5900] usb 5-1: Product: syz
[  307.517570][ T5900] usb 5-1: Manufacturer: syz
[  307.522203][ T5900] usb 5-1: SerialNumber: syz
[  307.552816][  T972] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  307.582447][ T8763] xt_nat: multiple ranges no longer supported
[  307.864898][ T5900] usb 5-1: config 0 descriptor??
[  307.884124][ T5900] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  307.897447][  T972] usb 1-1: device descriptor read/all, error -71
[  308.140663][ T5900] scsi host1: usb-storage 5-1:0.0
[  308.152975][ T5900] usb 5-1: USB disconnect, device number 20
[  308.262533][ T8770] syz.0.781: attempt to access beyond end of device
[  308.262533][ T8770] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  308.303193][ T8770] SQUASHFS error: Failed to read block 0x0: -5
[  308.323566][ T8770] unable to read squashfs_super_block
[  308.474318][ T8685] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  313.103061][ T5929] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  313.263904][ T5929] usb 3-1: Using ep0 maxpacket: 16
[  313.291770][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  313.304964][    T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  313.332462][ T5929] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  313.347204][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.373615][ T5929] usb 3-1: config 0 descriptor??
[  313.386985][ T5929] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22
[  313.419871][ T8830] vivid-007: disconnect
[  313.430308][ T8829] vivid-007: reconnect
[  313.473358][    T8] usb 2-1: Using ep0 maxpacket: 16
[  313.491551][    T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  313.504043][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.522162][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  313.549894][    T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  313.607256][ T5208] bcm5974 3-1:0.0: could not read from device
[  313.613515][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.621536][    T8] usb 2-1: Product: syz
[  313.634194][    T8] usb 2-1: Manufacturer: syz
[  313.639040][    T8] usb 2-1: SerialNumber: syz
[  313.656423][ T5208] bcm5974 3-1:0.0: could not read from device
[  313.698322][ T5929] bcm5974 3-1:0.0: could not read from device
[  313.810108][ T5208] bcm5974 3-1:0.0: could not read from device
[  313.890608][ T5929] input: failed to attach handler mousedev to device input22, error: -5
[  313.895766][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.803'.
[  313.923182][ T5208] bcm5974 3-1:0.0: could not read from device
[  313.940861][ T5208] bcm5974 3-1:0.0: could not read from device
[  314.178923][ T5929] usb 3-1: USB disconnect, device number 18
[  314.221139][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'.
[  314.542964][    T8] usb 2-1: 0:2 : does not exist
[  314.641739][    T8] usb 2-1: USB disconnect, device number 14
[  314.803515][   T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  314.854243][ T6592] udevd[6592]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  314.932855][ T5900] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  314.983464][   T25] usb 3-1: Using ep0 maxpacket: 32
[  314.998258][   T25] usb 3-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=62.d8
[  315.007687][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.017117][   T25] usb 3-1: Product: syz
[  315.021429][   T25] usb 3-1: Manufacturer: syz
[  315.026197][   T25] usb 3-1: SerialNumber: syz
[  315.035573][   T25] usb 3-1: config 0 descriptor??
[  315.043056][   T25] usb 3-1: unsupported MDLM descriptors
[  315.093308][ T5900] usb 5-1: Using ep0 maxpacket: 32
[  315.113684][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  315.148809][ T5900] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  315.161804][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.170002][ T5900] usb 5-1: Product: syz
[  315.175195][ T5900] usb 5-1: Manufacturer: syz
[  315.179942][ T5900] usb 5-1: SerialNumber: syz
[  315.194724][ T5900] usb 5-1: config 0 descriptor??
[  315.200329][ T8857] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  315.210820][ T5900] hub 5-1:0.0: bad descriptor, ignoring hub
[  315.219942][ T5900] hub 5-1:0.0: probe with driver hub failed with error -5
[  315.229473][ T5900] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23
[  315.438843][   T25] usb 3-1: USB disconnect, device number 19
[  315.502473][    T8] usb 5-1: USB disconnect, device number 21
[  315.502492][    C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  315.632253][ T8867] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  315.643579][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'.
[  315.655021][   T11] Bluetooth: hci12: Frame reassembly failed (-84)
[  315.775501][ T8871] can: request_module (can-proto-4) failed.
[  316.120738][ T8882] loop4: detected capacity change from 0 to 64
[  316.134468][ T8882] hfs: Bad value for 'file_umask'
[  316.155590][ T8882] loop4: detected capacity change from 0 to 8
[  316.493732][ T8886] SQUASHFS error: Failed to read block 0x8f: -5
[  316.504645][ T8886] SQUASHFS error: Failed to read block 0xc00090: -5
[  316.511557][ T8886] SQUASHFS error: Failed to read block 0x8f: -5
[  316.518272][ T8886] SQUASHFS error: Failed to read block 0x8f: -5
[  316.524974][ T8886] SQUASHFS error: Failed to read block 0x8f: -5
[  316.531504][ T8886] SQUASHFS error: Failed to read block 0x8f: -5
[  316.548625][ T8886] SQUASHFS error: Failed to read block 0x8f: -5
[  316.622855][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  316.622896][   T29] audit: type=1800 audit(1730321886.251:137): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.818" name="file2" dev="loop4" ino=6 res=0 errno=0
[  317.152970][   T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  317.318561][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.325740][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.333794][   T25] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  317.352809][   T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  317.373163][   T25] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  317.392525][   T25] usb 2-1: config 1 has no interface number 1
[  317.398810][   T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  317.421932][   T25] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 38, changing to 7
[  317.491908][   T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  317.505936][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.542648][   T25] usb 2-1: Product: syz
[  317.558552][   T25] usb 2-1: Manufacturer: syz
[  317.598017][   T25] usb 2-1: SerialNumber: syz
[  317.773124][ T5856] Bluetooth: hci12: Opcode 0x1003 failed: -110
[  318.363782][   T25] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  318.633852][   T25] usb 2-1: USB disconnect, device number 15
[  319.451045][ T8912] netlink: 200 bytes leftover after parsing attributes in process `syz.0.829'.
[  319.471692][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'.
[  319.522185][ T8915] can: request_module (can-proto-4) failed.
[  319.577457][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  319.912017][ T8926] loop1: detected capacity change from 0 to 64
[  319.919179][ T8926] hfs: Bad value for 'file_umask'
[  320.084353][ T8926] loop1: detected capacity change from 0 to 8
[  320.193080][   T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  320.705837][   T25] usb 1-1: Using ep0 maxpacket: 16
[  320.824621][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  321.062508][ T8933] SQUASHFS error: Failed to read block 0x8f: -5
[  321.072274][ T8933] SQUASHFS error: Failed to read block 0xc00090: -5
[  321.079611][ T8933] SQUASHFS error: Failed to read block 0x8f: -5
[  321.086403][ T8933] SQUASHFS error: Failed to read block 0x8f: -5
[  321.093090][ T8933] SQUASHFS error: Failed to read block 0x8f: -5
[  321.099645][ T8933] SQUASHFS error: Failed to read block 0x8f: -5
[  321.118195][ T8933] SQUASHFS error: Failed to read block 0x8f: -5
[  321.158450][   T29] audit: type=1800 audit(1730321890.821:138): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.831" name="file2" dev="loop1" ino=6 res=0 errno=0
[  321.383639][   T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  321.435186][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.489202][   T25] usb 1-1: config 0 descriptor??
[  321.517558][   T25] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24
[  321.744653][ T8948] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  321.752305][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'.
[  321.770904][ T3473] Bluetooth: hci13: Frame reassembly failed (-84)
[  322.022986][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  322.140880][   T25] bcm5974 1-1:0.0: could not read from device
[  322.151869][ T5208] bcm5974 1-1:0.0: could not read from device
[  322.175010][   T25] input: failed to attach handler mousedev to device input24, error: -5
[  322.206000][ T5208] bcm5974 1-1:0.0: could not read from device
[  322.213102][ T5929] usb 4-1: Using ep0 maxpacket: 16
[  322.226916][   T25] usb 1-1: USB disconnect, device number 19
[  322.227077][ T5208] bcm5974 1-1:0.0: could not read from device
[  322.256934][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.294489][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  322.318547][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  322.339624][ T5929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  322.356229][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  322.371573][ T5929] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  322.391303][ T5929] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  322.414848][ T5929] usb 4-1: Manufacturer: syz
[  322.431339][ T5929] usb 4-1: config 0 descriptor??
[  322.762218][ T5929] rc_core: IR keymap rc-hauppauge not found
[  322.779230][ T5929] Registered IR keymap rc-empty
[  322.796276][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.837435][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.866873][ T5929] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  322.884685][ T5929] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25
[  322.958570][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.994430][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.033035][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.073199][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.092945][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.133158][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.169700][ T8965] binder: BINDER_SET_CONTEXT_MGR already set
[  323.175964][ T8965] binder: 8953:8965 ioctl 4018620d 20000100 returned -16
[  323.185373][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.223574][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.257309][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.294833][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.325219][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.371641][ T5929] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  323.398296][ T5929] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  323.430056][ T5929] usb 4-1: USB disconnect, device number 12
[  323.814165][ T5856] Bluetooth: hci13: command 0x1003 tx timeout
[  323.823494][ T5162] Bluetooth: hci13: Opcode 0x1003 failed: -110
[  324.444172][ T8974] netlink: 'syz.3.845': attribute type 12 has an invalid length.
[  326.902244][  T972] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  327.062795][  T972] usb 5-1: Using ep0 maxpacket: 16
[  327.069581][  T972] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  327.095883][  T972] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  327.162632][  T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.214935][  T972] usb 5-1: config 0 descriptor??
[  327.239328][  T972] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26
[  327.486879][ T5208] bcm5974 5-1:0.0: could not read from device
[  327.507157][  T972] bcm5974 5-1:0.0: could not read from device
[  327.641541][ T5208] bcm5974 5-1:0.0: could not read from device
[  327.990421][  T972] input: failed to attach handler mousedev to device input26, error: -5
[  328.007677][ T5208] bcm5974 5-1:0.0: could not read from device
[  328.014511][  T972] usb 5-1: USB disconnect, device number 22
[  328.132918][    T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  328.299610][    T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  328.367325][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  328.714867][ T9025] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  328.744702][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  328.812859][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  328.859266][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  328.871710][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.947389][    T8] usb 1-1: config 0 descriptor??
[  329.948604][    T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  329.956170][    T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  329.963747][    T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  329.971176][    T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  329.978642][    T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  329.986768][    T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  330.058826][    T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  331.593006][ T5900] usb 1-1: USB disconnect, device number 20
[  332.138397][ T9054] syz.1.868: attempt to access beyond end of device
[  332.138397][ T9054] loop1: rw=0, sector=64, nr_sectors = 1 limit=0
[  332.139429][ T9054] syz.1.868: attempt to access beyond end of device
[  332.139429][ T9054] loop1: rw=0, sector=256, nr_sectors = 1 limit=0
[  332.139627][ T9054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  332.140419][ T9054] syz.1.868: attempt to access beyond end of device
[  332.140419][ T9054] loop1: rw=0, sector=512, nr_sectors = 1 limit=0
[  332.140571][ T9054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  332.140612][ T9054] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  332.140648][ T9054] UDF-fs: Scanning with blocksize 512 failed
[  332.143515][ T9054] syz.1.868: attempt to access beyond end of device
[  332.143515][ T9054] loop1: rw=0, sector=64, nr_sectors = 2 limit=0
[  332.144157][ T9054] syz.1.868: attempt to access beyond end of device
[  332.144157][ T9054] loop1: rw=0, sector=512, nr_sectors = 2 limit=0
[  332.144310][ T9054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  332.144798][ T9054] syz.1.868: attempt to access beyond end of device
[  332.144798][ T9054] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0
[  332.144957][ T9054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  332.144998][ T9054] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  332.145033][ T9054] UDF-fs: Scanning with blocksize 1024 failed
[  332.146744][ T9054] syz.1.868: attempt to access beyond end of device
[  332.146744][ T9054] loop1: rw=0, sector=64, nr_sectors = 4 limit=0
[  332.147569][ T9054] syz.1.868: attempt to access beyond end of device
[  332.147569][ T9054] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0
[  332.147725][ T9054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  332.148117][ T9054] syz.1.868: attempt to access beyond end of device
[  332.148117][ T9054] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0
[  332.148270][ T9054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  332.148311][ T9054] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  332.148346][ T9054] UDF-fs: Scanning with blocksize 2048 failed
[  332.149636][ T9054] syz.1.868: attempt to access beyond end of device
[  332.149636][ T9054] loop1: rw=0, sector=64, nr_sectors = 8 limit=0
[  332.150201][ T9054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  332.150644][ T9054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  332.150684][ T9054] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  332.150720][ T9054] UDF-fs: Scanning with blocksize 4096 failed
[  332.150752][ T9054] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  333.015389][ T9061] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  333.872979][   T51] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  333.880848][ T5898] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  334.072477][ T9069] 9pnet_fd: p9_fd_create_unix (9069): problem connecting socket: ./file0: -111
[  335.132826][   T51] usb 3-1: Using ep0 maxpacket: 16
[  335.154142][ T9074] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  335.157423][   T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  335.164467][ T9074] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  335.182778][   T51] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  335.191858][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.253141][   T51] usb 3-1: config 0 descriptor??
