last executing test programs:

22m38.034864702s ago: executing program 32 (id=839):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002200), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
lseek(r2, 0x6, 0x2)

22m18.744267674s ago: executing program 33 (id=1070):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000002200)='sched\x00')
read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0)=r2, 0x1c)

21m53.584440492s ago: executing program 34 (id=1219):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00')
close_range(r0, r0, 0x0)
syz_open_dev$loop(&(0x7f0000000a80), 0x1, 0x100)
statx(r0, 0x0, 0x1000, 0x6000, 0x0)

21m44.127464459s ago: executing program 35 (id=1290):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0)
r1 = epoll_create1(0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2000000d})
read$char_usb(r0, &(0x7f0000000200)=""/89, 0x59)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x10000004})

21m17.565036213s ago: executing program 36 (id=1357):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000})
syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="400608000000b3c169eb503d2911adac07b0c5939999ff290dc087bcf23c8bacc42a9727941743ba6a79ec531ef235945ed21262"], 0x0, 0x0, 0x0, 0x0, 0x0})

19m40.005246003s ago: executing program 9 (id=2130):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2}}}}}}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

19m39.789192492s ago: executing program 9 (id=2133):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x6a, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x14, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x0, 0x18, 0x1, "f4"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

19m36.239861567s ago: executing program 9 (id=2144):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000300)="7f3e37fd9c14c58aca0ea7f57426a545d7e017342d5a1d4956af2440fdb8fa9331c2085ce13c9dc7c905f482c46407278506e7930eb3f9d2c2bc576599116f4db59357c60a370a47b066ac34579ef45ec052698fb4f2d7c2a496c0a345d445f0abe66fde2285117edaab2880d643600096fab2aa503b91c7e71d728c67e7e5d55f86694f92635cb0de20b524e04e6bc75c108d043781c78bacc908", 0x9b}, {&(0x7f0000000400)="32470eb5be2954e389ad8c662421a934a669aee02e079b85b07d28cb376229d758a1c002a5fc33861933ebcbfb9186d9e89d5ff265e4aed78c5c65040d4bf904810eaa0b761671786b71301aff9ec3e5f9235d10c9c17c94f98ab81ccb700e3a87f455a6631fa4b9e757f16e1786e94c9bb6c93bb0fdbf805c628525806798743cd040ee22f2ed845f8e828685ad7f7203362aa18c0b0197a1b2bf27028e6ea16bda9b3f64aa38061bf5", 0xaa}, {&(0x7f0000000500)="8f3e99aadb873515b4b1c2b102868fb1886a58fa6895c15cb1816c998045848c6c4997ae5788b92fdc7295a22a7b7578a8099dc4719b4392923d44ce0099d2a19931c336c489d5ab2a8971b59bfee135", 0x50}, {&(0x7f0000001c80)}, {&(0x7f0000000600)}], 0x5, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x260}}], 0x2, 0x24)

19m36.098520682s ago: executing program 9 (id=2147):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

19m35.824042297s ago: executing program 9 (id=2149):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

19m34.174240082s ago: executing program 9 (id=2152):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4005}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES8=r2], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="050424bd7000fe", @ANYRES32=r5, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r5, 0x2f, 0x4, 0x24, 0x3, 0x2c, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7800, 0x6, 0x5}})

19m18.022723837s ago: executing program 37 (id=2152):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4005}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES8=r2], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="050424bd7000fe", @ANYRES32=r5, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r5, 0x2f, 0x4, 0x24, 0x3, 0x2c, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7800, 0x6, 0x5}})

18m13.927119469s ago: executing program 4 (id=2335):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x8c2b01)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0, 0x7, "ff00"})
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(0x0, 0x34)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0xe3)
timer_delete(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r2, 0xffffffffffffffff, 0x0)

18m13.406251049s ago: executing program 4 (id=2337):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = userfaultfd(0x80801)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000000b40)={0x2020}, 0x2020)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

18m11.284373055s ago: executing program 4 (id=2338):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe)
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)

18m9.947430047s ago: executing program 4 (id=2340):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000014c0)={0x0, 0x0})

18m8.596308013s ago: executing program 4 (id=2342):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020)

18m7.087860032s ago: executing program 4 (id=2344):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x4000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x49b, 0x0, 0x1eee7cb5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4010804)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

17m52.034560609s ago: executing program 38 (id=2344):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x4000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x49b, 0x0, 0x1eee7cb5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4010804)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16m42.065377759s ago: executing program 8 (id=2449):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ptrace$getenv(0x4201, r1, 0x4, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffefa7}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

16m40.86826267s ago: executing program 8 (id=2451):
socket$packet(0x11, 0x3, 0x300)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$inet(r4, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r5, 0x0, 0x0, 0x40840)
sendfile(r3, r3, 0x0, 0xffffffff)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)

16m35.212995612s ago: executing program 8 (id=2461):
syz_open_dev$dri(0x0, 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r3, 0x0, 0x4048081)
recvmsg$can_j1939(r3, &(0x7f000001a3c0)={0x0, 0x0, &(0x7f000001a300)=[{&(0x7f000001a400)=""/68, 0x44}], 0x1}, 0x100)
connect$can_j1939(r3, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, 0x0)

16m30.973250909s ago: executing program 8 (id=2466):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000280), &(0x7f0000000100), &(0x7f0000000400), 0x0})
r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x9a974000)

16m28.56499991s ago: executing program 8 (id=2470):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @multicast}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40010041)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

16m27.00196285s ago: executing program 8 (id=2471):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
kcmp(r3, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[], 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x131800, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
unshare(0x4a000200)

16m11.297238541s ago: executing program 39 (id=2471):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
kcmp(r3, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[], 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x131800, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
unshare(0x4a000200)

7m59.304055587s ago: executing program 5 (id=5516):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04"], 0x48)

7m59.20752821s ago: executing program 5 (id=5518):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x4e22, 0x2, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x9, 0x80000000, 0x0, 0x4}, {0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x20000000000004}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0x2, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ffffc}}, 0xe4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

7m59.146705561s ago: executing program 5 (id=5520):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100))

7m59.063846712s ago: executing program 5 (id=5522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}}, 0x0)

7m58.940114144s ago: executing program 5 (id=5526):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000)

7m58.875546892s ago: executing program 5 (id=5528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x24, 0x5f, 0x333, 0x70bd29, 0x400000, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x5}, {0x1, 0xe}}}, 0x24}}, 0x0)

7m43.733999032s ago: executing program 40 (id=5528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x24, 0x5f, 0x333, 0x70bd29, 0x400000, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x5}, {0x1, 0xe}}}, 0x24}}, 0x0)

4m24.709725339s ago: executing program 0 (id=7905):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00')
fcntl$setstatus(r0, 0x4, 0x800)
r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x8000, &(0x7f0000000440)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1})
io_uring_enter(r1, 0x567, 0x1000a387, 0x0, 0x0, 0x0)

4m24.65221235s ago: executing program 0 (id=7906):
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="3d0200007d00000005fc000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ff"], 0x23d)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})

4m24.59087223s ago: executing program 0 (id=7907):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x40000d4)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

4m24.508072882s ago: executing program 0 (id=7908):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x8)

4m24.486488191s ago: executing program 0 (id=7910):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})

4m23.472179174s ago: executing program 0 (id=7929):
r0 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f00000001c0)=""/65, 0x66)

4m23.185393976s ago: executing program 41 (id=7929):
r0 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f00000001c0)=""/65, 0x66)

25.516167878s ago: executing program 1 (id=9665):
socket$nl_xfrm(0x10, 0x3, 0x6)
getpid()
syz_open_dev$evdev(0x0, 0x0, 0x822b01)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x400, 0x0, 0x376}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

20.829839541s ago: executing program 6 (id=9674):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
set_mempolicy(0x6, 0x0, 0xe0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
add_key(0x0, 0x0, &(0x7f0000000240)="0000000000000004ff6943b89f", 0xd, 0xfffffffffffffffb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

19.516655604s ago: executing program 6 (id=9676):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffff9, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x15072}, 0x1})
io_uring_enter(r4, 0x468f, 0xc4bc, 0x2d, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x110003)

17.781952449s ago: executing program 7 (id=9679):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0xb8}, 0x18)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x5)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
close_range(r1, 0xffffffffffffffff, 0x0)

17.593936023s ago: executing program 7 (id=9681):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)

17.532101864s ago: executing program 6 (id=9682):
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"2c018d0cdddf11161c561b4e5f78b52deaef5d37b61b2e4bc60963431686fe60"})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)

16.298580985s ago: executing program 7 (id=9683):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4)

15.269248843s ago: executing program 7 (id=9686):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_sctp(0xa, 0x1, 0x84)
mremap(&(0x7f00009d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000379000/0x3000)=nil)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

14.540749291s ago: executing program 1 (id=9689):
setsockopt(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000012c0), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0)

14.530821735s ago: executing program 2 (id=9690):
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)

14.292053715s ago: executing program 3 (id=9691):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000240), 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0xce, @ipv4={'\x00', '\xff\xff', @empty}, 0xc517}}, 0x4, 0xfffc}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)

11.335662373s ago: executing program 2 (id=9692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a)

11.229551701s ago: executing program 1 (id=9693):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

10.953841794s ago: executing program 3 (id=9694):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

9.474223297s ago: executing program 2 (id=9695):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2$watch_queue(&(0x7f0000001100), 0x80)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)

8.506360932s ago: executing program 1 (id=9696):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r3, 0x0, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r3)
write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef)

8.360151548s ago: executing program 3 (id=9697):
socket$nl_generic(0x10, 0x3, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23b)
socket(0x21, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000014000000ee0016055e03010000000000160500000001000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
sched_setscheduler(0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002300), 0x1600)

7.354696443s ago: executing program 6 (id=9698):
socket$pppoe(0x18, 0x1, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x401)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={0x0})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000200)={0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYBLOB, @ANYBLOB], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

6.215774638s ago: executing program 1 (id=9699):
socket$netlink(0x10, 0x3, 0x4)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000007c0)={0x48})

5.92998179s ago: executing program 3 (id=9700):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x5}, 0x8)
socket$pppl2tp(0x18, 0x1, 0x1)

5.909743581s ago: executing program 2 (id=9701):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})

4.640046934s ago: executing program 1 (id=9702):
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r5, 0xc1d, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7151, 0x0)

2.85583561s ago: executing program 3 (id=9703):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20)

2.781239991s ago: executing program 7 (id=9704):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60)
r2 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa5\xed\x05\x12\x0f\x0eu\xe5 \xfe\xcdMX\xb5X\x838\xf5\x18x\xc9\xb9\x03\t\x06\x96g\x8a5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0\x1f\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0)
write(r2, &(0x7f00000002c0)='t', 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r4 = io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383})
accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x80400)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x8, 0x5, 0xa, 0x5, 0x2, 0xc}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x9}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010)
sendfile(r2, r2, &(0x7f00000001c0), 0xfec)

2.552283534s ago: executing program 6 (id=9705):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

2.41217087s ago: executing program 2 (id=9706):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
r1 = add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x7d)
socketpair(0x24, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x0})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000340)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})

435.553944ms ago: executing program 3 (id=9707):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000240)=0xeeee0000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb25040000000800040002000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2001}}, {0xba, &(0x7f00000000c0)=@string={0xba, 0x3, "b5643831064f65ab8416793a3596d33a724070dac1b7e54bb99a5b0ef5ec97fb94e30bee8087f686fb07fa5db93ef9fb4827d73c2ad8ab645d66a78714c971b5754706a78dbc41b80c64552ceb65a579f79c041e75487734aed4f621208a6b7ce7b3f5511d7128177ae1f0f24dc5d8e5aa9ccf87404efb38a6e3f71de4171dcb6caa5674407bfea380b6da2bceb21c675974d41e36dc60311f0530359e5d62280cf4437e4e02ed7cb35e03442d261685dfe560cd49fe20c5"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x59, &(0x7f0000000340)=@string={0x59, 0x3, "7157310267700e7b7941a4e14c8b38450d604a0e8666fb35196f44ecfd3fc1969ba1380277367a8029e869a8c4db5dded11d2381c34bd1a7901f088ccb15ebee5cae24fa69154916f539fcf513557ae44dffc632802ecb"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100a}}]})
syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="600d03000000d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