[  335.302794][ T5898] usb 2-1: device not accepting address 16, error -71
[  335.431434][   T51] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27
[  335.744927][ T9084] netlink: 'syz.1.875': attribute type 1 has an invalid length.
[  335.752662][ T9084] netlink: 'syz.1.875': attribute type 2 has an invalid length.
[  336.172249][   T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  336.184089][   T51] bcm5974 3-1:0.0: could not read from device
[  336.286108][ T5208] bcm5974 3-1:0.0: could not read from device
[  336.298245][   T51] input: failed to attach handler mousedev to device input27, error: -5
[  336.351529][ T5208] bcm5974 3-1:0.0: could not read from device
[  336.359385][   T51] usb 3-1: USB disconnect, device number 20
[  336.432955][   T25] usb 1-1: Using ep0 maxpacket: 16
[  336.448639][ T9090] vxcan1: tx address claim with dest, not broadcast
[  336.462663][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  336.554915][   T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  336.952237][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.989052][   T25] usb 1-1: config 0 descriptor??
[  337.018410][   T25] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28
[  338.562954][ T5208] bcm5974 1-1:0.0: could not read from device
[  338.902871][ T9104] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  338.910568][ T9104] netlink: 'syz.2.883': attribute type 2 has an invalid length.
[  339.032401][ T9102] vivid-000: kernel_thread() failed
[  339.190046][ T5208] bcm5974 1-1:0.0: could not read from device
[  339.266476][   T29] audit: type=1800 audit(1730321908.961:139): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.886" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  339.307652][   T25] bcm5974 1-1:0.0: could not read from device
[  339.333910][   T25] input: failed to attach handler mousedev to device input28, error: -5
[  339.355746][ T5208] bcm5974 1-1:0.0: could not read from device
[  339.400637][   T25] usb 1-1: USB disconnect, device number 21
[  339.495238][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  339.771648][ T9126] xt_nat: multiple ranges no longer supported
[  340.409536][ T9127] xt_hashlimit: max too large, truncated to 1048576
[  340.421527][ T9127] tmpfs: User quota inode hardlimit too large.
[  340.712263][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.723688][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.733552][ T5898] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  340.742596][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.769777][ T5898] usb 4-1: config 0 descriptor??
[  340.829668][ T9129] netlink: 'syz.1.892': attribute type 2 has an invalid length.
[  342.193268][ T9143] bio_check_eod: 2 callbacks suppressed
[  342.193289][ T9143] syz.1.896: attempt to access beyond end of device
[  342.193289][ T9143] loop1: rw=0, sector=64, nr_sectors = 1 limit=0
[  342.213146][ T9143] syz.1.896: attempt to access beyond end of device
[  342.213146][ T9143] loop1: rw=0, sector=256, nr_sectors = 1 limit=0
[  342.226191][ T9143] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  342.236005][ T9143] syz.1.896: attempt to access beyond end of device
[  342.236005][ T9143] loop1: rw=0, sector=512, nr_sectors = 1 limit=0
[  342.249001][ T9143] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  342.258641][ T9143] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  342.266378][ T9143] UDF-fs: Scanning with blocksize 512 failed
[  342.273366][ T9143] syz.1.896: attempt to access beyond end of device
[  342.273366][ T9143] loop1: rw=0, sector=64, nr_sectors = 2 limit=0
[  342.286473][ T9143] syz.1.896: attempt to access beyond end of device
[  342.286473][ T9143] loop1: rw=0, sector=512, nr_sectors = 2 limit=0
[  342.299518][ T9143] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  342.310104][ T9143] syz.1.896: attempt to access beyond end of device
[  342.310104][ T9143] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0
[  342.323191][ T9143] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  342.332868][ T9143] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  342.340539][ T9143] UDF-fs: Scanning with blocksize 1024 failed
[  342.347347][ T9143] syz.1.896: attempt to access beyond end of device
[  342.347347][ T9143] loop1: rw=0, sector=64, nr_sectors = 4 limit=0
[  342.361724][ T9143] syz.1.896: attempt to access beyond end of device
[  342.361724][ T9143] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0
[  342.374963][ T9143] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  342.384723][ T9143] syz.1.896: attempt to access beyond end of device
[  342.384723][ T9143] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0
[  342.397825][ T9143] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  342.407508][ T9143] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  342.415947][ T9143] UDF-fs: Scanning with blocksize 2048 failed
[  342.422511][ T9143] syz.1.896: attempt to access beyond end of device
[  342.422511][ T9143] loop1: rw=0, sector=64, nr_sectors = 8 limit=0
[  342.435623][ T9143] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  342.445393][ T9143] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  342.455037][ T9143] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  342.462766][ T9143] UDF-fs: Scanning with blocksize 4096 failed
[  342.468847][ T9143] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  342.521503][ T5898] usbhid 4-1:0.0: can't add hid device: -71
[  342.573499][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  342.682567][ T5898] usb 4-1: USB disconnect, device number 13
[  343.063752][ T9160] binder: BINDER_SET_CONTEXT_MGR already set
[  343.069844][ T9160] binder: 9133:9160 ioctl 4018620d 20000100 returned -16
[  343.654826][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  343.899355][   T25] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  344.115184][   T25] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  344.124598][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.182878][ T5929] usb 2-1: Using ep0 maxpacket: 16
[  344.195429][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.102586][   T25] usb 3-1: config 0 descriptor??
[  345.174373][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  345.322814][ T5929] usb 2-1: string descriptor 0 read error: -71
[  345.329099][ T5929] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  345.432286][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  345.494519][ T5929] usb 2-1: config 0 descriptor??
[  345.509322][ T5929] usb 2-1: can't set config #0, error -71
[  345.522443][ T5929] usb 2-1: USB disconnect, device number 18
[  346.488156][   T25] usb 3-1: Cannot set autoneg
[  346.493265][   T25] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  346.728049][   T25] usb 3-1: USB disconnect, device number 21
[  346.953197][ T9207] kvm_intel: kvm [9206]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x5c7fda
[  347.090816][ T9211] ip6t_srh: unknown srh invflags 4000
[  347.238956][ T9215] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  349.542895][ T9246] ubi0: attaching mtd0
[  349.567070][ T9246] ubi0: scanning is finished
[  349.571823][ T9246] ubi0: empty MTD device detected
[  350.422894][ T9246] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  350.462866][ T5929] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  350.805386][ T5929] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  350.816031][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.836843][ T5929] usb 4-1: config 0 descriptor??
[  351.481918][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'.
[  351.535124][ T9263] team_slave_0: entered allmulticast mode
[  353.316670][ T5929] usb 4-1: Cannot set autoneg
[  353.321528][ T5929] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  353.382498][ T5929] usb 4-1: USB disconnect, device number 14
[  355.401152][ T9313] process 'syz.2.947' launched './file0' with NULL argv: empty string added
[  355.603551][   T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  356.817030][ T5901] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  356.844463][   T25] usb 4-1: Using ep0 maxpacket: 16
[  357.082892][ T5901] usb 3-1: Using ep0 maxpacket: 8
[  357.152919][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  357.202813][   T25] usb 4-1: device descriptor read/all, error -71
[  357.253936][ T5901] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  357.264664][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.272810][ T5901] usb 3-1: Product: syz
[  357.282746][ T5901] usb 3-1: Manufacturer: syz
[  357.293078][ T5901] usb 3-1: SerialNumber: syz
[  357.310967][ T5901] usb 3-1: config 0 descriptor??
[  357.333861][ T5901] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0209
[  357.618694][ T9313] xt_l2tp: invalid flags combination: c
[  357.651126][  T972] usb 3-1: USB disconnect, device number 22
[  357.717934][ T5901] libceph: connect (1)[c::]:6789 error -101
[  357.742638][ T5901] libceph: mon0 (1)[c::]:6789 connect error
[  357.772568][ T9390] ceph: No mds server is up or the cluster is laggy
[  357.773480][ T5901] libceph: connect (1)[c::]:6789 error -101
[  357.792234][ T5901] libceph: mon0 (1)[c::]:6789 connect error
[  357.808260][ T9396] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  359.095834][ T9415] bio_check_eod: 2 callbacks suppressed
[  359.095853][ T9415] syz.1.955: attempt to access beyond end of device
[  359.095853][ T9415] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0
[  359.165176][ T9415] SQUASHFS error: Failed to read block 0x0: -5
[  359.171761][ T9415] unable to read squashfs_super_block
[  360.482887][   T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  360.603802][ T9426] netlink: 64 bytes leftover after parsing attributes in process `syz.0.962'.
[  360.753597][   T25] usb 4-1: Using ep0 maxpacket: 16
[  360.764203][   T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  360.773255][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  360.802737][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  360.847798][   T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  360.864113][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.872191][   T25] usb 4-1: Product: syz
[  360.876558][   T25] usb 4-1: Manufacturer: syz
[  360.881172][   T25] usb 4-1: SerialNumber: syz
[  361.163126][ T9442] program syz.0.967 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  361.394269][   T25] usb 4-1: 0:2 : does not exist
[  361.438369][   T25] usb 4-1: USB disconnect, device number 17
[  362.407265][ T6592] udevd[6592]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  364.589788][ T9476] syz.4.979: attempt to access beyond end of device
[  364.589788][ T9476] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[  364.602843][ T9476] SQUASHFS error: Failed to read block 0x0: -5
[  364.609047][ T9476] unable to read squashfs_super_block
[  364.654436][ T9478] can: request_module (can-proto-4) failed.
[  366.084702][ T9504] capability: warning: `syz.4.987' uses deprecated v2 capabilities in a way that may be insecure
[  366.138179][ T9508] xt_nat: multiple ranges no longer supported
[  367.234929][ T9517] can: request_module (can-proto-4) failed.
[  368.763018][    T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  368.923070][  T972] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  368.930802][    T8] usb 2-1: Using ep0 maxpacket: 16
[  368.943069][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.956440][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.970307][    T8] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  368.982295][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.011883][    T8] usb 2-1: config 0 descriptor??
[  369.093103][  T972] usb 3-1: Using ep0 maxpacket: 16
[  369.104959][  T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.126454][  T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.162289][  T972] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  369.188389][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.218915][  T972] usb 3-1: config 0 descriptor??
[  369.445028][    T8] hid (null): invalid report_size 25705
[  369.652870][    T8] usb 2-1: string descriptor 0 read error: -71
[  369.689649][    T8] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  369.719228][    T8] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32
[  369.751861][    T8] usb 2-1: USB disconnect, device number 19
[  370.073786][  T972] letsketch 0003:6161:4D15.0004: Device info: à š
[  370.790714][  T972] usb 3-1: Max retries (5) exceeded reading string descriptor 201
[  370.798807][  T972] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71
[  370.814734][  T972] usb 3-1: USB disconnect, device number 23
[  371.824974][ T9557] syz.3.1005: attempt to access beyond end of device
[  371.824974][ T9557] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[  371.838145][ T9557] SQUASHFS error: Failed to read block 0x0: -5
[  371.844487][ T9557] unable to read squashfs_super_block
[  373.098986][ T9592] syz.4.1015: attempt to access beyond end of device
[  373.098986][ T9592] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  373.112095][ T9592] exFAT-fs (nbd4): unable to read boot sector
[  373.118399][ T9592] exFAT-fs (nbd4): failed to read boot sector
[  373.124570][ T9592] exFAT-fs (nbd4): failed to recognize exfat type
[  376.764001][ T9628] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000001777777777777777777777'
[  376.808219][ T9628] loop2: detected capacity change from 0 to 512
[  378.962983][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.969954][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  379.120936][ T9628] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1028: invalid indirect mapped block 256 (level 2)
[  379.338459][ T9628] EXT4-fs (loop2): 2 truncates cleaned up
[  379.455818][ T9628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.830097][ T9649] netlink: 'syz.1.1034': attribute type 12 has an invalid length.
[  380.975554][ T9641] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  381.225375][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.701639][ T9666] syz.3.1039: attempt to access beyond end of device
[  381.701639][ T9666] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[  381.714824][ T9666] SQUASHFS error: Failed to read block 0x0: -5
[  381.721044][ T9666] unable to read squashfs_super_block
[  382.148689][   T51] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  382.462862][   T51] usb 3-1: Using ep0 maxpacket: 8
[  382.483283][   T51] usb 3-1: config 1 interface 0 has no altsetting 0
[  382.543135][   T51] usb 3-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  383.152892][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.160951][   T51] usb 3-1: Product: syz
[  383.165506][   T51] usb 3-1: Manufacturer: syz
[  383.170128][   T51] usb 3-1: SerialNumber: syz
[  383.254491][ T9694] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000001777777777777777777777'
[  383.496024][   T51] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input29
[  383.523689][ T5208] bcm5974 3-1:1.0: could not read from device
[  383.710064][ T5208] bcm5974 3-1:1.0: could not read from device
[  383.748217][ T5208] bcm5974 3-1:1.0: could not read from device
[  383.770265][   T51] usb 3-1: USB disconnect, device number 24
[  383.887457][ T5208] bcm5974 3-1:1.0: could not read from device
[  385.871699][    T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  386.419502][ T9719] ip6t_srh: unknown srh invflags 4000
[  386.504175][    T8] usb 1-1: Using ep0 maxpacket: 16
[  386.520094][    T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  386.529538][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  386.562039][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  386.628793][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  386.649383][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.663058][    T8] usb 1-1: Product: syz
[  386.667291][    T8] usb 1-1: Manufacturer: syz
[  386.671912][    T8] usb 1-1: SerialNumber: syz
[  386.893184][   T51] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  387.403616][ T9732] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000001777777777777777777777'
[  387.427473][ T9732] loop4: detected capacity change from 0 to 512
[  387.521797][   T51] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  387.531292][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.547505][   T51] usb 4-1: config 0 descriptor??
[  387.620127][ T9732] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1064: invalid indirect mapped block 256 (level 2)
[  387.641042][ T9732] EXT4-fs (loop4): 2 truncates cleaned up
[  387.651975][ T9732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.707048][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  387.714640][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  387.721925][    T8] usb 1-1: 0:2 : does not exist
[  387.939103][ T9740] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  388.727738][    T8] usb 1-1: USB disconnect, device number 22
[  389.093095][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.265914][ T6592] udevd[6592]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  389.409082][   T51] usb 4-1: Cannot read MAC address
[  389.415039][   T51] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  389.450112][   T51] usb 4-1: USB disconnect, device number 18
[  389.541645][ T9755] syz.2.1067: attempt to access beyond end of device
[  389.541645][ T9755] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  389.556949][ T9755] SQUASHFS error: Failed to read block 0x0: -5
[  389.566297][ T9755] unable to read squashfs_super_block
[  393.226100][ T9792] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  395.319162][ T9812] can: request_module (can-proto-4) failed.
[  396.965438][ T9836] orangefs_mount: mount request failed with -4
[  397.816801][ T9855] netlink: 'syz.2.1102': attribute type 10 has an invalid length.
[  397.836677][ T9855] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  397.844867][    T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  397.854690][ T9855] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  397.863643][ T9856] IPVS: wlc: TCP [::]:0 - no destination available
[  397.875123][   T25] IPVS: starting estimator thread 0...
[  397.925594][ T9856] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1101'.
[  397.983039][ T9857] IPVS: using max 33 ests per chain, 79200 per kthread
[  398.002876][    T8] usb 4-1: Using ep0 maxpacket: 8
[  398.011879][    T8] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  398.021768][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  398.040020][    T8] usb 4-1: config 0 has no interface number 0
[  398.046462][    T8] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  398.063036][    T8] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  398.169856][    T8] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  398.199791][    T8] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  398.221211][    T8] usb 4-1: config 0 interface 52 has no altsetting 0
[  398.228191][    T8] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  398.237570][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.269218][    T8] usb 4-1: config 0 descriptor??
[  398.858322][    T8] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input30
[  399.064286][    T8] usb 4-1: USB disconnect, device number 19
[  399.084430][ T5208] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -19
[  401.367132][ T9877] syz.2.1107: attempt to access beyond end of device
[  401.367132][ T9877] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  401.461358][    T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  401.644616][    T8] usb 2-1: Using ep0 maxpacket: 16
[  401.665404][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  401.691594][    T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  401.798200][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.343210][ T9877] SQUASHFS error: Failed to read block 0x0: -5
[  402.349660][ T9877] unable to read squashfs_super_block
[  402.575306][ T9897] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  402.779011][    T8] usb 2-1: config 0 descriptor??
[  402.803197][    T8] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31
[  405.043621][ T9916] program syz.3.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  405.221516][    T8] bcm5974 2-1:0.0: could not read from device
[  405.245913][ T5208] bcm5974 2-1:0.0: could not read from device
[  406.352480][    T8] input: failed to attach handler mousedev to device input31, error: -5
[  406.379891][ T5208] bcm5974 2-1:0.0: could not read from device
[  406.398665][    T8] usb 2-1: USB disconnect, device number 20
[  406.418857][ T5208] bcm5974 2-1:0.0: could not read from device
[  407.520632][ T9939] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  408.866857][ T9953] ubi0: attaching mtd0
[  408.873185][ T9953] ubi0: scanning is finished
[  409.043699][ T9953] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  409.236698][ T9961] syz.1.1126: attempt to access beyond end of device
[  409.236698][ T9961] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0
[  409.300109][ T9961] SQUASHFS error: Failed to read block 0x0: -5
[  409.359139][ T9968] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  409.548550][ T9961] unable to read squashfs_super_block
[  410.029293][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1132'.
[  411.962163][ T5856] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  412.135136][ T5857] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  412.146199][ T5857] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  412.158442][ T5857] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  412.166751][ T5857] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  412.174574][ T5857] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  412.336893][ T9999] 9pnet_fd: p9_fd_create_unix (9999): problem connecting socket: ./file0: -111
[  413.081055][T10005] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  413.676662][T10011] syz.1.1143: attempt to access beyond end of device
[  413.676662][T10011] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0
[  413.713010][ T9984] chnl_net:caif_netlink_parms(): no params data found
[  413.729014][T10011] SQUASHFS error: Failed to read block 0x0: -5
[  413.912870][T10011] unable to read squashfs_super_block
[  413.985076][T10020] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  414.278568][ T5857] Bluetooth: hci14: command tx timeout
[  416.338705][ T9984] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.361235][ T5857] Bluetooth: hci14: command tx timeout
[  416.367408][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.401838][ T9984] bridge_slave_0: entered allmulticast mode
[  416.483890][ T9984] bridge_slave_0: entered promiscuous mode
[  416.967825][ T9984] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.978740][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.993046][ T9984] bridge_slave_1: entered allmulticast mode
[  417.003936][ T9984] bridge_slave_1: entered promiscuous mode
[  417.042935][  T972] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  417.117089][ T9984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.208713][ T9984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.676939][  T972] usb 3-1: Using ep0 maxpacket: 16
[  417.702385][  T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.713600][  T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.723663][  T972] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  417.732947][    T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  417.752598][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.775137][  T972] usb 3-1: config 0 descriptor??
[  417.894433][ T9984] team0: Port device team_slave_0 added
[  417.902070][ T9984] team0: Port device team_slave_1 added
[  417.947371][    T8] usb 4-1: Using ep0 maxpacket: 8
[  417.954323][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  418.020753][    T8] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  418.052725][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.077498][    T8] usb 4-1: Product: syz
[  418.082026][    T8] usb 4-1: Manufacturer: syz
[  418.097641][    T8] usb 4-1: SerialNumber: syz
[  418.129683][    T8] usb 4-1: config 0 descriptor??
[  418.145580][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.165630][    T8] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0209
[  418.175139][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.235115][ T9984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.254454][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.261629][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.295348][ T9984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.349534][    T8] usb 4-1: USB disconnect, device number 20
[  418.365277][ T9984] hsr_slave_0: entered promiscuous mode
[  418.408721][ T9984] hsr_slave_1: entered promiscuous mode
[  418.418994][ T9984] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  418.432845][ T5857] Bluetooth: hci14: command tx timeout
[  418.434191][ T9984] Cannot create hsr debugfs directory
[  418.659791][  T972] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  418.669748][  T972] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -71
[  418.695795][  T972] usb 3-1: USB disconnect, device number 25
[  418.811270][ T9365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.844819][T10062] veth1_macvtap: left promiscuous mode
[  418.855825][T10062] macsec0: entered allmulticast mode
[  418.885060][T10062] veth1_macvtap: entered promiscuous mode
[  418.913979][T10062] veth1_macvtap: entered allmulticast mode
[  418.933677][T10062] macsec0: left allmulticast mode
[  418.938761][T10062] veth1_macvtap: left allmulticast mode
[  419.017951][ T9365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.119284][T10067] xt_nat: multiple ranges no longer supported
[  419.293424][ T9984] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  419.437041][ T9984] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  419.748560][ T9365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.766143][ T9984] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  419.825784][T10071] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  419.963773][ T9984] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  420.185314][ T9365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.502116][ T9984] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.520620][ T5857] Bluetooth: hci14: command tx timeout
[  420.537611][ T9984] 8021q: adding VLAN 0 to HW filter on device team0
[  420.869219][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.876406][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.101610][ T9375] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.108825][ T9375] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.414318][T10092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.199938][ T9984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  422.210511][ T9984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  422.631802][ T9365] bridge_slave_1: left allmulticast mode
[  422.638037][ T9365] bridge_slave_1: left promiscuous mode
[  422.644262][ T9365] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.958857][ T9365] bridge_slave_0: left allmulticast mode
[  422.968005][ T9365] bridge_slave_0: left promiscuous mode
[  422.978720][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.776897][ T9365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.786489][ T9365] bond_slave_0: left promiscuous mode
[  423.798111][ T9365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.807650][ T9365] bond_slave_1: left promiscuous mode
[  423.816771][ T9365] bond0 (unregistering): Released all slaves
[  423.917569][T10110] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1171'.
[  425.185176][ T9984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.314996][ T5162] Bluetooth: hci14: command 0x0405 tx timeout
[  426.772969][    T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  426.845393][ T9365] hsr_slave_0: left promiscuous mode
[  426.893735][ T9365] hsr_slave_1: left promiscuous mode
[  426.948913][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.014510][ T9365] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.034384][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.239219][ T9365] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.252798][    T8] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  427.293584][ T9365] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.323531][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.354898][ T9365] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.385504][    T8] usb 3-1: config 0 descriptor??
[  427.431164][ T9365] veth1_macvtap: left promiscuous mode
[  427.905409][ T9365] veth0_macvtap: left promiscuous mode
[  427.911086][ T9365] veth1_vlan: left promiscuous mode
[  427.918956][ T9365] veth0_vlan: left promiscuous mode
[  428.619834][T10185] loop9: detected capacity change from 0 to 7
[  428.649418][T10185] Dev loop9: unable to read RDB block 7
[  428.655820][T10185]  loop9: unable to read partition table
[  428.664038][T10185] loop9: partition table beyond EOD, truncated
[  428.670566][T10185] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  428.984543][ T9365] team0 (unregistering): Port device team_slave_1 removed
[  429.070285][ T9365] team0 (unregistering): Port device team_slave_0 removed
[  429.882367][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  429.908163][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  429.929369][    T8] usb 3-1: USB disconnect, device number 26
[  430.429812][T10173] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1187'.