423.086952ms ago: executing program 6 (id=9708):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
socket$packet(0x11, 0x2, 0x300)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0x3)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c26, 0x10100, 0x0, 0xfffffffd, 0x0, r1}, 0x0, 0x0)
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x19, 0x8000000000000001, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

400.902234ms ago: executing program 7 (id=9709):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
socket(0x23, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)

0s ago: executing program 2 (id=9710):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})

kernel console output (not intermixed with test programs):

e=ce.6f
[ 1207.936937][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.936957][ T5894] usb 1-1: Product: syz
[ 1207.936971][ T5894] usb 1-1: Manufacturer: syz
[ 1207.936985][ T5894] usb 1-1: SerialNumber: syz
[ 1207.942580][ T5894] usb 1-1: config 0 descriptor??
[ 1207.946841][ T5894] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1208.165123][ T5894] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1208.303306][T23815] loop9: detected capacity change from 0 to 7
[ 1208.315028][ T5894] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1208.318988][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.319188][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.319349][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.319499][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.319740][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.319904][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.320050][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.320115][T23815] ldm_validate_partition_table(): Disk read failed.
[ 1208.320547][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.320891][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.321366][T23815] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1208.323910][T23815] Dev loop9: unable to read RDB block 0
[ 1208.325157][T23815]  loop9: unable to read partition table
[ 1208.328675][T23815] loop9: partition table beyond EOD, truncated
[ 1208.329067][T23815] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[ 1208.329067][T23815] 
) failed (rc=-5)
[ 1208.580444][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1208.612448][ T5894] usb 1-1: USB disconnect, device number 33
[ 1208.631876][ T5894] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1208.652029][ T5894] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1208.661770][ T5894] quatech2 1-1:0.51: device disconnected
[ 1209.537172][T13617] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1209.684602][T13617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1209.684637][T13617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1209.684674][T13617] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1209.684697][T13617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.689615][T13617] usb 1-1: config 0 descriptor??
[ 1210.116642][T13617] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0
[ 1210.116772][T13617] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0
[ 1210.179462][T13617] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0027/input/input48
[ 1210.214778][T13617] cm6533_jd 0003:0D8C:0022.0027: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[ 1210.323931][T14261] usb 1-1: USB disconnect, device number 34
[ 1210.771664][T13617] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1210.921569][T13617] usb 2-1: Using ep0 maxpacket: 8
[ 1210.925453][T13617] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1210.925484][T13617] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1210.925509][T13617] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1210.925533][T13617] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1210.925574][T13617] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1210.925595][T13617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.158995][T13617] usb 2-1: GET_CAPABILITIES returned 0
[ 1211.159042][T13617] usbtmc 2-1:16.0: can't read capabilities
[ 1211.370223][T14261] usb 2-1: USB disconnect, device number 33
[ 1212.572865][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1213.398960][T16102] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1214.194436][T16102] usb 2-1: config index 0 descriptor too short (expected 133, got 72)
[ 1214.197691][T16102] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1214.197717][T16102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1214.197737][T16102] usb 2-1: Product: syz
[ 1214.197760][T16102] usb 2-1: Manufacturer: syz
[ 1214.197775][T16102] usb 2-1: SerialNumber: syz
[ 1214.261496][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1214.266706][T16102] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1214.332120][T14261] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1214.333058][T23973] netlink: 'syz.3.7233': attribute type 29 has an invalid length.
[ 1214.334197][T23973] netlink: 'syz.3.7233': attribute type 29 has an invalid length.
[ 1214.335012][T23973] netlink: 500 bytes leftover after parsing attributes in process `syz.3.7233'.
[ 1214.617295][T13617] usb 2-1: USB disconnect, device number 34
[ 1215.136514][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1215.638948][T14261] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1215.639146][T14261] ath9k_htc: Failed to initialize the device
[ 1215.640296][T13617] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1216.029609][T24022] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1216.291950][T13617] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1216.461764][T13617] usb 1-1: Using ep0 maxpacket: 16
[ 1216.467376][T13617] usb 1-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf
[ 1216.467406][T13617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1216.476860][T13617] usb 1-1: config 0 descriptor??
[ 1216.807401][   T37] audit: type=1800 audit(2134218433.317:428): pid=24039 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.7261" name="nullb0" dev="tmpfs" ino=7117 res=0 errno=0
[ 1217.021670][ T5888] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1217.184311][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1217.184335][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1217.184395][ T5888] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1217.184407][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1217.194448][ T5888] usb 2-1: config 0 descriptor??
[ 1217.553620][T13617] pegasus 1-1:0.0: probe with driver pegasus failed with error -71
[ 1217.564925][T13617] usb 1-1: USB disconnect, device number 35
[ 1217.672008][ T5888] playstation 0003:054C:0DF2.0028: unknown main item tag 0x0
[ 1217.672047][ T5888] playstation 0003:054C:0DF2.0028: unknown main item tag 0x0
[ 1217.672073][ T5888] playstation 0003:054C:0DF2.0028: unknown main item tag 0x0
[ 1217.672098][ T5888] playstation 0003:054C:0DF2.0028: unknown main item tag 0x0
[ 1217.672124][ T5888] playstation 0003:054C:0DF2.0028: unknown main item tag 0x0
[ 1217.679983][ T5888] playstation 0003:054C:0DF2.0028: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[ 1217.859149][ T5888] playstation 0003:054C:0DF2.0028: Invalid byte count transferred, expected 20 got 0
[ 1217.859239][ T5888] playstation 0003:054C:0DF2.0028: Failed to retrieve DualSense pairing info: -22
[ 1217.859292][ T5888] playstation 0003:054C:0DF2.0028: Failed to get MAC address from DualSense
[ 1217.859394][ T5888] playstation 0003:054C:0DF2.0028: Failed to create dualsense.
[ 1217.861163][ T5888] playstation 0003:054C:0DF2.0028: probe with driver playstation failed with error -22
[ 1218.068107][T13617] usb 2-1: USB disconnect, device number 35
[ 1218.155908][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1218.155929][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1218.205213][T24072] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[ 1218.205254][T24072] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[ 1218.205274][T24072] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[ 1218.395051][T24080] netlink: 'syz.3.7281': attribute type 30 has an invalid length.
[ 1218.450997][T24081] netlink: 'syz.3.7281': attribute type 30 has an invalid length.
[ 1218.607664][T24083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7282'.
[ 1219.618556][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1219.941559][ T5805] Bluetooth: hci4: command 0x0406 tx timeout
[ 1220.587075][T24136] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7306'.
[ 1220.711646][ T5894] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1220.857872][T24140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7307'.
[ 1220.861630][ T5894] usb 2-1: Using ep0 maxpacket: 16
[ 1220.864213][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1220.864242][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1220.864278][ T5894] usb 2-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00
[ 1220.864301][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1220.869607][ T5894] usb 2-1: config 0 descriptor??
[ 1221.140133][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7312'.
[ 1221.176881][T24148] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7312'.
[ 1221.390344][ T5894] logitech-hidpp-device 0003:046D:C091.0029: hidraw0: USB HID v0.00 Device [HID 046d:c091] on usb-dummy_hcd.1-1/input0
[ 1221.551227][T13619] usb 2-1: USB disconnect, device number 36
[ 1221.611621][   T56] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1221.763797][   T56] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1221.763834][   T56] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1221.763872][   T56] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1221.763896][   T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1221.768988][T24150] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1221.817606][   T56] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1222.566176][T13619] usb 1-1: USB disconnect, device number 36
[ 1223.518402][T24231] overlayfs: failed to clone upperpath
[ 1223.591642][   T56] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1223.741635][   T56] usb 1-1: Using ep0 maxpacket: 16
[ 1223.744217][   T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1223.744247][   T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1223.744268][   T56] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1223.744308][   T56] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1223.744329][   T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.749139][   T56] usb 1-1: config 0 descriptor??
[ 1224.188533][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.188556][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.188572][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.188587][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.188602][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.188617][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.188632][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.188647][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.188663][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.188677][   T56] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 1224.192845][   T56] HID 045e:07da: Invalid code 65791 type 1
[ 1224.200303][   T56] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002A/input/input49
[ 1224.234286][   T56] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[ 1224.443836][   T56] usb 1-1: USB disconnect, device number 37
[ 1225.615627][T13359] Bluetooth: hci1: unexpected event for opcode 0x200d
[ 1226.076075][T24326] syz.6.7379 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1226.749298][T24353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7391'.
[ 1226.749324][T24353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7391'.
[ 1228.247983][T24408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7413'.
[ 1228.977789][T24438] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1229.013974][T24440] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.7429'.
[ 1229.314479][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1229.476116][T24455] loop8: detected capacity change from 0 to 7
[ 1229.477774][T24455] Dev loop8: unable to read RDB block 7
[ 1229.477819][T24455]  loop8: unable to read partition table
[ 1229.478048][T24455] loop8: partition table beyond EOD, truncated
[ 1229.478067][T24455] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1229.744939][T24455] Dev loop8: unable to read RDB block 7
[ 1229.744988][T24455]  loop8: unable to read partition table
[ 1229.745312][T24455] loop8: partition table beyond EOD, truncated
[ 1229.745333][T24455] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1230.083724][T24466] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1230.234665][T24471] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1230.301053][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1231.260616][T24500] loop4: detected capacity change from 0 to 7
[ 1231.300062][T24500] Dev loop4: unable to read RDB block 7
[ 1231.303607][T24500]  loop4: AHDI p1 p2
[ 1231.303644][T24500] loop4: partition table partially beyond EOD, truncated
[ 1231.303755][T24500] loop4: p1 size 4261412863 extends beyond EOD, truncated
[ 1231.594603][T24510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7461'.
[ 1231.691258][T24510] bond2: Invalid ad_actor_system MAC address.
[ 1231.691280][T24510] bond2: option ad_actor_system: invalid value (6543)
[ 1231.733781][T13619] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[ 1231.753495][T24510] bond2 (unregistering): Released all slaves
[ 1231.815571][T14261] IPVS: starting estimator thread 0...
[ 1231.889542][T24520] gretap0: entered promiscuous mode
[ 1231.918296][T13619] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[ 1231.918327][T13619] usb 1-1: config 0 has no interface number 0
[ 1231.921311][T13619] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1231.921336][T13619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1231.921356][T13619] usb 1-1: Product: syz
[ 1231.921370][T13619] usb 1-1: Manufacturer: syz
[ 1231.921384][T13619] usb 1-1: SerialNumber: syz
[ 1231.941905][T24521] IPVS: using max 14 ests per chain, 33600 per kthread
[ 1231.986739][T13619] usb 1-1: config 0 descriptor??
[ 1232.326102][T24535] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7471'.
[ 1232.402083][T13619] usb 1-1: Firmware: major: 152, minor: 96, hardware type: UNKNOWN (94)
[ 1232.603122][T13619] usb 1-1: Firmware: build 
[ 1232.805945][T13619] usb 1-1: failed to fetch extended address, random address set
[ 1232.805965][T13619] usb 1-1: atusb_probe: initialization failed, error = -524
[ 1232.831879][T13619] atusb 1-1:0.128: probe with driver atusb failed with error -524
[ 1232.880328][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1232.908102][T13619] usb 1-1: USB disconnect, device number 38
[ 1232.990178][T24550] tipc: Started in network mode
[ 1232.990209][T24550] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[ 1233.031402][T24550] tipc: Enabled bearer <eth:vlan0>, priority 10
[ 1233.971611][T13619] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1233.990501][T24583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7492'.
[ 1233.990530][T24583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7492'.
[ 1234.101962][T14261] tipc: Node number set to 10005162
[ 1234.153946][T13619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1234.153979][T13619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1234.154002][T13619] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1234.154050][T13619] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1234.154072][T13619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1234.159452][T13619] usb 2-1: config 0 descriptor??
[ 1234.596955][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.596992][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.597026][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.597053][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.597080][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.597107][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.597132][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.597159][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.597188][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.597215][T13619] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[ 1234.700317][T13619] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1234.883544][T13619] usb 2-1: USB disconnect, device number 37