[  431.524807][ T9984] veth0_vlan: entered promiscuous mode
[  431.581482][ T9984] veth1_vlan: entered promiscuous mode
[  431.849480][T10215] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  432.553927][ T9984] veth0_macvtap: entered promiscuous mode
[  432.563271][ T9984] veth1_macvtap: entered promiscuous mode
[  432.574526][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.585106][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.594955][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.605442][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.615343][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.626313][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.636591][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.647299][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.666320][ T9984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.675331][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.720384][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.756854][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.787990][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.812551][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.884306][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.927771][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.973743][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.005479][ T9984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.717304][ T9984] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.742888][ T9984] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  433.762776][ T9984] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.782759][ T9984] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.961314][ T9365] IPVS: stop unused estimator thread 0...
[  436.253650][T10255] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1203'.
[  436.850348][ T9367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.859003][ T9367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.352403][T10270] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  437.390247][ T9362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.398561][ T9362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.402798][  T972] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  437.563225][  T972] usb 4-1: Using ep0 maxpacket: 8
[  437.570831][  T972] usb 4-1: config 1 interface 0 has no altsetting 0
[  437.581096][  T972] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  437.627353][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.636070][  T972] usb 4-1: Product: syz
[  437.640639][  T972] usb 4-1: Manufacturer: syz
[  437.645692][  T972] usb 4-1: SerialNumber: syz
[  437.867821][  T972] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input32
[  437.894201][ T5208] bcm5974 4-1:1.0: could not read from device
[  437.901167][ T5208] bcm5974 4-1:1.0: could not read from device
[  437.920731][  T972] bcm5974 4-1:1.0: could not read from device
[  438.037530][  T972] input: failed to attach handler mousedev to device input32, error: -5
[  438.059745][ T5208] bcm5974 4-1:1.0: could not read from device
[  438.066237][  T972] usb 4-1: USB disconnect, device number 21
[  438.220426][   T51] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  439.582851][   T51] usb 6-1: Using ep0 maxpacket: 16
[  439.673363][T10312] vxcan1: tx address claim with dest, not broadcast
[  439.809237][   T51] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  439.826916][   T51] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  439.860755][   T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.049016][T10316] ip6t_srh: unknown srh invflags 4000
[  440.869257][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.881063][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  441.043577][   T51] usb 6-1: config 0 descriptor??
[  441.063886][   T51] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33
[  441.094669][ T5208] bcm5974 6-1:0.0: could not read from device
[  441.283553][ T5208] bcm5974 6-1:0.0: could not read from device
[  441.323350][   T51] bcm5974 6-1:0.0: could not read from device
[  441.546825][   T51] input: failed to attach handler mousedev to device input33, error: -5
[  442.511851][   T51] usb 6-1: USB disconnect, device number 2
[  444.766190][T10359] netlink: 'syz.3.1226': attribute type 1 has an invalid length.
[  445.090652][T10366] ip6t_srh: unknown srh invflags 4000
[  447.235888][   T51] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  447.378828][ T5852] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  447.482802][   T51] usb 4-1: Using ep0 maxpacket: 16
[  447.508912][   T51] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  447.604672][   T51] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  447.614819][ T5852] usb 1-1: Using ep0 maxpacket: 16
[  447.624812][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.658196][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.682298][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.782768][ T5852] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  447.791863][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.802410][   T51] usb 4-1: config 0 descriptor??
[  447.811221][   T51] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34
[  447.824119][ T5852] usb 1-1: config 0 descriptor??
[  448.591995][ T5852] usbhid 1-1:0.0: can't add hid device: -71
[  448.616028][ T5852] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  448.765743][ T5852] usb 1-1: USB disconnect, device number 23
[  450.598057][ T5208] bcm5974 4-1:0.0: could not read from device
[  450.756509][   T51] bcm5974 4-1:0.0: could not read from device
[  450.863272][   T51] input: failed to attach handler mousedev to device input34, error: -5
[  450.915623][T10434] 9pnet_fd: Insufficient options for proto=fd
[  450.922755][ T5208] bcm5974 4-1:0.0: could not read from device
[  450.932374][   T51] usb 4-1: USB disconnect, device number 22
[  450.972928][T10437] overlayfs: missing 'lowerdir'
[  452.463770][    T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  452.521909][T10464] ubi0: attaching mtd0
[  452.562884][T10464] ubi0: scanning is finished
[  453.854188][T10464] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  454.843439][    T8] usb 3-1: Using ep0 maxpacket: 32
[  454.915606][    T8] usb 3-1: device descriptor read/all, error -71
[  456.291299][T10508] 9pnet_fd: p9_fd_create_unix (10508): problem connecting socket: ./file0: -111
[  458.407052][T10545] ubi0: attaching mtd0
[  458.415818][T10545] ubi0: scanning is finished
[  459.147933][T10545] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  460.988547][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  461.712192][T10570] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  461.997009][    T9] usb 3-1: Using ep0 maxpacket: 32
[  462.007236][    T9] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  462.017175][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.350730][    T9] usb 3-1: Product: syz
[  462.355499][    T9] usb 3-1: Manufacturer: syz
[  462.360564][    T9] usb 3-1: SerialNumber: syz
[  462.562791][    T9] usb 3-1: config 0 descriptor??
[  462.603824][    T9] usb 3-1: can't set config #0, error -71
[  462.637352][    T9] usb 3-1: USB disconnect, device number 29
[  466.682941][T10613] ubi0: attaching mtd0
[  466.688722][T10613] ubi0: scanning is finished
[  467.986449][T10625] 9pnet_fd: p9_fd_create_unix (10625): problem connecting socket: ./file0: -111
[  468.062447][T10613] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  469.348962][T10649] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  473.002595][T10682] syz.2.1295: attempt to access beyond end of device
[  473.002595][T10682] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0
[  473.374659][T10692] ubi0: attaching mtd0
[  473.395589][T10692] ubi0: scanning is finished
[  474.023005][T10682] gfs2: error -5 reading superblock
[  476.647841][T10692] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  477.259316][T10722] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  481.354259][T10729] xt_nat: multiple ranges no longer supported
[  488.132976][    T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  488.199461][T10861] ubi0: attaching mtd0
[  488.208589][T10861] ubi0: scanning is finished
[  488.369367][    T8] usb 3-1: Using ep0 maxpacket: 32
[  488.469987][T10861] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  488.477777][T10861] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  488.485209][T10861] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  488.492243][T10861] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  488.499858][T10861] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  488.506765][T10861] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  488.514917][T10861] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2176718501
[  488.525206][T10861] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  488.578077][T10864] ubi0: background thread "ubi_bgt0d" started, PID 10864
[  488.717552][    T8] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  488.726833][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.734932][    T8] usb 3-1: Product: syz
[  488.739106][    T8] usb 3-1: Manufacturer: syz
[  488.744115][    T8] usb 3-1: SerialNumber: syz
[  488.767766][    T8] usb 3-1: config 0 descriptor??
[  490.156447][T10890] program syz.3.1330 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  490.164474][    T8] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  490.166196][T10891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1329'.
[  490.338010][    T8] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[  490.372208][    T8] usb 3-1: USB disconnect, device number 30
[  490.536373][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'.
[  490.745813][T10896] syz.3.1331: attempt to access beyond end of device
[  490.745813][T10896] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[  490.774137][T10896] SQUASHFS error: Failed to read block 0x0: -5
[  490.780369][T10896] unable to read squashfs_super_block
[  492.187593][T10920] random: crng reseeded on system resumption
[  497.393747][T10978] syz.1.1350: attempt to access beyond end of device
[  497.393747][T10978] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0
[  497.479353][T10978] SQUASHFS error: Failed to read block 0x0: -5
[  497.651094][T10978] unable to read squashfs_super_block
[  497.772836][    T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  497.932989][    T8] usb 3-1: Using ep0 maxpacket: 8
[  497.984044][    T8] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  498.074285][T10998] netlink: 'syz.5.1355': attribute type 7 has an invalid length.
[  498.133081][T10998] netlink: 'syz.5.1355': attribute type 3 has an invalid length.
[  498.141098][T10998] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1355'.
[  498.208825][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  498.523206][    T8] usb 3-1: config 0 has no interface number 0
[  498.529498][    T8] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  498.581604][    T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  498.641623][    T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  498.698586][    T8] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  498.741781][    T8] usb 3-1: config 0 interface 52 has no altsetting 0
[  498.770811][    T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  498.801293][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.856167][    T8] usb 3-1: config 0 descriptor??
[  499.084551][    T8] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input35
[  500.206808][    T8] usb 3-1: USB disconnect, device number 31
[  501.635324][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.641928][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  502.181795][T11046] netlink: 'syz.0.1368': attribute type 7 has an invalid length.
[  502.213044][T11046] netlink: 'syz.0.1368': attribute type 3 has an invalid length.
[  502.221000][T11046] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1368'.
[  504.000248][T11057] fuse: Bad value for 'fd'
[  505.002798][    T8] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  505.649899][T11072] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.659401][T11072] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.788698][T11077] program syz.5.1378 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  507.233106][    T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  507.413024][    T8] usb 3-1: Using ep0 maxpacket: 8
[  507.445410][    T8] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  507.506011][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  507.610186][    T8] usb 3-1: config 0 has no interface number 0
[  507.674552][    T8] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  507.772665][    C0] hrtimer: interrupt took 55654 ns
[  507.819652][    T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  508.084025][    T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  508.208222][    T8] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  508.278926][    T8] usb 3-1: config 0 interface 52 has no altsetting 0
[  508.315213][    T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  508.366915][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.453453][    T8] usb 3-1: config 0 descriptor??
[  508.630997][T11119] netlink: 'syz.5.1387': attribute type 7 has an invalid length.
[  508.649328][T11119] netlink: 'syz.5.1387': attribute type 3 has an invalid length.
[  508.657456][T11119] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1387'.
[  509.311400][    T8] usb 3-1: Can not set alternate setting to 1, error: -71
[  509.321810][    T8] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71
[  509.420763][    T8] usb 3-1: USB disconnect, device number 33
[  509.620853][T11128] program syz.5.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  510.422739][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  510.915866][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.974345][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.038936][    T9] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  511.091201][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.137370][    T9] usb 4-1: config 0 descriptor??
[  511.260900][T11153] capability: warning: `syz.0.1396' uses 32-bit capabilities (legacy support in use)
[  514.380186][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  514.386624][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  514.457793][T11185] netlink: 'syz.2.1401': attribute type 7 has an invalid length.
[  514.474100][T11185] netlink: 'syz.2.1401': attribute type 3 has an invalid length.
[  514.482046][T11185] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1401'.
[  514.558262][    T9] usb 4-1: USB disconnect, device number 23
[  515.190428][  T972] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  515.223264][T11193] program syz.5.1403 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  515.308117][T11195] rtc_cmos 00:00: Alarms can be up to one day in the future
[  515.372716][  T972] usb 2-1: Using ep0 maxpacket: 8
[  515.381415][  T972] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  515.404104][  T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  515.469759][  T972] usb 2-1: config 0 has no interface number 0
[  515.702735][  T972] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  515.715745][  T972] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  515.726894][  T972] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  515.739081][  T972] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  516.916606][  T972] usb 2-1: config 0 interface 52 has no altsetting 0
[  516.923455][  T972] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  516.932551][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.431164][  T972] usb 2-1: config 0 descriptor??
[  517.467356][  T972] usb 2-1: can't set config #0, error -71
[  517.479660][  T972] usb 2-1: USB disconnect, device number 21
[  519.294777][T11237] program syz.5.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  519.305816][T11234] loop2: detected capacity change from 0 to 7
[  519.335659][T11234] Dev loop2: unable to read RDB block 7
[  519.341817][T11234]  loop2: AHDI p1 p2
[  519.381074][T11234] loop2: partition table partially beyond EOD, truncated
[  519.412665][T11234] loop2: p1 size 150994944 extends beyond EOD, truncated
[  519.998352][    T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  520.323724][T11251] syz.0.1420: attempt to access beyond end of device
[  520.323724][T11251] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0
[  520.362237][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.417609][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.448244][T11251] gfs2: error -5 reading superblock
[  520.478589][    T8] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  520.517673][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.093194][    T8] usb 2-1: config 0 descriptor??
[  522.340140][    T8] usbhid 2-1:0.0: can't add hid device: -71
[  522.352094][    T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  522.368644][    T8] usb 2-1: USB disconnect, device number 22
[  523.311033][T11282] program syz.1.1429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  523.672824][ T5901] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  523.813255][ T5901] usb 3-1: device descriptor read/64, error -71
[  524.054234][T11304] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  524.076584][ T5901] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  524.253537][ T5901] usb 3-1: device descriptor read/64, error -71
[  524.903184][ T5901] usb usb3-port1: attempt power cycle
[  526.206709][T11360] program syz.3.1443 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  526.256343][ T5901] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  526.283314][ T5901] usb 3-1: device descriptor read/8, error -71
[  527.075194][T11375] Invalid source name
[  527.079325][T11375] UBIFS error (pid: 11375): cannot open "./file0", error -22
[  527.443848][T11385] random: crng reseeded on system resumption
[  527.518906][T11394] program syz.0.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  528.472797][ T5901] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  528.487859][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1457'.
[  528.527756][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1457'.
[  528.553388][T11405] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1457'.
[  528.633757][ T5901] usb 3-1: Using ep0 maxpacket: 8
[  528.652068][ T5857] block nbd0: Receive control failed (result -107)
[  528.673176][ T5901] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  528.683644][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.694665][ T5901] usb 3-1: config 0 has no interface number 0
[  528.701396][ T5901] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  528.714202][ T5901] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  528.726185][ T5901] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  528.738433][ T5901] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  528.752456][ T5901] usb 3-1: config 0 interface 52 has no altsetting 0
[  528.759867][ T5901] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  528.769823][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.783211][ T5901] usb 3-1: config 0 descriptor??
[  529.773393][T11416] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  529.940997][ T5901] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input36
[  530.332148][ T5901] usb 3-1: USB disconnect, device number 37
[  530.835977][T11430] syz.5.1463: attempt to access beyond end of device
[  530.835977][T11430] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  530.849979][T11430] (syz.5.1463,11430,1):ocfs2_get_sector:1769 ERROR: status = -5
[  530.858588][T11430] (syz.5.1463,11430,1):ocfs2_sb_probe:749 ERROR: status = -5
[  530.866784][T11430] (syz.5.1463,11430,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  530.876481][T11430] (syz.5.1463,11430,1):ocfs2_fill_super:1178 ERROR: status = -5
[  531.355651][T11433] program syz.1.1466 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  531.820678][T11441] random: crng reseeded on system resumption
[  531.935395][  T972] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  533.240476][T11453] ip6t_srh: unknown srh invflags 4000
[  533.298276][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.487943][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.543393][  T972] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  533.601264][  T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.634989][  T972] usb 4-1: config 0 descriptor??
[  534.285915][  T972] usbhid 4-1:0.0: can't add hid device: -71
[  534.330370][  T972] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  534.470648][  T972] usb 4-1: USB disconnect, device number 24
[  535.012802][    T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  535.494421][ T5162] Bluetooth: hci14: command 0x0405 tx timeout
[  535.769677][    T8] usb 3-1: Using ep0 maxpacket: 16
[  535.809892][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  535.821131][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  535.831162][    T8] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  535.840448][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.864421][    T8] usb 3-1: config 0 descriptor??
[  536.737363][T11482] syz.1.1481: attempt to access beyond end of device
[  536.737363][T11482] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  536.753423][T11482] (syz.1.1481,11482,1):ocfs2_get_sector:1769 ERROR: status = -5
[  536.762019][T11482] (syz.1.1481,11482,1):ocfs2_sb_probe:749 ERROR: status = -5
[  536.772048][T11482] (syz.1.1481,11482,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  536.781879][T11482] (syz.1.1481,11482,1):ocfs2_fill_super:1178 ERROR: status = -5
[  538.026318][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  538.032349][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  538.283149][    T8] usb 3-1: USB disconnect, device number 38
[  538.780464][T11501] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  538.982879][    T8] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  539.137246][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.175085][T11509] ip6t_srh: unknown srh invflags 4000
[  539.182338][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.194110][    T8] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  539.203325][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.224508][    T8] usb 3-1: config 0 descriptor??
[  539.738939][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  539.745554][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  539.765415][    T8] usb 3-1: USB disconnect, device number 39
[  540.384905][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'.
[  540.416117][T11520] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  540.425344][T11520] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  540.434267][T11520] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  540.443399][T11520] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  540.482380][T11520] vxlan0: entered promiscuous mode
[  541.022827][T11528] syz.2.1496: attempt to access beyond end of device
[  541.022827][T11528] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  541.037174][T11528] (syz.2.1496,11528,1):ocfs2_get_sector:1769 ERROR: status = -5
[  541.045694][T11528] (syz.2.1496,11528,1):ocfs2_sb_probe:749 ERROR: status = -5
[  541.053829][T11528] (syz.2.1496,11528,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  541.063390][T11528] (syz.2.1496,11528,1):ocfs2_fill_super:1178 ERROR: status = -5
[  544.964621][T11568] syz.1.1509: attempt to access beyond end of device
[  544.964621][T11568] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  544.964744][T11568] (syz.1.1509,11568,1):ocfs2_get_sector:1769 ERROR: status = -5
[  544.964789][T11568] (syz.1.1509,11568,1):ocfs2_sb_probe:749 ERROR: status = -5
[  544.964810][T11568] (syz.1.1509,11568,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  544.964830][T11568] (syz.1.1509,11568,1):ocfs2_fill_super:1178 ERROR: status = -5
[  545.464849][ T5901] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  545.470634][T11565] tty tty20: ldisc open failed (-12), clearing slot 19
[  545.506149][T11566] pty pty23: ldisc open failed (-12), clearing slot 23
[  545.802550][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.825898][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  546.246834][ T5901] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  546.389498][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.459161][ T5901] usb 3-1: config 0 descriptor??
[  546.632109][T11588] ieee802154 phy0 wpan0: encryption failed: -22
[  546.928477][ T5901] usbhid 3-1:0.0: can't add hid device: -71
[  546.935491][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  547.040474][ T5901] usb 3-1: USB disconnect, device number 40
[  548.375553][T11588] netlink: 'syz.0.1516': attribute type 1 has an invalid length.
[  548.402240][T11588] netlink: 'syz.0.1516': attribute type 2 has an invalid length.
[  551.125440][ T5857] Bluetooth: hci4: unexpected event for opcode 0x200c
[  551.152889][    T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  551.219356][   T29] audit: type=1326 audit(1730322120.871:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.5.1533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f064a77e719 code=0x0
[  551.342999][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.368511][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.424600][    T9] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  551.462771][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.504661][    T9] usb 3-1: config 0 descriptor??
[  551.853390][    T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  551.935302][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  551.948698][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  551.976421][    T9] usb 3-1: USB disconnect, device number 41
[  552.014634][    T8] usb 2-1: Using ep0 maxpacket: 16
[  552.021837][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  552.078348][    T8] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  552.098216][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.113101][    T8] usb 2-1: Product: syz
[  552.119328][    T8] usb 2-1: Manufacturer: syz
[  552.138982][    T8] usb 2-1: SerialNumber: syz
[  552.154737][    T8] usb 2-1: config 0 descriptor??
[  552.169171][    T8] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  552.651296][    T8] usb 2-1: Detected FT232R
[  552.676989][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  552.686058][    T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  552.704841][    T8] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  552.775973][    T8] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  552.831472][    T8] usb 2-1: USB disconnect, device number 23
[  553.127325][    T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  553.226494][    T8] ftdi_sio 2-1:0.0: device disconnected
[  553.423318][T11736] sg_write: process 244 (syz.5.1546) changed security contexts after opening file descriptor, this is not allowed.
[  553.464826][T11736] program syz.5.1546 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  554.907865][T11737] delete_channel: no stack
[  554.933157][T11737] delete_channel: no stack
[  555.203678][ T5857] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  555.213869][ T5857] Bluetooth: hci4: Injecting HCI hardware error event
[  555.223128][ T5857] Bluetooth: hci4: hardware error 0x00
[  555.265805][T11761] wg1 speed is unknown, defaulting to 1000
[  555.277408][T11761] wg1 speed is unknown, defaulting to 1000
[  555.342363][T11761] wg1 speed is unknown, defaulting to 1000
[  556.672886][ T5852] wg1 speed is unknown, defaulting to 1000
[  556.683385][T11761] infiniband syz1: set active
[  556.692951][T11761] infiniband syz1: added wg1
[  556.699614][T11761] syz1: rxe_create_cq: returned err = -12
[  556.727088][T11788] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  556.753783][T11761] infiniband syz1: Couldn't create ib_mad CQ
[  557.110380][T11761] infiniband syz1: Couldn't open port 1
[  557.217725][T11761] RDS/IB: syz1: added
[  557.238513][T11761] smc: adding ib device syz1 with port count 1
[  557.323248][T11761] smc:    ib device syz1 port 1 has pnetid 
[  557.368117][    T9] wg1 speed is unknown, defaulting to 1000
[  557.403187][T11761] wg1 speed is unknown, defaulting to 1000
[  557.553303][ T5857] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  557.741016][T11761] wg1 speed is unknown, defaulting to 1000
[  559.102884][T11761] wg1 speed is unknown, defaulting to 1000
[  559.800259][T11761] wg1 speed is unknown, defaulting to 1000
[  560.012825][    T8] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  560.149586][T11761] wg1 speed is unknown, defaulting to 1000
[  560.182880][    T8] usb 3-1: Using ep0 maxpacket: 16
[  560.205929][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.240289][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  560.277614][    T8] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  560.328861][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.349164][T11830] syz.3.1578: attempt to access beyond end of device
[  560.349164][T11830] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  560.354152][    T8] usb 3-1: config 0 descriptor??
[  560.363280][T11830] (syz.3.1578,11830,1):ocfs2_get_sector:1769 ERROR: status = -5
[  560.375541][T11830] (syz.3.1578,11830,1):ocfs2_sb_probe:749 ERROR: status = -5
[  560.383672][T11830] (syz.3.1578,11830,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  560.393234][T11830] (syz.3.1578,11830,1):ocfs2_fill_super:1178 ERROR: status = -5
[  561.401103][T11838] syz.5.1580: attempt to access beyond end of device
[  561.401103][T11838] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  561.415072][T11838] exFAT-fs (nbd5): unable to read boot sector
[  561.421683][T11838] exFAT-fs (nbd5): failed to read boot sector
[  561.428362][T11838] exFAT-fs (nbd5): failed to recognize exfat type
[  561.577987][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  561.656492][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  561.747915][    T8] usb 3-1: USB disconnect, device number 42
[  562.379488][T11109] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  563.122940][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.130127][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  563.177061][T11109] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00
[  563.248098][T11109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.300355][T11109] usb 2-1: config 0 descriptor??
[  563.334699][T11109] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input37
[  563.542910][ T5208] bcm5974 2-1:0.0: could not read from device
[  563.568452][ T5208] bcm5974 2-1:0.0: could not read from device
[  563.577901][ T5208] bcm5974 2-1:0.0: could not read from device
[  563.596831][T11109] usb 2-1: USB disconnect, device number 24
[  563.623466][ T5208] bcm5974 2-1:0.0: could not read from device
[  567.530499][T11901] syz.2.1594: attempt to access beyond end of device
[  567.530499][T11901] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  567.543388][T11901] exFAT-fs (nbd2): unable to read boot sector
[  567.549479][T11901] exFAT-fs (nbd2): failed to read boot sector
[  567.555725][T11901] exFAT-fs (nbd2): failed to recognize exfat type
[  568.298097][T11916] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  568.305132][T11916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  568.316845][T11916] vhci_hcd vhci_hcd.0: Device attached
[  568.631066][   T51] vhci_hcd: vhci_device speed not set
[  568.792910][   T51] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  568.847567][T11917] vhci_hcd: connection reset by peer
[  569.224281][ T8721] vhci_hcd: stop threads
[  569.238300][ T8721] vhci_hcd: release socket
[  569.285024][ T8721] vhci_hcd: disconnect device
[  569.679034][T11936] netlink: 'syz.2.1608': attribute type 10 has an invalid length.