[ 1235.214763][T24595] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1235.216165][T24595] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1235.310971][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7503'.
[ 1235.875833][T24595] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1235.903202][T24595] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1236.801855][T14261] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1236.952175][T14261] usb 1-1: Using ep0 maxpacket: 16
[ 1236.968294][T14261] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[ 1236.968323][T14261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1236.968343][T14261] usb 1-1: Product: syz
[ 1236.968357][T14261] usb 1-1: Manufacturer: syz
[ 1236.968372][T14261] usb 1-1: SerialNumber: syz
[ 1236.973352][T14261] usb 1-1: config 0 descriptor??
[ 1236.995507][T14261] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[ 1236.997117][T14261] usb 1-1: Detected FT-X
[ 1237.157106][T24601] bridge_slave_0: default FDB implementation only supports local addresses
[ 1237.159335][ T3524] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1237.159369][ T3524] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.159768][ T3524] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 50947 - 0
[ 1237.159949][ T3524] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1237.159976][ T3524] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.160001][ T3524] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 50947 - 0
[ 1237.160417][ T3524] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1237.160442][ T3524] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.160466][ T3524] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 50947 - 0
[ 1237.160501][ T3524] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1237.161085][ T3524] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.161114][ T3524] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 50947 - 0
[ 1237.231986][T14261] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1237.449110][   T37] audit: type=1400 audit(2134218453.957:429): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=24651 comm="syz.1.7524" name="raw-gadget" dev="devtmpfs" ino=815
[ 1237.554712][   T37] audit: type=1326 audit(2134218454.067:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24655 comm="syz.7.7526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x0
[ 1237.611618][T13617] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1237.648587][T14261] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1237.763788][T13617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1237.763813][T13617] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1237.763826][T13617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1237.763837][T13617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 1237.766288][T13617] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1237.766313][T13617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.766323][T13617] usb 4-1: Product: syz
[ 1237.766331][T13617] usb 4-1: Manufacturer: syz
[ 1237.766338][T13617] usb 4-1: SerialNumber: syz
[ 1237.769724][T13617] usb 4-1: config 0 descriptor??
[ 1237.771358][T24649] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1237.802280][T13617] usb 4-1: ucan: probing device on interface #0
[ 1237.802299][T13617] usb 4-1: ucan: invalid in_ep MaxPacketSize
[ 1237.802307][T13617] usb 4-1: ucan: probe failed; try to update the device firmware
[ 1237.839756][T14261] usb 1-1: USB disconnect, device number 39
[ 1237.993828][ T5894] usb 4-1: USB disconnect, device number 44
[ 1238.003484][T14261] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1238.004070][T14261] ftdi_sio 1-1:0.0: device disconnected
[ 1238.358270][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.358344][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.602343][T24723] sctp: [Deprecated]: syz.7.7555 (pid 24723) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1239.602343][T24723] Use struct sctp_sack_info instead
[ 1241.665337][T24767] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.7574'.
[ 1241.665375][T24767] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1241.883183][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7577'.
[ 1242.075578][T24783] netlink: 'syz.7.7580': attribute type 11 has an invalid length.
[ 1242.089616][T24785] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1242.331155][T24785] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 1242.344637][T24785] overlayfs: failed to look up (tracing) for ino (-66)
[ 1243.362138][T24810] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1243.702865][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7594'.
[ 1244.887749][T24860] program syz.0.7614 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1245.117221][T24866] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7617'.
[ 1245.118747][T24866] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7617'.
[ 1245.190956][T24869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7618'.
[ 1245.941863][ T5805] Bluetooth: hci2: command 0x0405 tx timeout
[ 1245.986178][   T37] audit: type=1326 audit(2134218462.487:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1245.986230][   T37] audit: type=1326 audit(2134218462.497:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1245.990477][   T37] audit: type=1326 audit(2134218462.497:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1245.994412][   T37] audit: type=1326 audit(2134218462.497:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1245.996063][   T37] audit: type=1326 audit(2134218462.507:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1245.996107][   T37] audit: type=1326 audit(2134218462.507:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1245.996146][   T37] audit: type=1326 audit(2134218462.507:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1245.996186][   T37] audit: type=1326 audit(2134218462.507:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1245.996963][   T37] audit: type=1326 audit(2134218462.507:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1245.997370][   T37] audit: type=1326 audit(2134218462.507:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24889 comm="syz.7.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1246.146325][T24892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7631'.
[ 1246.269408][T24893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7631'.
[ 1246.407826][T24892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7631'.
[ 1246.714129][T24893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7631'.
[ 1246.841797][   T56] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1246.877660][T24892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7631'.
[ 1247.003356][   T56] usb 1-1: Using ep0 maxpacket: 32
[ 1247.006472][   T56] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[ 1247.006506][   T56] usb 1-1: config 0 has no interface number 0
[ 1247.006556][   T56] usb 1-1: config 0 interface 184 has no altsetting 0
[ 1247.052459][   T56] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1247.052494][   T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1247.052513][   T56] usb 1-1: Product: syz
[ 1247.052527][   T56] usb 1-1: Manufacturer: syz
[ 1247.052541][   T56] usb 1-1: SerialNumber: syz
[ 1247.088003][   T56] usb 1-1: config 0 descriptor??
[ 1247.099165][   T56] smsc75xx v1.0.0
[ 1247.749268][   T56] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1247.749299][   T56] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1247.874818][T24928] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1247.964401][   T56] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1247.964434][   T56] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1247.964453][   T56] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1247.964476][   T56] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1247.964937][   T56] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[ 1247.993261][   T56] usb 1-1: USB disconnect, device number 40
[ 1248.522753][T24922] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1248.523547][T24922] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1248.900788][T24922] batman_adv: batadv0: Interface deactivated: dummy0
[ 1248.941681][ T5880] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[ 1249.099417][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1249.099465][ T5880] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1249.099499][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1249.139124][ T5880] usb 1-1: config 0 descriptor??
[ 1249.149546][T24949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1249.655362][ T5880] elan 0003:04F3:0755.002C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[ 1249.824559][ T5880] usb 1-1: USB disconnect, device number 41
[ 1250.298921][T24922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1250.416046][T24922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1251.661744][T13616] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1251.815757][T13616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1251.815793][T13616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1251.817516][T13616] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1251.817545][T13616] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1251.817565][T13616] usb 1-1: Manufacturer: syz
[ 1251.824845][T13616] usb 1-1: config 0 descriptor??
[ 1252.534618][T24922] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[ 1252.653558][T13616] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002D/input/input51
[ 1252.703827][   T12] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1252.703870][   T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.704379][   T12] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1252.704406][   T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.704442][   T12] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1252.704467][   T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.704607][   T12] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1252.704632][   T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.762428][T13616] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002D/input/input52
[ 1252.786735][T13616] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002D/input/input53
[ 1252.826626][T13616] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002D/input/input54
[ 1252.940217][T13616] uclogic 0003:256C:006D.002D: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0
[ 1252.971704][T13616] usb 1-1: USB disconnect, device number 42
[ 1253.504227][T25013] loop8: detected capacity change from 0 to 8
[ 1253.514815][T25013] Dev loop8: unable to read RDB block 8
[ 1253.514860][T25013]  loop8: unable to read partition table
[ 1253.515087][T25013] loop8: partition table beyond EOD, truncated
[ 1253.515105][T25013] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1253.647359][T25020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7683'.
[ 1253.971206][T13617] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1254.151671][T13617] usb 2-1: Using ep0 maxpacket: 32
[ 1254.153592][T13617] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1254.153619][T13617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1254.157935][T13617] usb 2-1: config 0 descriptor??
[ 1254.382502][T13617] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1254.418490][T13617] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1254.419368][T13617] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1254.419414][T13617] usb 2-1: media controller created
[ 1254.482634][T13617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1254.605983][T13617] az6027: usb out operation failed. (-71)
[ 1254.674804][T13617] az6027: usb out operation failed. (-71)
[ 1254.674824][T13617] stb0899_attach: Driver disabled by Kconfig
[ 1254.674835][T13617] az6027: no front-end attached
[ 1254.674835][T13617] 
[ 1254.676475][T13617] az6027: usb out operation failed. (-71)
[ 1254.676492][T13617] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1254.698205][T13617] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55
[ 1254.725339][T13617] dvb-usb: schedule remote query interval to 400 msecs.
[ 1254.725360][T13617] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1254.759844][T13617] usb 2-1: USB disconnect, device number 38
[ 1254.927990][T25052] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1255.036079][T13617] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1255.479044][T25071] kvm: user requested TSC rate below hardware speed
[ 1256.249425][ T5880] kernel read not supported for file /newroot/991 (pid: 5880 comm: kworker/0:4)
[ 1256.765710][T25107] vlan2: entered allmulticast mode
[ 1256.768478][T25107] bridge0: port 3(vlan2) entered blocking state
[ 1256.768712][T25107] bridge0: port 3(vlan2) entered disabled state
[ 1256.799576][T25107] vlan2: entered promiscuous mode
[ 1256.912575][T25111] loop8: detected capacity change from 0 to 8
[ 1256.919484][T25111] Dev loop8: unable to read RDB block 8
[ 1256.919529][T25111]  loop8: unable to read partition table
[ 1256.919744][T25111] loop8: partition table beyond EOD, truncated
[ 1256.919763][T25111] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1257.631825][ T5880] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1257.783946][ T5880] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[ 1257.783964][ T5880] usb 1-1: config 1 has no interface number 0
[ 1257.783994][ T5880] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1257.784008][ T5880] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1257.784021][ T5880] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1257.786480][ T5880] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1257.786507][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1257.786521][ T5880] usb 1-1: Product: syz
[ 1257.786528][ T5880] usb 1-1: Manufacturer: syz
[ 1257.786536][ T5880] usb 1-1: SerialNumber: syz
[ 1257.791044][T25126] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1257.999069][T25126] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1258.269572][ T5880] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[ 1258.316404][T25150] loop2: detected capacity change from 0 to 7
[ 1258.317532][T25150] Dev loop2: unable to read RDB block 7
[ 1258.317562][T25150]  loop2: AHDI p1 p2 p3
[ 1258.317590][T25150] loop2: partition table partially beyond EOD, truncated
[ 1258.317704][T25150] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1258.317724][T25150] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1258.631884][   T56] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1258.783953][   T56] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1258.784004][   T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1258.784030][   T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1258.784051][   T56] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1258.786218][   T56] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1258.786246][   T56] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1258.786274][   T56] usb 4-1: Manufacturer: syz
[ 1258.791031][   T56] usb 4-1: config 0 descriptor??
[ 1258.856852][T14261] usb 1-1: USB disconnect, device number 43
[ 1258.873522][T14261] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem
[ 1259.215727][   T56] hid_parser_main: 5 callbacks suppressed
[ 1259.215750][   T56] appleir 0003:05AC:8243.002E: unknown main item tag 0x0
[ 1259.237146][   T56] appleir 0003:05AC:8243.002E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 1259.253956][T14261] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[ 1259.764871][T13616] usb 4-1: USB disconnect, device number 45
[ 1259.957591][T25195] netlink: 'syz.7.7760': attribute type 13 has an invalid length.
[ 1259.957613][T25195] netlink: 'syz.7.7760': attribute type 17 has an invalid length.
[ 1260.131309][T25195] gretap0: left promiscuous mode
[ 1260.193710][T25195] erspan0: left promiscuous mode
[ 1260.246787][T25201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7763'.
[ 1260.570965][T25195] bridge0: left promiscuous mode
[ 1260.585726][T25195] bridge0: entered promiscuous mode
[ 1260.626442][T25195] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1260.650480][T25195] 8021q: adding VLAN 0 to HW filter on device team0
[ 1260.716085][T25195] batman_adv: batadv0: Interface activated: dummy0
[ 1260.716110][T25195] batadv0: mtu less than device minimum
[ 1260.750483][T25195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.775194][T25195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.793785][T25195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.809328][T25195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.831354][T25195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.851023][T25195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.870397][T25195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.890080][T25195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.909172][T25195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1261.079831][T25217] netlink: 'syz.0.7768': attribute type 4 has an invalid length.
[ 1261.137997][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1261.140406][T25218] netlink: 'syz.0.7768': attribute type 4 has an invalid length.
[ 1261.525639][   T37] kauditd_printk_skb: 1 callbacks suppressed
[ 1261.525660][   T37] audit: type=1800 audit(2134218478.027:442): pid=25234 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.7775" name="nullb0" dev="tmpfs" ino=1557 res=0 errno=0
[ 1261.926419][T25251] vcan0: tx drop: invalid da for name 0x0000000000000001
[ 1262.803519][ T5880] IPVS: starting estimator thread 0...
[ 1262.891956][T25297] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1263.406387][T25313] input: syz1 as /devices/virtual/input/input57
[ 1264.009841][T25329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7818'.
[ 1264.301889][T14261] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1264.462219][T14261] usb 4-1: Using ep0 maxpacket: 32
[ 1264.484501][T14261] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1264.484531][T14261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.484550][T14261] usb 4-1: Product: syz
[ 1264.484565][T14261] usb 4-1: Manufacturer: syz
[ 1264.484579][T14261] usb 4-1: SerialNumber: syz
[ 1264.532836][T14261] usb 4-1: config 0 descriptor??
[ 1264.538219][T14261] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1265.796903][T14261] gspca_ov534_9: reg_w failed -71
[ 1266.098900][T25372] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7837'.
[ 1266.099867][T25372] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7837'.
[ 1266.111818][T14261] gspca_ov534_9: Unknown sensor 0000
[ 1266.111914][T14261] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[ 1266.148883][T14261] usb 4-1: USB disconnect, device number 46
[ 1266.419928][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1266.527225][   T37] audit: type=1326 audit(2134218483.037:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25378 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a69f749 code=0x7ffc0000
[ 1266.527434][   T37] audit: type=1326 audit(2134218483.037:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25378 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a69f749 code=0x7ffc0000
[ 1266.527557][   T37] audit: type=1326 audit(2134218483.037:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25378 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a69f749 code=0x7ffc0000
[ 1266.528947][   T37] audit: type=1326 audit(2134218483.037:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25378 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa40a69f749 code=0x7ffc0000
[ 1266.529057][   T37] audit: type=1326 audit(2134218483.037:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25378 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a69f749 code=0x7ffc0000
[ 1266.530308][   T37] audit: type=1326 audit(2134218483.037:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25378 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa40a69f749 code=0x7ffc0000
[ 1266.530614][   T37] audit: type=1326 audit(2134218483.037:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25378 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a69f749 code=0x7ffc0000
[ 1266.530833][   T37] audit: type=1326 audit(2134218483.037:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25378 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa40a69f749 code=0x7ffc0000
[ 1268.448909][T25437] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7864'.
[ 1268.484240][T25437] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7864'.
[ 1269.431413][T25474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7879'.
[ 1270.782914][T25502] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1271.072198][T25519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1272.197076][T25556] fuse: Bad value for 'fd'
[ 1272.299053][   T37] audit: type=1326 audit(2134218488.797:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25557 comm="syz.7.7918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1272.299110][   T37] audit: type=1326 audit(2134218488.797:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25557 comm="syz.7.7918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1272.299153][   T37] audit: type=1326 audit(2134218488.797:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25557 comm="syz.7.7918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1272.393947][   T37] audit: type=1326 audit(2134218488.907:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25561 comm="syz.1.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6cef749 code=0x7ffc0000
[ 1272.394367][   T37] audit: type=1326 audit(2134218488.907:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25561 comm="syz.1.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6cef749 code=0x7ffc0000
[ 1272.397057][   T37] audit: type=1326 audit(2134218488.907:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25561 comm="syz.1.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f88b6cef749 code=0x7ffc0000
[ 1272.397106][   T37] audit: type=1326 audit(2134218488.907:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25561 comm="syz.1.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6cef749 code=0x7ffc0000
[ 1272.397148][   T37] audit: type=1326 audit(2134218488.907:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25561 comm="syz.1.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6cef749 code=0x7ffc0000
[ 1272.956353][T25586] netlink: 268 bytes leftover after parsing attributes in process `syz.6.7930'.
[ 1273.212313][T25591] fuse: Bad value for 'fd'
[ 1273.910907][T13359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1273.926737][T13359] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1273.928664][T13359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1273.950253][T13359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1273.958963][T13359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1274.412306][   T37] audit: type=1326 audit(2134218490.917:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25623 comm="syz.7.7948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7fc00000
[ 1274.461910][T25614] chnl_net:caif_netlink_parms(): no params data found
[ 1274.757377][T25648] netlink: 'syz.1.7955': attribute type 11 has an invalid length.
[ 1275.025955][   T37] audit: type=1326 audit(2134218491.527:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25623 comm="syz.7.7948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdacad4b829 code=0x7fc00000
[ 1275.089093][T25614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1275.095572][T25614] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1275.095838][T25614] bridge_slave_0: entered allmulticast mode
[ 1275.110826][T25614] bridge_slave_0: entered promiscuous mode
[ 1275.126871][T25614] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1275.141212][T25614] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1275.141405][T25614] bridge_slave_1: entered allmulticast mode
[ 1275.155777][T25614] bridge_slave_1: entered promiscuous mode
[ 1275.438720][T25614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1275.460351][T25614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1275.735011][T25614] team0: Port device team_slave_0 added
[ 1275.737415][T25614] team0: Port device team_slave_1 added
[ 1275.813240][T25689] fuse: Bad value for 'fd'
[ 1276.014272][T25693] netlink: 'syz.1.7974': attribute type 12 has an invalid length.
[ 1276.017925][T25614] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1276.017942][T25614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1276.017969][T25614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1276.031889][ T5805] Bluetooth: hci3: command tx timeout
[ 1276.092214][T25614] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1276.092232][T25614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1276.092257][T25614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1276.333639][T25614] hsr_slave_0: entered promiscuous mode
[ 1276.335107][T25614] hsr_slave_1: entered promiscuous mode
[ 1276.336112][T25614] debugfs: 'hsr0' already exists in 'hsr'
[ 1276.336136][T25614] Cannot create hsr debugfs directory
[ 1276.520935][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7982'.
[ 1276.523216][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7982'.
[ 1277.076561][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1277.176663][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1277.407747][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1278.104565][ T5805] Bluetooth: hci3: command tx timeout
[ 1278.664351][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1278.998783][T25614] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1279.085805][T25614] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1279.130450][T25804] 9pnet_fd: Insufficient options for proto=fd
[ 1279.155932][T25614] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1279.158735][T25800] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1279.339305][T25810] team_slave_0: entered promiscuous mode
[ 1279.339348][T25810] team_slave_1: entered promiscuous mode
[ 1279.340317][T25810] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1279.364005][T25810] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[ 1279.364343][T25614] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1279.618860][T25825] bridge0: port 4(erspan0) entered blocking state
[ 1279.619066][T25825] bridge0: port 4(erspan0) entered disabled state
[ 1279.636781][T25825] erspan0: entered allmulticast mode
[ 1279.652134][T25825] erspan0: entered promiscuous mode
[ 1279.652996][T25825] bridge0: port 4(erspan0) entered blocking state
[ 1279.653113][T25825] bridge0: port 4(erspan0) entered forwarding state
[ 1279.665380][T25825] erspan0: left allmulticast mode
[ 1279.665406][T25825] erspan0: left promiscuous mode
[ 1279.665686][T25825] bridge0: port 4(erspan0) entered disabled state
[ 1279.765924][T25829] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.8031'.
[ 1279.986674][T25614] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1280.027909][T25614] 8021q: adding VLAN 0 to HW filter on device team0
[ 1280.068959][T24197] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1280.069190][T24197] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1280.094817][T24197] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1280.095024][T24197] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1280.181662][ T5805] Bluetooth: hci3: command tx timeout
[ 1280.724629][T25614] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1280.841405][T25614] veth0_vlan: entered promiscuous mode
[ 1280.860605][T25614] veth1_vlan: entered promiscuous mode
[ 1280.934567][T25614] veth0_macvtap: entered promiscuous mode
[ 1280.944856][T25614] veth1_macvtap: entered promiscuous mode
[ 1280.979786][T25614] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1281.025857][T25614] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1281.089446][T24197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1281.089497][T24197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1281.090114][T24197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1281.090468][T24197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1282.061940][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1282.061961][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1282.249749][T24197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1282.249771][T24197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1282.264526][ T5805] Bluetooth: hci3: command tx timeout
[ 1282.962478][T25916] kvm: apic: phys broadcast and lowest prio
[ 1283.727047][T25941] loop9: detected capacity change from 0 to 7
[ 1283.728284][T25941] Dev loop9: unable to read RDB block 7
[ 1283.728312][T25941]  loop9: AHDI p1
[ 1283.728340][T25941] loop9: partition table partially beyond EOD, truncated
[ 1285.051656][   T56] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1285.211635][   T56] usb 3-1: Using ep0 maxpacket: 16
[ 1285.228220][   T56] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1285.228253][   T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1285.233879][   T56] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1285.233908][   T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.233919][   T56] usb 3-1: Product: syz
[ 1285.233927][   T56] usb 3-1: Manufacturer: syz
[ 1285.233935][   T56] usb 3-1: SerialNumber: syz
[ 1285.237342][   T56] usb 3-1: config 0 descriptor??
[ 1285.285285][   T56] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1285.285305][   T56] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1285.532682][T26004] overlayfs: failed to clone upperpath
[ 1285.927372][   T56] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1285.941360][   T56] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1286.162807][   T56] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 1286.162829][   T56] em28xx 3-1:0.0: No AC97 audio processor
[ 1286.233563][   T56] usb 3-1: USB disconnect, device number 13
[ 1286.239644][   T56] em28xx 3-1:0.0: Disconnecting em28xx
[ 1286.330141][   T56] em28xx 3-1:0.0: Freeing device
[ 1287.263827][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8121'.
[ 1287.263851][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8121'.
[ 1287.263879][T26042] netlink: 'syz.3.8121': attribute type 20 has an invalid length.
[ 1287.318902][T24209] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1287.319115][T24209] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1287.319138][T24209] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1287.319158][T24209] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1287.319262][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8121'.
[ 1287.319272][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8121'.
[ 1287.319287][T26042] netlink: 'syz.3.8121': attribute type 20 has an invalid length.
[ 1288.246958][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1288.578434][T26087] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1289.254695][T26105] Process accounting resumed
[ 1289.363993][T26112] netlink: 'syz.7.8153': attribute type 10 has an invalid length.
[ 1289.399031][T26112] team0: Device batadv1 failed to change mtu
[ 1289.399814][T26112] bond0: (slave team0): Error -22 calling dev_set_mtu
[ 1291.038421][T26153] 9pnet_fd: Insufficient options for proto=fd
[ 1291.208760][T26157] veth0: entered promiscuous mode
[ 1291.209958][T26157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8174'.
[ 1291.568558][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1291.879253][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.299001][T26193] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1292.395087][T26198] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8190'.
[ 1292.771662][ T5880] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[ 1292.924682][ T5880] usb 3-1: config 0 has no interfaces?
[ 1292.924719][ T5880] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1292.924743][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.928180][ T5880] usb 3-1: config 0 descriptor??
[ 1293.287358][T26234] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8206'.
[ 1293.287384][T26234] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8206'.