[  569.777395][T11937] syz.0.1607 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  570.312952][T11109] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  570.497123][T11945] syz.2.1611: attempt to access beyond end of device
[  570.497123][T11945] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  570.511144][T11945] exFAT-fs (nbd2): unable to read boot sector
[  570.517898][T11945] exFAT-fs (nbd2): failed to read boot sector
[  570.524762][T11945] exFAT-fs (nbd2): failed to recognize exfat type
[  571.098785][T11109] usb 4-1: Using ep0 maxpacket: 16
[  571.109268][T11109] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  571.132818][T11109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.142504][T11109] usb 4-1: Product: syz
[  571.179262][T11109] usb 4-1: Manufacturer: syz
[  571.184447][T11109] usb 4-1: SerialNumber: syz
[  571.251038][T11109] r8152-cfgselector 4-1: Unknown version 0x0000
[  571.271270][T11109] r8152-cfgselector 4-1: config 0 descriptor??
[  571.749120][T11109] r8152-cfgselector 4-1: Needed 2 retries to read version
[  571.756449][T11109] r8152-cfgselector 4-1: Unknown version 0x0000
[  571.780909][T11109] r8152-cfgselector 4-1: bad CDC descriptors
[  572.794737][T11109] r8152-cfgselector 4-1: USB disconnect, device number 25
[  574.433877][   T51] vhci_hcd: vhci_device speed not set
[  577.174754][T11992] syz.0.1622: attempt to access beyond end of device
[  577.174754][T11992] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0
[  577.188866][T11992] exFAT-fs (nbd0): unable to read boot sector
[  577.195678][T11992] exFAT-fs (nbd0): failed to read boot sector
[  577.202344][T11992] exFAT-fs (nbd0): failed to recognize exfat type
[  581.029308][T12016] netlink: 'syz.3.1630': attribute type 4 has an invalid length.
[  582.112551][T12026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.301235][T12026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.636592][T12034] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  584.086127][T12044] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  585.342703][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  585.486165][    T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  586.159015][    T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  586.169738][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.232837][    T8] usb 4-1: Using ep0 maxpacket: 16
[  586.241088][    T9] usb 6-1: config 0 descriptor??
[  586.264544][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  586.285220][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  586.316706][    T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  586.326589][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.339973][    T8] usb 4-1: Product: syz
[  587.202675][    T8] usb 4-1: Manufacturer: syz
[  587.207372][    T8] usb 4-1: SerialNumber: syz
[  587.311464][    T9] usb 6-1: Cannot read MAC address
[  587.319694][    T9] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[  587.590729][    T8] usb 6-1: USB disconnect, device number 3
[  588.712387][T12070] netlink: 'syz.2.1647': attribute type 4 has an invalid length.
[  589.305247][T12076] netlink: 'syz.2.1648': attribute type 12 has an invalid length.
[  590.405092][   T51] usb 4-1: USB disconnect, device number 26
[  597.135748][T12162] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  598.421082][ T5162] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  598.439127][ T5162] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  598.464688][ T5162] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  598.508244][ T5162] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  598.518793][ T5162] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  598.530885][ T5162] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  599.182561][T12181] wg1 speed is unknown, defaulting to 1000
[  600.244041][ T8721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.446397][T12207] program syz.0.1691 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  600.593026][ T5857] Bluetooth: hci15: command tx timeout
[  600.897908][ T5162] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  600.930828][ T5162] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  600.943504][ T5162] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  601.000951][ T8721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.103663][ T5162] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  601.113199][ T5162] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  601.123460][ T5162] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  601.869578][T12215] wg1 speed is unknown, defaulting to 1000
[  602.159244][T12181] chnl_net:caif_netlink_parms(): no params data found
[  602.732678][ T5162] Bluetooth: hci15: command tx timeout
[  603.552870][ T8721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.008349][ T5162] Bluetooth: hci16: command tx timeout
[  616.066390][    C1] sched: DL replenish lagged too much
[  616.076260][ T5857] Bluetooth: hci16: command tx timeout
[  616.077341][ T5162] Bluetooth: hci15: command tx timeout
[  621.298379][ T5856] Bluetooth: hci15: command tx timeout
[  621.304012][ T5856] Bluetooth: hci16: command tx timeout
[  623.312682][ T5856] Bluetooth: hci16: command tx timeout
[  623.662277][ T5162] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  623.687105][ T5162] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  623.696157][ T5162] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  623.706457][ T5162] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  623.714259][ T5162] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  623.721653][ T5162] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  623.816021][ T5856] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  623.834260][ T5856] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  623.862404][ T5856] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  623.884789][ T5856] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  623.892516][ T5856] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  623.900464][ T5856] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  624.109600][ T5162] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  624.129644][ T5162] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  624.139179][ T5162] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  624.150529][ T5162] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  624.159066][ T5162] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[  624.166875][ T5162] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  624.519107][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.526100][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  625.795350][ T5162] Bluetooth: hci17: command tx timeout
[  625.952823][ T5162] Bluetooth: hci18: command tx timeout
[  626.272837][ T5162] Bluetooth: hci19: command tx timeout
[  627.872894][ T5162] Bluetooth: hci17: command tx timeout
[  628.032933][ T5162] Bluetooth: hci18: command tx timeout
[  628.354994][ T5162] Bluetooth: hci19: command tx timeout
[  629.952879][ T5162] Bluetooth: hci17: command tx timeout
[  630.112995][ T5162] Bluetooth: hci18: command tx timeout
[  630.432833][ T5162] Bluetooth: hci19: command tx timeout
[  632.032883][ T5162] Bluetooth: hci17: command tx timeout
[  632.193005][ T5162] Bluetooth: hci18: command tx timeout
[  632.514168][ T5162] Bluetooth: hci19: command tx timeout
[  660.230994][ T5856] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  660.241495][ T5856] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  660.253690][ T5856] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  660.264537][ T5856] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  660.272889][ T5856] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3
[  660.280705][ T5856] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  661.447244][ T5162] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  661.462093][ T5162] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  661.480645][ T5162] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  661.489642][ T5162] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  661.504735][ T5162] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3
[  661.520456][ T5162] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  662.352891][ T5856] Bluetooth: hci20: command tx timeout
[  663.558445][ T5856] Bluetooth: hci21: command tx timeout
[  664.432762][ T5856] Bluetooth: hci20: command tx timeout
[  665.632777][ T5856] Bluetooth: hci21: command tx timeout
[  666.512805][ T5856] Bluetooth: hci20: command tx timeout
[  667.712799][ T5856] Bluetooth: hci21: command tx timeout
[  668.592731][ T5856] Bluetooth: hci20: command tx timeout
[  669.792915][ T5856] Bluetooth: hci21: command tx timeout
[  673.784527][ T8721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.890954][T12181] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR
[  683.780573][ T5162] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  683.836267][ T5162] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[  683.862989][ T5162] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[  683.871054][ T5162] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[  683.880675][ T5162] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3
[  683.888468][ T5162] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[  683.992146][ T5856] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[  684.002140][ T5856] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[  684.011204][ T5856] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[  684.024516][ T5856] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[  684.034366][ T5856] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3
[  684.041890][ T5856] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[  684.316029][ T5162] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1
[  684.334003][ T5162] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9
[  684.344530][ T5162] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9
[  684.354605][ T5162] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4
[  684.362339][ T5162] Bluetooth: hci24: unexpected cc 0x0c25 length: 249 > 3
[  684.371782][ T5162] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2
[  685.956351][ T5856] Bluetooth: hci22: command tx timeout
[  685.976630][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  685.983175][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  686.113027][ T5856] Bluetooth: hci23: command tx timeout
[  686.432869][ T5856] Bluetooth: hci24: command tx timeout
[  688.033967][ T5856] Bluetooth: hci22: command tx timeout
[  688.192784][ T5856] Bluetooth: hci23: command tx timeout
[  688.512838][ T5856] Bluetooth: hci24: command tx timeout
[  690.112832][ T5856] Bluetooth: hci22: command tx timeout
[  690.273767][ T5856] Bluetooth: hci23: command tx timeout
[  690.595276][ T5856] Bluetooth: hci24: command tx timeout
[  692.192799][ T5856] Bluetooth: hci22: command tx timeout
[  692.352822][ T5856] Bluetooth: hci23: command tx timeout
[  692.672797][ T5856] Bluetooth: hci24: command tx timeout
[  721.240975][ T5162] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1
[  721.254455][ T5162] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9
[  721.266153][ T5162] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9
[  721.278614][ T5162] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4
[  721.286546][ T5162] Bluetooth: hci25: unexpected cc 0x0c25 length: 249 > 3
[  721.294711][ T5162] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2
[  722.559674][ T5162] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1
[  722.572505][ T5162] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9
[  722.581780][ T5162] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9
[  722.591021][ T5162] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4
[  722.600251][ T5162] Bluetooth: hci26: unexpected cc 0x0c25 length: 249 > 3
[  722.608234][ T5162] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2
[  723.312816][ T5162] Bluetooth: hci25: command tx timeout
[  724.672719][ T5162] Bluetooth: hci26: command tx timeout
[  725.392771][ T5162] Bluetooth: hci25: command tx timeout
[  726.752696][ T5162] Bluetooth: hci26: command tx timeout
[  727.473036][ T5162] Bluetooth: hci25: command tx timeout
[  728.832943][ T5162] Bluetooth: hci26: command tx timeout
[  729.552905][ T5162] Bluetooth: hci25: command tx timeout
[  730.912715][ T5162] Bluetooth: hci26: command tx timeout
[  744.930577][ T5856] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1
[  744.952908][ T5856] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9
[  744.962948][ T5856] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9
[  744.971922][ T5856] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4
[  744.979764][ T5856] Bluetooth: hci27: unexpected cc 0x0c25 length: 249 > 3
[  745.024494][ T5856] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2
[  745.517497][ T5856] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1
[  745.532918][ T5856] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9
[  745.541824][ T5856] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9
[  745.551865][ T5856] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4
[  745.560419][ T5856] Bluetooth: hci28: unexpected cc 0x0c25 length: 249 > 3
[  745.568399][ T5856] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2
[  745.586133][T12297] Bluetooth: hci29: unexpected cc 0x0c03 length: 249 > 1
[  745.601997][T12297] Bluetooth: hci29: unexpected cc 0x1003 length: 249 > 9
[  745.613030][T12297] Bluetooth: hci29: unexpected cc 0x1001 length: 249 > 9
[  745.623728][T12297] Bluetooth: hci29: unexpected cc 0x0c23 length: 249 > 4
[  745.631490][T12297] Bluetooth: hci29: unexpected cc 0x0c25 length: 249 > 3
[  745.643087][T12297] Bluetooth: hci29: unexpected cc 0x0c38 length: 249 > 2
[  747.076111][T12297] Bluetooth: hci27: command tx timeout
[  747.432943][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.440998][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  747.722290][T12299] Bluetooth: hci29: command tx timeout
[  747.728680][ T5857] Bluetooth: hci28: command tx timeout
[  749.152741][ T5857] Bluetooth: hci27: command tx timeout
[  749.479572][T12299] Bluetooth: hci17: command 0x0406 tx timeout
[  749.499856][ T5857] Bluetooth: hci19: command 0x0406 tx timeout
[  749.506973][T12299] Bluetooth: hci18: command 0x0406 tx timeout
[  749.792815][T12297] Bluetooth: hci29: command tx timeout
[  749.799227][ T5856] Bluetooth: hci28: command tx timeout
[  751.232770][ T5856] Bluetooth: hci27: command tx timeout
[  751.872710][ T5856] Bluetooth: hci28: command tx timeout
[  751.878255][ T5856] Bluetooth: hci29: command tx timeout
[  753.312740][ T5856] Bluetooth: hci27: command tx timeout
[  753.952757][T12297] Bluetooth: hci28: command tx timeout
[  753.958836][ T5856] Bluetooth: hci29: command tx timeout
[  771.076613][   T30] INFO: task syz-executor:12241 blocked for more than 143 seconds.