[ 1293.327541][T26234] erspan0: entered promiscuous mode
[ 1293.331411][T26234] gretap0: entered promiscuous mode
[ 1293.383001][   T56] usb 3-1: USB disconnect, device number 14
[ 1293.688958][T26242] 9pnet_fd: p9_fd_create_tcp (26242): problem connecting socket to 127.0.0.1
[ 1293.809714][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1296.396385][T26324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8244'.
[ 1296.523182][T26324] bond1: entered promiscuous mode
[ 1296.524259][T26324] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1296.799284][T26327] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1296.799755][T26327] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[ 1296.800972][T26327] bond1: (slave wireguard0): Error -95 calling set_mac_address
[ 1296.953439][T26342] overlayfs: failed to clone upperpath
[ 1296.986580][T26342] overlayfs: failed to clone upperpath
[ 1297.011925][T26340] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1297.030357][T26340] bond2: (slave lo): Enslaving as a backup interface with an up link
[ 1297.038019][T26340] net_ratelimit: 12 callbacks suppressed
[ 1297.038038][T26340] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1297.166439][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1297.349924][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1297.471683][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1298.017242][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1298.487632][T26392] input: syz0 as /devices/virtual/input/input58
[ 1298.947719][T26405] overlayfs: failed to clone upperpath
[ 1299.807233][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[ 1299.807298][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.142202][   T56] page_pool_release_retry() stalled pool shutdown: id 117, 1 inflight 60 sec
[ 1301.739040][T26495] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8319'.
[ 1301.978402][T26499] ubi31: attaching mtd0
[ 1301.978429][T26499] ubi31 error: ubi_attach_mtd_dev: bad VID header (86015) or data offsets (86079)
[ 1302.389332][T26509] macvlan3: entered promiscuous mode
[ 1302.455650][T26509] macvlan4: entered promiscuous mode
[ 1303.012506][   T56] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1303.163060][   T56] usb 3-1: Using ep0 maxpacket: 8
[ 1303.167216][   T56] usb 3-1: config 0 has an invalid interface number: 24 but max is 0
[ 1303.167242][   T56] usb 3-1: config 0 has no interface number 0
[ 1303.172326][   T56] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65
[ 1303.172354][   T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1303.172373][   T56] usb 3-1: Product: syz
[ 1303.172387][   T56] usb 3-1: Manufacturer: syz
[ 1303.172482][   T56] usb 3-1: SerialNumber: syz
[ 1303.183366][   T56] usb 3-1: config 0 descriptor??
[ 1303.395265][   T56] pegasus 3-1:0.24: probe with driver pegasus failed with error -71
[ 1303.436491][   T56] usb 3-1: USB disconnect, device number 15
[ 1305.412062][T26587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8360'.
[ 1305.656979][   T37] kauditd_printk_skb: 15 callbacks suppressed
[ 1305.657000][   T37] audit: type=1326 audit(2134218522.147:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26592 comm="syz.1.8363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6cef749 code=0x7ffc0000
[ 1305.685864][   T37] audit: type=1326 audit(2134218522.177:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26592 comm="syz.1.8363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f88b6cef749 code=0x7ffc0000
[ 1305.727416][   T37] audit: type=1326 audit(2134218522.237:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26592 comm="syz.1.8363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6cef749 code=0x7ffc0000
[ 1305.727591][   T37] audit: type=1326 audit(2134218522.237:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26592 comm="syz.1.8363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6cef749 code=0x7ffc0000
[ 1306.599712][T26629] IPVS: Scheduler module ip_vs_ not found
[ 1306.600969][T26637] IPVS: length: 8 != 318730305200
[ 1307.600987][T26683] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8401'.
[ 1308.636594][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1310.279555][T26757] bridge4: entered promiscuous mode
[ 1310.279580][T26757] bridge4: entered allmulticast mode
[ 1310.305127][T26757] team0: Port device bridge4 added
[ 1310.353442][T26758] bridge0: port 3(team0) entered blocking state
[ 1310.353635][T26758] bridge0: port 3(team0) entered disabled state
[ 1310.354233][T26758] team0: entered allmulticast mode
[ 1310.354245][T26758] team_slave_0: entered allmulticast mode
[ 1310.354461][T26758] team_slave_1: entered allmulticast mode
[ 1310.354472][T26758] batadv1: entered allmulticast mode
[ 1310.359352][T26758] team0: entered promiscuous mode
[ 1310.359366][T26758] team_slave_0: entered promiscuous mode
[ 1310.359477][T26758] team_slave_1: entered promiscuous mode
[ 1310.359571][T26758] batadv1: entered promiscuous mode
[ 1310.420278][ T1014] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[ 1310.420296][ T1014] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[ 1310.877516][T26775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8439'.
[ 1311.121839][   T56] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1311.256057][T26795] netlink: 'syz.1.8447': attribute type 3 has an invalid length.
[ 1311.256078][T26795] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8447'.
[ 1311.271577][   T56] usb 3-1: Using ep0 maxpacket: 16
[ 1311.273867][   T56] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1311.273891][   T56] usb 3-1: config 0 has no interface number 0
[ 1311.279266][   T56] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1311.279295][   T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.279322][   T56] usb 3-1: Product: syz
[ 1311.279335][   T56] usb 3-1: Manufacturer: syz
[ 1311.279350][   T56] usb 3-1: SerialNumber: syz
[ 1311.300852][   T56] usb 3-1: config 0 descriptor??
[ 1311.327195][   T56] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1311.809560][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1312.506869][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8458'.
[ 1312.526741][   T56] gspca_spca1528: reg_w err -71
[ 1312.526833][   T56] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[ 1312.530115][   T56] usb 3-1: USB disconnect, device number 16
[ 1314.283095][T14261] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[ 1314.526705][T14261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1314.526752][T14261] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1314.526775][T14261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1314.563041][T14261] usb 3-1: config 0 descriptor??
[ 1314.567875][T26890] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1314.686959][T26899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8485'.
[ 1314.887509][T26901] bridge5: entered promiscuous mode
[ 1314.887528][T26901] bridge5: entered allmulticast mode
[ 1314.890397][T26901] team0: Port device bridge5 added
[ 1315.024879][T14261] elan 0003:04F3:0755.002F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[ 1315.334906][T14261] usb 3-1: USB disconnect, device number 17
[ 1315.512024][T26925] netlink: 'syz.3.8495': attribute type 1 has an invalid length.
[ 1316.211074][T26943] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1316.775021][T26968] netlink: 'syz.1.8515': attribute type 4 has an invalid length.
[ 1316.824407][T26968] netlink: 'syz.1.8515': attribute type 4 has an invalid length.
[ 1316.908084][T26974] fuse: Bad value for 'fd'
[ 1317.510301][T26992] siw: device registration error -23
[ 1317.912591][T27007] overlayfs: failed to clone upperpath
[ 1318.843563][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8545'.
[ 1318.879283][T27040] erspan0: entered promiscuous mode
[ 1318.879484][T27040] macvtap0: entered promiscuous mode
[ 1318.879638][T27040] macvtap0: entered allmulticast mode
[ 1318.879651][T27040] erspan0: entered allmulticast mode
[ 1318.942754][T27040] macvtap0: left promiscuous mode
[ 1318.942914][T27040] macvtap0: left allmulticast mode
[ 1318.942927][T27040] erspan0: left allmulticast mode
[ 1319.137541][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1319.941803][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1320.163657][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1320.611772][T27089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8565'.
[ 1320.639279][ T1386] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1320.639436][T27089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8565'.
[ 1320.639789][ T1386] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1320.639847][ T1386] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1320.639882][ T1386] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1320.975087][T27104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8570'.
[ 1321.277665][T27113] misc userio: Begin command sent, but we're already running
[ 1321.308899][T27112] ip6gretap1: entered promiscuous mode
[ 1321.308916][T27112] ip6gretap1: entered allmulticast mode
[ 1321.656159][T27128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8581'.
[ 1323.021833][T27178] input: syz1 as /devices/virtual/input/input60
[ 1324.327507][T27214] IPVS: Scheduler module ip_vs_ not found
[ 1324.523532][T27221] input: syz0 as /devices/virtual/input/input61
[ 1326.251545][   T37] audit: type=1804 audit(2134218542.727:480): pid=27277 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.8644" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=99183 res=1 errno=0
[ 1326.482243][T27281] binder: 27280:27281 ioctl c0306201 200000000040 returned -11
[ 1326.943580][T16102] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1327.097183][T16102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1327.097218][T16102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1327.097240][T16102] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1327.097356][T16102] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1327.097380][T16102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.207557][T16102] usb 4-1: config 0 descriptor??
[ 1327.625829][T16102] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1328.850681][T27329] overlayfs: failed to clone upperpath
[ 1329.514513][T27352] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8675'.
[ 1329.566688][T27354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8675'.
[ 1329.623536][T13359] Bluetooth: hci1: unexpected event for opcode 0x0403
[ 1329.687731][ T5888] usb 4-1: USB disconnect, device number 47
[ 1330.155168][T27372] overlayfs: failed to clone upperpath
[ 1330.831723][   T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1330.997550][   T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1330.997580][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1331.020771][   T10] usb 4-1: config 0 descriptor??
[ 1331.033606][   T10] cp210x 4-1:0.0: cp210x converter detected
[ 1331.437222][   T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1331.639887][   T10] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71
[ 1331.639916][   T10] cp210x 4-1:0.0: GPIO initialisation failed: -71
[ 1331.657099][   T10] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1331.668728][   T10] usb 4-1: USB disconnect, device number 48
[ 1331.683733][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1331.684053][   T10] cp210x 4-1:0.0: device disconnected
[ 1332.851670][   T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1333.011701][   T10] usb 4-1: Using ep0 maxpacket: 16
[ 1333.013802][   T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1333.013835][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1333.013868][   T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1333.013880][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1333.016886][   T10] usb 4-1: config 0 descriptor??
[ 1333.444819][   T10] nzxt-smart2 0003:1E71:2009.0031: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[ 1333.892431][   T10] usb 4-1: USB disconnect, device number 49
[ 1334.725468][T27352] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1334.738452][T27352] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1336.437128][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1336.835709][   T56] libceph: connect (1)[c::]:6789 error -101
[ 1336.835833][   T56] libceph: mon0 (1)[c::]:6789 connect error
[ 1336.839624][   T56] libceph: connect (1)[c::]:6789 error -101
[ 1336.839791][   T56] libceph: mon0 (1)[c::]:6789 connect error
[ 1336.914335][T27491] ceph: No mds server is up or the cluster is laggy
[ 1337.109450][T27501] overlayfs: failed to clone lowerpath
[ 1337.416491][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1337.853617][T27517] bridge0: port 3(macsec2) entered blocking state
[ 1337.854153][T27517] bridge0: port 3(macsec2) entered disabled state
[ 1337.854435][T27517] macsec2: entered allmulticast mode
[ 1337.854447][T27517] geneve1: entered allmulticast mode
[ 1337.856280][T27517] macsec2: entered promiscuous mode
[ 1337.856292][T27517] geneve1: entered promiscuous mode
[ 1338.409177][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1338.496401][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1338.542572][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1338.583833][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1338.632983][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1338.839751][ T5888] libceph: connect (1)[c::]:6789 error -101
[ 1338.849182][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[ 1338.865260][ T5888] libceph: connect (1)[c::]:6789 error -101
[ 1338.865462][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[ 1338.921593][T27539] ceph: No mds server is up or the cluster is laggy
[ 1339.190479][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1339.211135][T27551] overlayfs: failed to clone upperpath
[ 1339.403704][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1339.616395][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1341.180986][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8795'.
[ 1341.458465][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1341.673551][   T37] audit: type=1326 audit(2134218558.187:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1341.707835][   T37] audit: type=1326 audit(2134218558.187:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1341.707895][   T37] audit: type=1326 audit(2134218558.187:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1341.707947][   T37] audit: type=1326 audit(2134218558.187:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1341.707988][   T37] audit: type=1326 audit(2134218558.187:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1341.708031][   T37] audit: type=1326 audit(2134218558.187:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1341.708073][   T37] audit: type=1326 audit(2134218558.187:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1341.708115][   T37] audit: type=1326 audit(2134218558.187:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1341.708157][   T37] audit: type=1326 audit(2134218558.187:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1341.708197][   T37] audit: type=1326 audit(2134218558.187:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27657 comm="syz.2.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff065b0f749 code=0x7ffc0000
[ 1342.529095][T27684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8807'.
[ 1342.823723][T27692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8813'.
[ 1342.826264][T27692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8813'.
[ 1342.826622][T27692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8813'.
[ 1342.827768][T27692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8813'.
[ 1342.827964][T27692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8813'.
[ 1344.709813][T27748] netlink: 'syz.2.8828': attribute type 9 has an invalid length.
[ 1345.493962][T13359] Bluetooth: hci3: link tx timeout
[ 1345.499824][T13359] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1345.567936][T13359] Bluetooth: hci3: link tx timeout
[ 1345.571198][T13359] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1345.689872][T27771] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8838'.
[ 1345.727557][T27771] team1: entered promiscuous mode
[ 1345.727592][T27771] team1: entered allmulticast mode
[ 1346.289490][T27782] netlink: 'syz.6.8841': attribute type 1 has an invalid length.
[ 1346.289515][T27782] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.8841'.
[ 1347.185291][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8849'.
[ 1347.185321][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8849'.
[ 1347.185407][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8849'.
[ 1347.566044][T13359] Bluetooth: hci3: command 0x0406 tx timeout
[ 1348.401627][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1348.558564][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1348.561184][   T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[ 1348.561211][   T10] usb 3-1: config 0 has no interface number 0
[ 1348.561260][   T10] usb 3-1: config 0 interface 89 has no altsetting 0
[ 1348.594433][   T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 1348.594462][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1348.594482][   T10] usb 3-1: Product: syz
[ 1348.594496][   T10] usb 3-1: Manufacturer: syz
[ 1348.594510][   T10] usb 3-1: SerialNumber: syz
[ 1348.639665][   T10] usb 3-1: config 0 descriptor??
[ 1348.657592][   T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1348.657628][   T10] em28xx 3-1:0.89: Video interface 89 found: bulk
[ 1349.262222][   T10] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[ 1349.564274][ T5880] libceph: connect (1)[c::]:6789 error -101
[ 1349.571279][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[ 1349.587252][T27836] ceph: No mds server is up or the cluster is laggy
[ 1349.608174][ T5880] libceph: connect (1)[c::]:6789 error -101
[ 1349.610812][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[ 1349.742068][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1350.012810][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1350.147199][   T10] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1350.147231][   T10] em28xx 3-1:0.89: board has no eeprom
[ 1350.201645][   T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[ 1350.201686][   T10] em28xx 3-1:0.89: analog set to bulk mode.
[ 1350.201785][ T5880] em28xx 3-1:0.89: Registering V4L2 extension
[ 1350.233497][   T10] usb 3-1: USB disconnect, device number 18
[ 1350.236951][   T10] em28xx 3-1:0.89: Disconnecting em28xx
[ 1350.277977][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1350.580309][ T5880] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[ 1350.580333][ T5880] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[ 1350.580348][ T5880] em28xx 3-1:0.89: No AC97 audio processor
[ 1350.655095][ T5880] usb 3-1: Decoder not found
[ 1350.655110][ T5880] em28xx 3-1:0.89: failed to create media graph
[ 1350.655157][ T5880] em28xx 3-1:0.89: V4L2 device video103 deregistered
[ 1350.683608][ T5880] em28xx 3-1:0.89: Registering snapshot button...
[ 1350.719338][ T5880] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input62
[ 1350.745884][ T5880] em28xx 3-1:0.89: Remote control support is not available for this card.
[ 1350.745980][   T10] em28xx 3-1:0.89: Closing input extension
[ 1350.766847][   T10] em28xx 3-1:0.89: Deregistering snapshot button
[ 1351.033194][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1351.235640][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1351.341626][   T10] em28xx 3-1:0.89: Freeing device
[ 1351.637408][T27875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8875'.
[ 1351.858512][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1352.171534][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1352.270375][T27886] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1352.310726][T27886] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1352.430753][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1354.537491][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1354.615010][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1354.649364][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1354.708450][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1354.798860][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1354.908404][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1355.941773][   T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1356.109303][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1356.118208][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1356.134068][   T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1356.134099][   T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1356.134120][   T10] usb 4-1: Product: syz
[ 1356.134134][   T10] usb 4-1: Manufacturer: syz
[ 1356.134149][   T10] usb 4-1: SerialNumber: syz
[ 1356.190816][   T10] usb 4-1: config 0 descriptor??
[ 1356.197470][T27946] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1356.371349][T27962] io-wq is not configured for unbound workers
[ 1356.403959][   T10] usb 4-1: USB disconnect, device number 50
[ 1356.861160][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8918'.
[ 1356.979749][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1357.145127][T27993] netlink: 240 bytes leftover after parsing attributes in process `syz.6.8921'.
[ 1360.195582][T28067] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1361.229948][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.230020][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.665941][T28106] syz_tun: entered allmulticast mode
[ 1364.789347][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1364.851135][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1365.000484][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1365.074561][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1365.112761][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1365.165748][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1365.227930][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1365.819180][T28184] netlink: 'syz.7.8998': attribute type 1 has an invalid length.
[ 1365.889980][T28184] bond1: entered promiscuous mode
[ 1365.890006][T28184] bond1: entered allmulticast mode
[ 1365.890361][T28184] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1365.958531][T28188] erspan1: entered allmulticast mode
[ 1365.982500][T28188] bond1: (slave erspan1): making interface the new active one
[ 1365.985498][T28188] erspan1: entered promiscuous mode
[ 1366.022179][T28188] bond1: (slave erspan1): Enslaving as an active interface with an up link
[ 1366.385086][T28208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9007'.
[ 1367.555680][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1367.628581][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1367.669521][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1367.779267][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1368.206062][T28248] syz_tun: entered allmulticast mode
[ 1368.211403][T28247] syz_tun: left allmulticast mode
[ 1368.388372][T28235] Process accounting resumed
[ 1368.582950][   T37] kauditd_printk_skb: 8 callbacks suppressed
[ 1368.582967][   T37] audit: type=1326 audit(2134218585.097:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28263 comm="syz.7.9030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdacadaf749 code=0x0
[ 1371.025727][T28312] kvm: emulating exchange as write
[ 1372.861611][T14261] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1373.011554][T14261] usb 4-1: Using ep0 maxpacket: 16
[ 1373.018541][T14261] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1373.018570][T14261] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[ 1373.018597][T14261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[ 1373.018625][T14261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[ 1373.018652][T14261] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1373.025556][T14261] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1373.025586][T14261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.025606][T14261] usb 4-1: Product: syz
[ 1373.025621][T14261] usb 4-1: Manufacturer: syz
[ 1373.025636][T14261] usb 4-1: SerialNumber: syz
[ 1373.122658][T14261] usb 4-1: config 0 descriptor??
[ 1373.451652][T14261] appledisplay 4-1:0.0: Error while getting initial brightness: -71
[ 1373.458733][T14261] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71
[ 1373.502444][T14261] usb 4-1: USB disconnect, device number 51
[ 1373.541666][T13359] Bluetooth: hci2: command 0x0405 tx timeout
[ 1373.573268][T28393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9078'.
[ 1373.652361][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1373.726667][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1373.781953][T16102] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1373.813370][T28393] tipc: Disabling bearer <ib:ipvlan0>
[ 1373.931852][T16102] usb 3-1: Using ep0 maxpacket: 16
[ 1373.932740][T28401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9082'.
[ 1373.932761][T28401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9082'.
[ 1373.934211][T16102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1373.934240][T16102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1373.935820][T16102] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00
[ 1373.935847][T16102] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0
[ 1373.935868][T16102] usb 3-1: Manufacturer: syz
[ 1374.015922][T16102] usb 3-1: config 0 descriptor??
[ 1374.305526][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1374.436982][T16102] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1374.437017][T16102] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1374.437041][T16102] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1374.437063][T16102] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1374.437085][T16102] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1374.469285][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1374.532213][T16102] mcp2221 0003:04D8:00DD.0032: USB HID v0.05 Device [syz] on usb-dummy_hcd.2-1/input0
[ 1374.679029][T16102] usb 3-1: USB disconnect, device number 19
[ 1374.740835][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1374.818672][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1374.822601][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9087'.
[ 1374.822624][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9087'.
[ 1374.927863][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1375.049516][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1376.488341][T28440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9097'.
[ 1376.921802][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1377.502691][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1380.237152][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9120'.
[ 1381.654985][T28546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9139'.
[ 1381.758944][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1381.870056][T28549] macvlan0: entered promiscuous mode
[ 1381.870082][T28549] macvlan0: entered allmulticast mode
[ 1381.871316][T28549] bond2: entered promiscuous mode
[ 1381.908340][T28549] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1382.019735][T28549] bond2: left promiscuous mode
[ 1382.134336][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1382.621694][ T5880] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[ 1382.784153][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1382.784254][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1382.784307][ T5880] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1382.784330][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1382.841292][ T5880] usb 4-1: config 0 descriptor??
[ 1382.857820][ T5880] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1382.857967][ T5880] dvb-usb: bulk message failed: -22 (3/0)
[ 1382.887153][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1382.888804][ T5880] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1382.888869][ T5880] usb 4-1: media controller created
[ 1382.919739][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1382.934882][ T5880] dvb-usb: bulk message failed: -22 (6/0)
[ 1382.934968][ T5880] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1382.939612][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input63
[ 1382.981385][ T5880] dvb-usb: schedule remote query interval to 150 msecs.
[ 1382.981407][ T5880] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1383.150706][ T5880] dvb-usb: bulk message failed: -22 (1/0)
[ 1383.150745][ T5880] dvb-usb: error while querying for an remote control event.
[ 1383.171019][T28564] dvb-usb: bulk message failed: -22 (2/0)
[ 1383.178918][ T5880] usb 4-1: USB disconnect, device number 52
[ 1383.238029][T28578] netlink: 'syz.6.9150': attribute type 1 has an invalid length.
[ 1383.304007][T28578] macvlan3: entered promiscuous mode
[ 1383.304024][T28578] macvlan3: entered allmulticast mode
[ 1383.304998][T28578] bond1: entered promiscuous mode
[ 1383.306655][T28578] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1383.862035][T28578] bond1: left promiscuous mode
[ 1383.872159][ T5880] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1384.248534][T28600] overlayfs: failed to clone lowerpath
[ 1385.519790][   T37] audit: type=1326 audit(2134218602.027:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28626 comm="syz.1.9167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88b6cef749 code=0x0
[ 1386.156865][T28650] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9178'.
[ 1386.302023][T28656] overlayfs: failed to clone upperpath
[ 1388.749862][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1388.931520][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1389.042288][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1389.077379][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1389.967725][T28737] vlan0: entered promiscuous mode
[ 1389.967902][T28737] vlan0: entered allmulticast mode
[ 1391.720365][T28768] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9222'.
[ 1391.961396][T28771] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1391.977199][T28771] overlayfs: failed to clone lowerpath
[ 1392.249533][T28759] infiniband !yz!: set active
[ 1392.271684][T28759] infiniband !yz!: added team_slave_0
[ 1392.275579][T28759] !yz!: rxe_create_cq: returned err = -12
[ 1392.275653][T28759] infiniband !yz!: Couldn't create ib_mad CQ
[ 1392.275858][T28759] infiniband !yz!: Couldn't open port 1
[ 1392.405385][T28759] RDS/IB: !yz!: added
[ 1392.406722][T28759] smc: adding ib device !yz! with port count 1
[ 1392.407229][T28759] smc:    ib device !yz! port 1 has no pnetid
[ 1396.692453][T28836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9246'.
[ 1397.070509][   T37] audit: type=1326 audit(2134218613.577:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28824 comm="syz.6.9242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfadf749 code=0x7fc00000
[ 1398.931635][   T56] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1399.041724][T14060] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1399.094098][   T56] usb 3-1: Using ep0 maxpacket: 32
[ 1399.114574][   T56] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1399.114606][   T56] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1399.116887][   T56] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1399.116913][   T56] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1399.116932][   T56] usb 3-1: Product: syz
[ 1399.116946][   T56] usb 3-1: Manufacturer: syz
[ 1399.179699][   T56] hub 3-1:4.0: USB hub found
[ 1399.214951][T14060] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1399.214986][T14060] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1399.214999][T14060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.308237][T14060] usb 4-1: config 0 descriptor??
[ 1399.330861][T14060] pwc: Askey VC010 type 2 USB webcam detected.
[ 1399.385767][   T56] hub 3-1:4.0: 2 ports detected
[ 1399.738761][T14060] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1399.739522][T14060] pwc: recv_control_msg error -32 req 02 val 2700
[ 1399.740485][T14060] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1399.741869][T14060] pwc: recv_control_msg error -32 req 04 val 1000
[ 1399.744639][T14060] pwc: recv_control_msg error -32 req 04 val 1300
[ 1399.772876][T14060] pwc: recv_control_msg error -32 req 04 val 1400
[ 1399.790529][   T56] hub 3-1:4.0: set hub depth failed