[  771.091146][   T30]       Not tainted 6.12.0-rc5-next-20241030-syzkaller #0
[  771.112629][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  771.121366][   T30] task:syz-executor    state:D stack:25920 pid:12241 tgid:12241 ppid:1      flags:0x00004004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  771.256336][   T30] Call Trace:
[  771.259678][   T30]  <TASK>
[  771.304739][   T30]  __schedule+0x184f/0x4c30
[  771.309346][   T30]  ? __pfx___schedule+0x10/0x10
[  771.392842][   T30]  ? __pfx_lock_release+0x10/0x10
[  771.397944][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  771.469121][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  771.501262][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  771.542808][   T30]  ? schedule+0x90/0x320
[  771.547127][   T30]  schedule+0x14b/0x320
[  771.551326][   T30]  schedule_preempt_disabled+0x13/0x30
[  771.620510][   T30]  __mutex_lock+0x7e7/0xee0
[  771.641333][   T30]  ? __mutex_lock+0x5ef/0xee0
[  771.652766][   T30]  ? inet_rtm_newaddr+0x47e/0x1bc0
[  771.657942][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  771.709345][   T30]  ? __lock_acquire+0x1397/0x2100
[  771.752653][   T30]  ? __nla_parse+0x40/0x60
[  771.758103][   T30]  inet_rtm_newaddr+0x47e/0x1bc0
[  771.802659][   T30]  ? rcu_read_unlock+0x87/0xa0
[  771.807501][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  771.860028][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  771.899822][   T30]  rtnetlink_rcv_msg+0x791/0xcf0
[  771.922598][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  771.927778][   T30]  ? __lock_acquire+0x1397/0x2100
[  771.982115][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  772.020119][   T30]  netlink_rcv_skb+0x1e3/0x430
[  772.062770][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  772.068316][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  772.131544][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  772.159472][   T30]  netlink_unicast+0x7f6/0x990
[  772.189806][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  772.222792][   T30]  ? __virt_addr_valid+0x183/0x530
[  772.227974][   T30]  ? __check_object_size+0x48e/0x900
[  772.278490][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  772.309156][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  772.345201][   T30]  ? __might_fault+0xaa/0x120
[  772.349952][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  772.366803][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  772.372159][   T30]  __sock_sendmsg+0x221/0x270
[  772.385246][   T30]  __sys_sendto+0x39b/0x4f0
[  772.390674][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  772.399604][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  772.409738][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  772.419752][   T30]  ? exc_page_fault+0x590/0x8c0
[  772.429517][   T30]  __x64_sys_sendto+0xde/0x100
[  772.439129][   T30]  do_syscall_64+0xf3/0x230
[  772.451081][   T30]  ? clear_bhb_loop+0x35/0x90
[  772.460167][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.470808][   T30] RIP: 0033:0x7fa4c6b805ac
[  772.477256][   T30] RSP: 002b:00007ffe583eb150 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  772.491766][   T30] RAX: ffffffffffffffda RBX: 00007fa4c7864620 RCX: 00007fa4c6b805ac
[  772.501320][   T30] RDX: 0000000000000028 RSI: 00007fa4c7864670 RDI: 0000000000000003
[  772.513032][   T30] RBP: 0000000000000000 R08: 00007ffe583eb1a4 R09: 000000000000000c
[  772.521064][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  772.541334][   T30] R13: 0000000000000000 R14: 00007fa4c7864670 R15: 0000000000000000
[  772.560390][   T30]  </TASK>
[  772.567577][   T30] INFO: task syz-executor:12244 blocked for more than 144 seconds.
[  772.589449][   T30]       Not tainted 6.12.0-rc5-next-20241030-syzkaller #0
[  772.599536][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  772.612840][   T30] task:syz-executor    state:D stack:25920 pid:12244 tgid:12244 ppid:1      flags:0x00000004
[  772.630734][   T30] Call Trace:
[  772.634376][   T30]  <TASK>
[  772.637360][   T30]  __schedule+0x184f/0x4c30
[  772.641924][   T30]  ? __pfx___schedule+0x10/0x10
[  772.653208][   T30]  ? __pfx_lock_release+0x10/0x10
[  772.658281][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  772.680645][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  772.692597][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  772.701953][   T30]  ? schedule+0x90/0x320
[  772.711531][   T30]  schedule+0x14b/0x320
[  772.719513][   T30]  schedule_preempt_disabled+0x13/0x30
[  772.732495][   T30]  __mutex_lock+0x7e7/0xee0
[  772.737431][   T30]  ? __mutex_lock+0x5ef/0xee0
[  772.742369][   T30]  ? inet_rtm_newaddr+0x47e/0x1bc0
[  772.762715][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  772.767815][   T30]  ? __lock_acquire+0x1397/0x2100
[  772.786857][   T30]  ? __nla_parse+0x40/0x60
[  772.791350][   T30]  inet_rtm_newaddr+0x47e/0x1bc0
[  772.801853][   T30]  ? rcu_read_unlock+0x87/0xa0
[  772.809632][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  772.821342][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  772.829422][   T30]  rtnetlink_rcv_msg+0x791/0xcf0
[  772.839116][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  772.846884][   T30]  ? __lock_acquire+0x1397/0x2100
[  772.851964][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  772.862239][   T30]  netlink_rcv_skb+0x1e3/0x430
[  772.870470][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  772.880856][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  772.891435][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  772.902720][   T30]  netlink_unicast+0x7f6/0x990
[  772.907545][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  772.921065][   T30]  ? __virt_addr_valid+0x183/0x530
[  772.926592][   T30]  ? __check_object_size+0x48e/0x900
[  772.931920][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  772.943763][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  772.949111][   T30]  ? __might_fault+0xaa/0x120
[  772.960771][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  772.967243][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  772.978282][   T30]  __sock_sendmsg+0x221/0x270
[  772.984655][   T30]  __sys_sendto+0x39b/0x4f0
[  772.989213][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  773.003632][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  773.009686][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  773.025456][   T30]  ? exc_page_fault+0x590/0x8c0
[  773.030381][   T30]  __x64_sys_sendto+0xde/0x100
[  773.042289][   T30]  do_syscall_64+0xf3/0x230
[  773.047251][   T30]  ? clear_bhb_loop+0x35/0x90
[  773.051978][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.062911][   T30] RIP: 0033:0x7f0accb805ac
[  773.067376][   T30] RSP: 002b:00007ffff5d59b80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  773.082071][   T30] RAX: ffffffffffffffda RBX: 00007f0acd864620 RCX: 00007f0accb805ac
[  773.090442][   T30] RDX: 0000000000000028 RSI: 00007f0acd864670 RDI: 0000000000000003
[  773.105964][   T30] RBP: 0000000000000000 R08: 00007ffff5d59bd4 R09: 000000000000000c
[  773.122438][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  773.131255][   T30] R13: 0000000000000000 R14: 00007f0acd864670 R15: 0000000000000000
[  773.146216][   T30]  </TASK>
[  773.149347][   T30] INFO: task syz-executor:12246 blocked for more than 145 seconds.
[  773.164005][   T30]       Not tainted 6.12.0-rc5-next-20241030-syzkaller #0
[  773.171155][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  773.185936][   T30] task:syz-executor    state:D stack:25920 pid:12246 tgid:12246 ppid:1      flags:0x00000004
[  773.198766][   T30] Call Trace:
[  773.202289][   T30]  <TASK>
[  773.212160][   T30]  __schedule+0x184f/0x4c30
[  773.228775][   T30]  ? __pfx___schedule+0x10/0x10
[  773.249396][   T30]  ? __pfx_lock_release+0x10/0x10
[  773.256009][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  773.261954][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  773.275002][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  773.281405][   T30]  ? schedule+0x90/0x320
[  773.290431][   T30]  schedule+0x14b/0x320
[  773.297197][   T30]  schedule_preempt_disabled+0x13/0x30
[  773.308563][   T30]  __mutex_lock+0x7e7/0xee0
[  773.317721][   T30]  ? __mutex_lock+0x5ef/0xee0
[  773.322456][   T30]  ? inet_rtm_newaddr+0x47e/0x1bc0
[  773.339549][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  773.347225][   T30]  ? __lock_acquire+0x1397/0x2100
[  773.352319][   T30]  ? __nla_parse+0x40/0x60
[  773.365112][   T30]  inet_rtm_newaddr+0x47e/0x1bc0
[  773.370122][   T30]  ? rcu_read_unlock+0x87/0xa0
[  773.379830][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  773.387925][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  773.398160][   T30]  rtnetlink_rcv_msg+0x791/0xcf0
[  773.406438][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  773.412417][   T30]  ? __lock_acquire+0x1397/0x2100
[  773.422457][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  773.430669][   T30]  netlink_rcv_skb+0x1e3/0x430
[  773.443543][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  773.449062][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  773.461701][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  773.467359][   T30]  netlink_unicast+0x7f6/0x990
[  773.472180][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  773.485671][   T30]  ? __virt_addr_valid+0x183/0x530
[  773.490841][   T30]  ? __check_object_size+0x48e/0x900
[  773.500265][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  773.509114][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  773.518831][   T30]  ? __might_fault+0xaa/0x120
[  773.527253][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  773.532685][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  773.538100][   T30]  __sock_sendmsg+0x221/0x270
[  773.557409][   T30]  __sys_sendto+0x39b/0x4f0
[  773.561984][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  773.572633][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  773.578679][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  773.591285][   T30]  ? exc_page_fault+0x590/0x8c0
[  773.596543][   T30]  __x64_sys_sendto+0xde/0x100
[  773.601353][   T30]  do_syscall_64+0xf3/0x230
[  773.613313][   T30]  ? clear_bhb_loop+0x35/0x90
[  773.618843][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.630766][   T30] RIP: 0033:0x7f777d7805ac
[  773.638569][   T30] RSP: 002b:00007fff69720880 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  773.655841][   T30] RAX: ffffffffffffffda RBX: 00007f777e464620 RCX: 00007f777d7805ac
[  773.671027][   T30] RDX: 0000000000000028 RSI: 00007f777e464670 RDI: 0000000000000003
[  773.679451][   T30] RBP: 0000000000000000 R08: 00007fff697208d4 R09: 000000000000000c
[  773.692650][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  773.700762][   T30] R13: 0000000000000000 R14: 00007f777e464670 R15: 0000000000000000
[  773.716149][   T30]  </TASK>
[  773.720054][   T30] 
[  773.720054][   T30] Showing all locks held in the system:
[  773.731725][   T30] 3 locks held by kworker/u8:1/12:
[  773.741086][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  773.760488][   T30]  #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  773.783144][   T30]  #2: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  773.792212][   T30] 1 lock held by khungtaskd/30:
[  773.804810][   T30]  #0: ffffffff8e939f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  773.819474][   T30] 5 locks held by kworker/1:1/51:
[  773.828440][   T30] 3 locks held by kworker/u8:6/1106:
[  773.838572][   T30]  #0: ffff88814b9eb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  773.857896][   T30]  #1: ffffc90003d17d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  773.878869][   T30]  #2: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  773.899070][   T30] 2 locks held by getty/5602:
[  773.904231][   T30]  #0: ffff8880313ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  773.920904][   T30]  #1: ffffc900032232f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  773.932206][   T30] 2 locks held by syz-executor/5848:
[  773.944374][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  773.960221][   T30]  #1: ffffffff8e7d40d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0
[  773.972003][   T30] 6 locks held by kworker/u8:14/8721:
[  773.982696][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  774.005966][   T30]  #1: ffffc90003e77d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  774.022342][   T30]  #2: ffffffff8fcc3ad0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xcc0
[  774.040058][   T30]  #3: ffff888058fd00e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x13b/0x440
[  774.050976][   T30]  #4: ffff888058fd1250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x14d/0x440
[  774.068967][   T30]  #5: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x89/0x3a0
[  774.080262][   T30] 1 lock held by syz-executor/12181:
[  774.092636][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  774.101704][   T30] 1 lock held by syz-executor/12215:
[  774.117738][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  774.130214][   T30] 1 lock held by syz.0.1698/12229:
[  774.141136][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  774.157610][   T30] 1 lock held by syz-executor/12241:
[  774.164416][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.179920][   T30] 1 lock held by syz-executor/12244:
[  774.187972][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.207090][   T30] 1 lock held by syz-executor/12246:
[  774.212414][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.231525][   T30] 1 lock held by syz-executor/12250:
[  774.239909][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.256772][   T30] 1 lock held by syz-executor/12255:
[  774.262097][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.287423][   T30] 1 lock held by syz-executor/12264:
[  774.295633][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.310057][   T30] 1 lock held by syz-executor/12268:
[  774.318018][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.332313][   T30] 1 lock held by syz-executor/12270:
[  774.349681][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.369935][   T30] 1 lock held by syz-executor/12277:
[  774.375657][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.393477][   T30] 1 lock held by syz-executor/12283:
[  774.398804][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.413026][   T30] 1 lock held by syz-executor/12288:
[  774.421478][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.440097][   T30] 1 lock held by syz-executor/12293:
[  774.447977][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.466791][   T30] 1 lock held by syz-executor/12294:
[  774.472115][   T30]  #0: ffffffff8fcd05e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0
[  774.490427][   T30] 
[  774.494255][   T30] =============================================
[  774.494255][   T30] 
[  774.509730][   T30] NMI backtrace for cpu 0
[  774.514109][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-next-20241030-syzkaller #0
[  774.524108][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  774.534190][   T30] Call Trace:
[  774.537495][   T30]  <TASK>
[  774.540445][   T30]  dump_stack_lvl+0x241/0x360
[  774.545160][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  774.550388][   T30]  ? __pfx__printk+0x10/0x10
[  774.555025][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  774.560004][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  774.565488][   T30]  ? _printk+0xd5/0x120
[  774.569667][   T30]  ? __pfx__printk+0x10/0x10
[  774.574279][   T30]  ? __wake_up_klogd+0xcc/0x110
[  774.579152][   T30]  ? __pfx__printk+0x10/0x10
[  774.583768][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  774.588822][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  774.594833][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  774.600840][   T30]  watchdog+0xffb/0x1040
[  774.605109][   T30]  ? watchdog+0x1ea/0x1040
[  774.609546][   T30]  ? __pfx_watchdog+0x10/0x10
[  774.614240][   T30]  kthread+0x2f0/0x390
[  774.618329][   T30]  ? __pfx_watchdog+0x10/0x10
[  774.623026][   T30]  ? __pfx_kthread+0x10/0x10
[  774.627640][   T30]  ret_from_fork+0x4b/0x80
[  774.632172][   T30]  ? __pfx_kthread+0x10/0x10
[  774.636783][   T30]  ret_from_fork_asm+0x1a/0x30
[  774.641585][   T30]  </TASK>
[  774.645410][   T30] Sending NMI from CPU 0 to CPUs 1:
[  774.650660][    C1] NMI backtrace for cpu 1
[  774.650676][    C1] CPU: 1 UID: 0 PID: 51 Comm: kworker/1:1 Not tainted 6.12.0-rc5-next-20241030-syzkaller #0
[  774.650695][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  774.650705][    C1] Workqueue: events_power_efficient gc_worker
[  774.650729][    C1] RIP: 0010:kasan_check_range+0x48/0x290
[  774.650748][    C1] Code: 0f 82 56 02 00 00 48 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb 48 c1 eb 03 49 ba 00 00 00 00 00 fc ff df <4e> 8d 1c 13 49 ff c8 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc
[  774.650762][    C1] RSP: 0018:ffffc90000a17df0 EFLAGS: 00000806
[  774.650776][    C1] RAX: 0000000000000001 RBX: 1ffffffff2039fee RCX: ffffffff81707560
[  774.650788][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901cff70
[  774.650799][    C1] RBP: 000000000001ffff R08: ffffffff901cff78 R09: fffff52000142fdc
[  774.650810][    C1] R10: dffffc0000000000 R11: fffff52000142fdc R12: 1ffff92000142fd0
[  774.650822][    C1] R13: ffffffff84b94031 R14: ffffc90000a17f80 R15: dffffc0000000000
[  774.650835][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  774.650848][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  774.650860][    C1] CR2: 0000000020b63fe4 CR3: 000000000e736000 CR4: 00000000003526f0
[  774.650875][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  774.650884][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  774.650895][    C1] Call Trace:
[  774.650900][    C1]  <NMI>
[  774.650907][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  774.650925][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  774.650948][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  774.650964][    C1]  ? nmi_handle+0x2a/0x5a0
[  774.650986][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  774.651006][    C1]  ? nmi_handle+0x14f/0x5a0
[  774.651022][    C1]  ? nmi_handle+0x2a/0x5a0
[  774.651038][    C1]  ? kasan_check_range+0x48/0x290
[  774.651053][    C1]  ? default_do_nmi+0x63/0x160
[  774.651070][    C1]  ? exc_nmi+0x123/0x1f0
[  774.651086][    C1]  ? end_repeat_nmi+0xf/0x53
[  774.651102][    C1]  ? debug_check_no_obj_freed+0x561/0x580
[  774.651125][    C1]  ? lock_release+0xb0/0xa30
[  774.651140][    C1]  ? kasan_check_range+0x48/0x290
[  774.651155][    C1]  ? kasan_check_range+0x48/0x290
[  774.651171][    C1]  ? kasan_check_range+0x48/0x290
[  774.651186][    C1]  </NMI>
[  774.651192][    C1]  <IRQ>
[  774.651199][    C1]  lock_release+0xb0/0xa30
[  774.651216][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  774.651239][    C1]  ? __pfx_lock_release+0x10/0x10
[  774.651255][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  774.651273][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[  774.651292][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  774.651310][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  774.651335][    C1]  _raw_spin_unlock_irqrestore+0x79/0x140
[  774.651355][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  774.651379][    C1]  debug_check_no_obj_freed+0x561/0x580
[  774.651405][    C1]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  774.651429][    C1]  ? skb_release_data+0x6a0/0x8a0
[  774.651448][    C1]  ? nft_synproxy_do_eval+0x746/0xa60
[  774.651466][    C1]  ? nft_synproxy_do_eval+0x746/0xa60
[  774.651484][    C1]  kmem_cache_free+0x114/0x410
[  774.651503][    C1]  nft_synproxy_do_eval+0x746/0xa60
[  774.651523][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  774.651543][    C1]  ? ip_vs_conn_out_get+0xba6/0xc00
[  774.651565][    C1]  nft_do_chain+0x4ad/0x1da0
[  774.651586][    C1]  ? nf_nat_inet_fn+0xa30/0xd10
[  774.651606][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  774.651633][    C1]  ? nf_nat_ipv6_fn+0x2cb/0x3e0
[  774.651655][    C1]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  774.651676][    C1]  nft_do_chain_inet+0x418/0x6b0
[  774.651695][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  774.651711][    C1]  ? nf_nat_ipv6_local_in+0x1cd/0x620
[  774.651733][    C1]  ? __pfx_nf_nat_ipv6_local_in+0x10/0x10
[  774.651753][    C1]  ? nf_nat_ipv6_fn+0x2cb/0x3e0
[  774.651775][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  774.651791][    C1]  nf_hook_slow+0xc3/0x220
[  774.651807][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  774.651826][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  774.651844][    C1]  NF_HOOK+0x29e/0x450
[  774.651863][    C1]  ? NF_HOOK+0x9a/0x450
[  774.651879][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  774.651898][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  774.651917][    C1]  ? ip6_rcv_finish_core+0x1fb/0x410
[  774.651937][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  774.651955][    C1]  NF_HOOK+0x3a4/0x450
[  774.651971][    C1]  ? skb_orphan+0xae/0xd0
[  774.651990][    C1]  ? NF_HOOK+0x9a/0x450
[  774.652007][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  774.652026][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  774.652047][    C1]  ? __pfx_ipv6_rcv+0x10/0x10
[  774.652064][    C1]  __netif_receive_skb+0x1ea/0x650
[  774.652086][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  774.652106][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  774.652125][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  774.652145][    C1]  ? __pfx_lock_release+0x10/0x10
[  774.652160][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  774.652183][    C1]  process_backlog+0x662/0x15b0
[  774.652200][    C1]  ? process_backlog+0x33b/0x15b0
[  774.652219][    C1]  ? __pfx_process_backlog+0x10/0x10
[  774.652238][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  774.652260][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  774.652282][    C1]  __napi_poll+0xcb/0x490
[  774.652303][    C1]  net_rx_action+0x89b/0x1240
[  774.652327][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  774.652343][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  774.652368][    C1]  ? __pfx_net_tx_action+0x10/0x10
[  774.652383][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  774.652408][    C1]  handle_softirqs+0x2c5/0x980
[  774.652429][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[  774.652449][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  774.652469][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  774.652486][    C1]  __irq_exit_rcu+0xf4/0x1c0
[  774.652504][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  774.652525][    C1]  irq_exit_rcu+0x9/0x30
[  774.652542][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  774.652560][    C1]  </IRQ>
[  774.652565][    C1]  <TASK>
[  774.652570][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  774.652590][    C1] RIP: 0010:seqcount_lockdep_reader_access+0x1e0/0x220
[  774.652608][    C1] Code: f7 4d 85 ed 75 16 e8 1f 88 bb f7 eb 15 e8 18 88 bb f7 e8 73 22 ea 01 4d 85 ed 74 ea e8 09 88 bb f7 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00
[  774.652621][    C1] RSP: 0018:ffffc90000bb79a0 EFLAGS: 00000293
[  774.652634][    C1] RAX: ffffffff89d99b27 RBX: 0000000000000000 RCX: ffff888022688000
[  774.652645][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  774.652654][    C1] RBP: ffffc90000bb7a50 R08: ffffffff89d99afd R09: 1ffffffff2859b1c
[  774.652665][    C1] R10: dffffc0000000000 R11: fffffbfff2859b1d R12: dffffc0000000000
[  774.652677][    C1] R13: 0000000000000200 R14: 0000000000000046 R15: 1ffff92000176f34
[  774.652691][    C1]  ? seqcount_lockdep_reader_access+0x1ad/0x220
[  774.652708][    C1]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[  774.652730][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  774.652748][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  774.652775][    C1]  gc_worker+0x316/0x1530
[  774.652794][    C1]  ? gc_worker+0x26b/0x1530
[  774.652816][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  774.652838][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  774.652859][    C1]  ? __pfx_gc_worker+0x10/0x10
[  774.652879][    C1]  ? process_scheduled_works+0x976/0x1850
[  774.652900][    C1]  process_scheduled_works+0xa63/0x1850
[  774.652932][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  774.652955][    C1]  ? assign_work+0x364/0x3d0
[  774.652976][    C1]  worker_thread+0x870/0xd30
[  774.653001][    C1]  ? __kthread_parkme+0x169/0x1d0
[  774.653023][    C1]  ? __pfx_worker_thread+0x10/0x10
[  774.653042][    C1]  kthread+0x2f0/0x390
[  774.653057][    C1]  ? __pfx_worker_thread+0x10/0x10
[  774.653075][    C1]  ? __pfx_kthread+0x10/0x10
[  774.653091][    C1]  ret_from_fork+0x4b/0x80
[  774.653110][    C1]  ? __pfx_kthread+0x10/0x10
[  774.653125][    C1]  ret_from_fork_asm+0x1a/0x30
[  774.653152][    C1]  </TASK>
[  775.518565][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  775.525461][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-next-20241030-syzkaller #0
[  775.535461][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  775.545533][   T30] Call Trace:
[  775.548914][   T30]  <TASK>
[  775.551876][   T30]  dump_stack_lvl+0x241/0x360
[  775.556596][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  775.561824][   T30]  ? __pfx__printk+0x10/0x10
[  775.566443][   T30]  ? vscnprintf+0x5d/0x90
[  775.570792][   T30]  panic+0x349/0x880
[  775.574712][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  775.580885][   T30]  ? __pfx_panic+0x10/0x10
[  775.585478][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  775.590872][   T30]  ? __irq_work_queue_local+0x137/0x410
[  775.596452][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  775.601845][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  775.608036][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  775.614222][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  775.620486][   T30]  watchdog+0x103a/0x1040
[  775.624834][   T30]  ? watchdog+0x1ea/0x1040
[  775.629359][   T30]  ? __pfx_watchdog+0x10/0x10
[  775.634140][   T30]  kthread+0x2f0/0x390
[  775.638228][   T30]  ? __pfx_watchdog+0x10/0x10
[  775.642929][   T30]  ? __pfx_kthread+0x10/0x10
[  775.647536][   T30]  ret_from_fork+0x4b/0x80
[  775.651979][   T30]  ? __pfx_kthread+0x10/0x10
[  775.656593][   T30]  ret_from_fork_asm+0x1a/0x30
[  775.661396][   T30]  </TASK>
[  775.664707][   T30] Kernel Offset: disabled
[  775.669037][   T30] Rebooting in 86400 seconds..