[ 1399.976234][T14060] pwc: recv_control_msg error -71 req 02 val 2100
[ 1399.976720][T14060] pwc: recv_control_msg error -71 req 04 val 1500
[ 1399.977207][T14060] pwc: recv_control_msg error -71 req 02 val 2500
[ 1399.977693][T14060] pwc: recv_control_msg error -71 req 02 val 2400
[ 1399.980068][T14060] pwc: recv_control_msg error -71 req 02 val 2600
[ 1399.980556][T14060] pwc: recv_control_msg error -71 req 02 val 2900
[ 1399.981025][T14060] pwc: recv_control_msg error -71 req 02 val 2800
[ 1399.986747][T14060] pwc: recv_control_msg error -71 req 04 val 1100
[ 1399.988907][T14060] pwc: recv_control_msg error -71 req 04 val 1200
[ 1400.010801][T16102] hub 3-1:4.0: hub_ext_port_status failed (err = -71)
[ 1400.047749][T14060] pwc: Registered as video103.
[ 1400.095675][T14060] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input64
[ 1400.105625][   T56] usb 3-1: Failed to suspend device, error -71
[ 1400.106547][   T56] usb 3-1: USB disconnect, device number 20
[ 1400.141119][T14060] usb 4-1: USB disconnect, device number 53
[ 1400.446138][   T37] audit: type=1326 audit(2134218616.867:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28891 comm="syz.7.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1400.446194][   T37] audit: type=1326 audit(2134218616.867:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28891 comm="syz.7.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1400.446235][   T37] audit: type=1326 audit(2134218616.867:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28891 comm="syz.7.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1400.446276][   T37] audit: type=1326 audit(2134218616.867:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28891 comm="syz.7.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1400.446316][   T37] audit: type=1326 audit(2134218616.867:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28891 comm="syz.7.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1400.446357][   T37] audit: type=1326 audit(2134218616.867:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28891 comm="syz.7.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1400.446398][   T37] audit: type=1326 audit(2134218616.867:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28891 comm="syz.7.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1400.446440][   T37] audit: type=1326 audit(2134218616.867:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28891 comm="syz.7.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1400.446487][   T37] audit: type=1326 audit(2134218616.867:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28891 comm="syz.7.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacadaf749 code=0x7ffc0000
[ 1401.252563][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1401.809262][T28909] netlink: 'syz.6.9273': attribute type 1 has an invalid length.
[ 1401.910921][T28914] netlink: 'syz.1.9272': attribute type 10 has an invalid length.
[ 1401.945781][T28909] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1402.010339][T28915] bond2: (slave geneve2): making interface the new active one
[ 1402.082362][T28915] bond2: (slave geneve2): Enslaving as an active interface with an up link
[ 1402.446866][T28914] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1402.447747][T28914] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[ 1402.447967][T28914] team0: Failed to send options change via netlink (err -105)
[ 1402.447983][T28914] team0: Port device netdevsim0 added
[ 1404.471665][T13616] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1404.621719][T13616] usb 3-1: Using ep0 maxpacket: 8
[ 1404.631691][T13616] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1404.631721][T13616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1404.631744][T13616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1404.631765][T13616] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1404.631805][T13616] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1404.631827][T13616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1404.924365][T13616] usb 3-1: GET_CAPABILITIES returned 0
[ 1404.924413][T13616] usbtmc 3-1:16.0: can't read capabilities
[ 1405.160625][T13616] usb 3-1: USB disconnect, device number 21
[ 1406.203693][   T37] kauditd_printk_skb: 2 callbacks suppressed
[ 1406.203713][   T37] audit: type=1804 audit(2134218622.697:513): pid=28962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.9289" name="file0" dev="tmpfs" ino=3517 res=1 errno=0
[ 1406.204714][T28962] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[ 1406.204736][T28962] ref_ctr increment failed for inode: 0xdbd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888022ea9700
[ 1406.288648][T28958] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[ 1406.288694][T28958] ref_ctr decrement failed for inode: 0xdbd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888022ea9700
[ 1406.288743][T28958] uprobe: syz.1.9289:28958 failed to unregister, leaking uprobe
[ 1406.378362][T28966] bridge: RTM_NEWNEIGH with invalid ether address
[ 1406.839210][T28977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9295'.
[ 1406.839235][T28977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9295'.
[ 1407.322417][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1407.520394][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1407.667776][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1408.356223][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1408.780317][T29012] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9307'.
[ 1408.880634][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1408.909149][T24206] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1408.910603][T29012] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9307'.
[ 1408.916786][T24206] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1408.916833][T24206] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1408.916868][T24206] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1409.457018][T29033] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9314'.
[ 1409.824685][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1409.931130][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1410.453176][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1410.887706][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1411.205154][T29054] binder_alloc: 29053: binder_alloc_buf size 8 failed, no address space
[ 1411.205379][T29054] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0)
[ 1411.434483][   T37] audit: type=1326 audit(2134218627.947:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29063 comm="syz.2.9325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff065b0f749 code=0x0
[ 1411.489661][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9326'.
[ 1412.220150][T29085] netlink: 'syz.1.9332': attribute type 1 has an invalid length.
[ 1412.543437][T29091] macvlan4: entered promiscuous mode
[ 1412.543464][T29091] macvlan4: entered allmulticast mode
[ 1412.546628][T29091] bond2: entered promiscuous mode
[ 1412.574789][T29091] 8021q: adding VLAN 0 to HW filter on device macvlan4
[ 1412.756884][T29095] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9335'.
[ 1412.774803][T29091] bond2: left promiscuous mode
[ 1412.877004][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1414.727338][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1414.867194][T29123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9343'.
[ 1414.999520][T29123] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1415.119374][T29130] nbd1: detected capacity change from 0 to 127
[ 1415.123283][T29132] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9345'.
[ 1415.126392][T29132] block nbd0: reconnected socket
[ 1415.126411][T29132] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1415.175208][ T5805] block nbd1: Receive control failed (result -32)
[ 1415.200700][T13359] block nbd0: Receive control failed (result -32)
[ 1415.781844][T29161] overlayfs: failed to resolve './file0': -2
[ 1416.288882][T29165] overlayfs: failed to clone upperpath
[ 1418.721582][   T56] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1418.871642][   T56] usb 4-1: Using ep0 maxpacket: 32
[ 1418.876869][   T56] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1418.876898][   T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1418.887290][   T56] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1419.310627][T29206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1419.311058][T29206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1419.351674][   T56] gspca_nw80x: reg_r err -71
[ 1419.351777][   T56] nw80x 4-1:3.0: probe with driver nw80x failed with error -71
[ 1419.385392][   T56] usb 4-1: USB disconnect, device number 54
[ 1419.899549][T29222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1421.532919][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1421.538572][T29261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9382'.
[ 1421.834875][T14261] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1421.984357][T14261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1421.984392][T14261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1421.985843][T14261] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1421.985870][T14261] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1421.985891][T14261] usb 3-1: Manufacturer: syz
[ 1422.056325][T14261] usb 3-1: config 0 descriptor??
[ 1422.449002][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1422.574475][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1422.623102][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1422.685183][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1422.914436][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1422.951866][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.951939][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.999912][T29286] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9391'.
[ 1423.549366][T14261] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input66
[ 1423.594907][T14261] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input67
[ 1423.629126][T14261] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input68
[ 1423.650773][T14261] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input69
[ 1423.860222][T14261] uclogic 0003:256C:006D.0033: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0
[ 1423.884345][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1423.889915][T14261] usb 3-1: USB disconnect, device number 22
[ 1424.729069][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1425.349648][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1425.405848][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1425.695804][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1425.885309][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1426.907261][T29325] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9405'.
[ 1426.907991][T29325] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9405'.
[ 1428.294913][T29335] netlink: 'syz.6.9408': attribute type 83 has an invalid length.
[ 1428.319059][T29339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9410'.
[ 1428.319083][T29339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9410'.
[ 1428.355721][T29339] bridge0: entered promiscuous mode
[ 1428.360595][T29339] ip6gretap0: entered promiscuous mode
[ 1428.368879][T29339] debugfs: 'hsr1' already exists in 'hsr'
[ 1428.368908][T29339] Cannot create hsr debugfs directory
[ 1428.404292][T29339] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[ 1428.404319][T29339] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[ 1430.370905][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1430.597289][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1430.746897][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1431.741858][T14060] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1431.975442][T14060] usb 4-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[ 1431.975473][T14060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1432.049505][T14060] usb 4-1: config 0 descriptor??
[ 1433.500431][T14060] usb 4-1: string descriptor 0 read error: -71
[ 1433.501698][T14060] usb-storage 4-1:0.0: USB Mass Storage device detected
[ 1433.525650][T14060] usb-storage 4-1:0.0: This device (090a,1200,2487 S 01 P 25) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[ 1433.525650][T14060]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 1433.742256][T14060] usb 4-1: USB disconnect, device number 55
[ 1434.131884][T14261] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1434.303211][T14261] usb 3-1: Using ep0 maxpacket: 16
[ 1434.306385][T14261] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1434.306416][T14261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1434.313220][T14261] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1434.313247][T14261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1434.313268][T14261] usb 3-1: Product: syz
[ 1434.313281][T14261] usb 3-1: Manufacturer: syz
[ 1434.313295][T14261] usb 3-1: SerialNumber: syz
[ 1434.357441][T14261] usb 3-1: config 0 descriptor??
[ 1434.368047][T14261] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1434.368081][T14261] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1435.155430][T14261] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1435.156137][T14261] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1435.791609][T14261] em28xx 3-1:0.0: AC97 command still being executed: not handled properly!
[ 1435.791632][T14261] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[ 1436.005926][T14261] em28xx 3-1:0.0: AC97 command still being executed: not handled properly!
[ 1436.005949][T14261] em28xx 3-1:0.0: couldn't setup AC97 register 2
[ 1436.235179][T14261] em28xx 3-1:0.0: couldn't setup AC97 register 4
[ 1436.236478][T14261] em28xx 3-1:0.0: couldn't setup AC97 register 6
[ 1436.236789][T14261] em28xx 3-1:0.0: couldn't setup AC97 register 54
[ 1436.237084][T14261] em28xx 3-1:0.0: couldn't setup AC97 register 56
[ 1436.248577][T14261] usb 3-1: USB disconnect, device number 23
[ 1436.810760][T29445] overlayfs: failed to clone upperpath
[ 1439.447260][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1439.516735][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1439.555395][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1439.674484][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1439.722603][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1440.126053][T29502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9465'.
[ 1440.126078][T29502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9465'.
[ 1440.148696][T29502] sit1: entered allmulticast mode
[ 1441.257093][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1441.375440][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1441.992982][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1442.116933][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1443.705312][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1443.901424][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1443.934306][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1444.571475][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1444.879809][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1449.852392][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1450.132096][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1450.396480][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1450.742425][T29612] overlayfs: failed to clone upperpath
[ 1451.634876][T29631] syz_tun: entered allmulticast mode
[ 1451.776106][T29631] dvmrp8: entered allmulticast mode
[ 1452.371135][T29629] syz_tun: left allmulticast mode
[ 1453.432987][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1454.074157][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1454.139885][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1454.805788][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1457.114345][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1457.880572][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1458.748964][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1459.752805][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1459.886289][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1459.929558][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1461.017509][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9533'.
[ 1461.733302][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1462.045898][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1462.471670][T29717] netlink: 'syz.3.9536': attribute type 1 has an invalid length.
[ 1462.961258][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1463.704734][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1464.445152][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1464.976325][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1465.467787][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1465.917542][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1466.203675][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1467.103890][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1467.504401][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1467.612822][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1468.161603][ T5894] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[ 1468.313499][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1468.313529][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1468.313556][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1468.313568][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1468.316599][ T5894] usb 4-1: config 0 descriptor??
[ 1468.319121][ T5894] hub 4-1:0.0: USB hub found
[ 1468.589874][ T5894] hub 4-1:0.0: 1 port detected
[ 1469.434544][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1469.465720][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1469.819126][T29790] Bluetooth: hci3: command 0x0406 tx timeout
[ 1469.922182][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1470.030877][ T5894] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 1470.162203][T14261] usb 4-1: USB disconnect, device number 56
[ 1470.179345][ T5919] usb 4-1: Failed to suspend device, error -71
[ 1470.762651][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1471.432699][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1471.460976][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1471.534046][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1472.434062][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1473.145276][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1473.582318][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1473.983048][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1474.649051][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1474.751415][T29850] overlayfs: failed to clone upperpath
[ 1477.691518][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1477.792528][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1478.065027][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1478.099076][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1478.267930][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1478.838093][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1480.255924][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1481.472614][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1481.661945][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1483.447749][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1483.504139][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1484.109919][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.109972][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.532491][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1484.663431][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1485.230057][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1486.922454][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1488.005112][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1488.356042][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1488.378152][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1488.829552][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1489.125989][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1489.217587][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1489.889498][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1489.940004][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1490.251008][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1490.882853][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1491.300169][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1491.600365][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1491.704190][   T56] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1491.883710][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1492.253976][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1492.507252][T29995] orangefs_mount: mount request failed with -4
[ 1492.661654][   T56] usb 3-1: Using ep0 maxpacket: 8
[ 1492.664012][   T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1492.664045][   T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1492.664066][   T56] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1492.664089][   T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1492.664109][   T56] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1492.664148][   T56] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1492.664171][   T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.743867][   T56] usb 3-1: config 0 descriptor??
[ 1492.787059][T13359] Bluetooth: hci5: urb ffff888028046b00 submission failed (90)
[ 1492.974204][   T56] usb 3-1: USB disconnect, device number 24
[ 1493.074158][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1493.206789][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1493.690013][   T10] libceph: connect (1)[c::]:6789 error -101
[ 1493.690269][   T10] libceph: mon0 (1)[c::]:6789 connect error
[ 1493.691077][   T10] libceph: connect (1)[c::]:6789 error -101
[ 1493.691272][   T10] libceph: mon0 (1)[c::]:6789 connect error
[ 1493.712727][T30013] ceph: No mds server is up or the cluster is laggy
[ 1493.816251][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1494.343614][T30025] cgroup: Unknown subsys name 'cpuset'
[ 1494.516624][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1494.879738][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1494.985866][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1495.107062][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1495.359032][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1496.221013][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1497.498753][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1497.978915][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1498.149919][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1499.185998][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1499.243456][T13616] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1499.313425][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1499.788853][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1500.063384][T13616] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1500.063420][T13616] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1500.063450][T13616] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1500.063463][T13616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1500.070680][T30071] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1500.128960][T13616] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1500.334452][T14261] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1500.491919][T14261] usb 4-1: Using ep0 maxpacket: 32
[ 1500.512435][   T10] usb 3-1: USB disconnect, device number 25
[ 1500.679521][T30075] vlan6: entered promiscuous mode
[ 1500.771964][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1500.829540][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1501.794334][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1501.919264][T14261] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1501.919346][T14261] usb 4-1: no configurations
[ 1501.919359][T14261] usb 4-1: can't read configurations, error -22
[ 1502.071529][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1502.191507][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1502.395763][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1502.520736][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1502.880280][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1502.976245][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1503.945745][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1504.051942][T30104] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1504.052128][T30104] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1504.590280][T30125] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9652'.
[ 1505.501070][   T37] audit: type=1800 audit(2000000081.419:515): pid=30127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.9651" name="bus" dev="ramfs" ino=111854 res=0 errno=0
[ 1506.994021][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1507.109188][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1507.384951][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1507.412310][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1507.438342][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1507.868048][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1508.721880][T30152] trusted_key: encrypted_key: insufficient parameters specified
[ 1508.746690][T30152] trusted_key: encrypted_key: keylen parameter is missing
[ 1509.244645][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1509.437569][T30157] lo speed is unknown, defaulting to 1000
[ 1509.449112][T30157] lo speed is unknown, defaulting to 1000
[ 1509.501830][T30157] lo speed is unknown, defaulting to 1000
[ 1509.832691][T30157] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1509.862049][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1509.908208][T30157] lo speed is unknown, defaulting to 1000
[ 1509.911810][T30157] lo speed is unknown, defaulting to 1000
[ 1509.914699][T30157] lo speed is unknown, defaulting to 1000
[ 1509.917549][T30157] lo speed is unknown, defaulting to 1000
[ 1509.920411][T30157] lo speed is unknown, defaulting to 1000
[ 1509.928387][T30157] lo speed is unknown, defaulting to 1000
[ 1511.395924][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1511.581575][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1511.690745][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1511.942598][T29790] Bluetooth: hci3: command 0x0406 tx timeout
[ 1512.004247][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1512.164593][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1512.521827][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1513.005268][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1513.342612][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1514.527557][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1515.708045][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1516.385195][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1516.580475][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1517.271309][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1517.450990][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1517.474692][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1518.481048][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1519.802413][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1520.383363][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1520.560104][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1521.006513][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1521.214505][T30255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9686'.
[ 1521.214594][T30255] team0: left allmulticast mode
[ 1521.214610][T30255] team_slave_0: left allmulticast mode
[ 1521.214630][T30255] team_slave_1: left allmulticast mode
[ 1521.214648][T30255] batadv1: left allmulticast mode
[ 1521.214672][T30255] team0: left promiscuous mode
[ 1521.214684][T30255] team_slave_0: left promiscuous mode
[ 1521.214903][T30255] team_slave_1: left promiscuous mode
[ 1521.215107][T30255] batadv1: left promiscuous mode
[ 1521.215859][T30255] bridge0: port 3(team0) entered disabled state
[ 1521.421766][T30255] bridge_slave_1: left allmulticast mode
[ 1521.421793][T30255] bridge_slave_1: left promiscuous mode
[ 1521.422032][T30255] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1521.629055][T30255] bridge_slave_0: left allmulticast mode
[ 1521.629075][T30255] bridge_slave_0: left promiscuous mode
[ 1521.629253][T30255] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1523.195065][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1524.449248][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1525.085475][  T142] kworker/u8:5 (142) used greatest stack depth: 11128 bytes left
[ 1525.207355][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1525.589390][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1525.976352][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1526.111203][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1526.771931][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1527.858358][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1528.904427][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1529.952961][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1530.214616][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1531.564092][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1531.645443][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1531.911732][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1532.028135][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1532.887262][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1533.430449][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1533.665514][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1533.797313][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1534.032441][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1535.542648][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1535.835569][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1536.179456][T30334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9707'.
[ 1536.221850][T24186] 
[ 1536.221862][T24186] ============================================
[ 1536.221871][T24186] WARNING: possible recursive locking detected
[ 1536.221891][T24186] syzkaller #0 Not tainted
[ 1536.221902][T24186] --------------------------------------------
[ 1536.221909][T24186] kworker/u8:28/24186 is trying to acquire lock:
[ 1536.221921][T24186] ffff88805fd40318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xcd9/0x3b50
[ 1536.221977][T24186] 
[ 1536.221977][T24186] but task is already holding lock:
[ 1536.221983][T24186] ffff88804e946398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x12eb/0x3b50
[ 1536.222029][T24186] 
[ 1536.222029][T24186] other info that might help us debug this:
[ 1536.222036][T24186]  Possible unsafe locking scenario:
[ 1536.222036][T24186] 
[ 1536.222043][T24186]        CPU0
[ 1536.222049][T24186]        ----
[ 1536.222054][T24186]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[ 1536.222073][T24186]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[ 1536.222092][T24186] 
[ 1536.222092][T24186]  *** DEADLOCK ***
[ 1536.222092][T24186] 
[ 1536.222098][T24186]  May be due to missing lock nesting notation
[ 1536.222098][T24186] 
[ 1536.222105][T24186] 14 locks held by kworker/u8:28/24186:
[ 1536.222117][T24186]  #0: ffff88804b556138 ((wq_completion)bond1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1536.222166][T24186]  #1: ffffc9000f16fb80 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1536.222208][T24186]  #2: ffffffff8d5ae320 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf2/0x1840
[ 1536.222256][T24186]  #3: ffffffff8d44e560 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x530
[ 1536.222299][T24186]  #4: ffffffff8d5ae320 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x530
[ 1536.222342][T24186]  #5: ffffffff8d5ae380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x247/0x3b50
[ 1536.222383][T24186]  #6: ffff88804e946398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x12eb/0x3b50
[ 1536.222431][T24186]  #7: ffffffff8d5ae320 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0
[ 1536.222556][T24186]  #8: ffff88803744d598 (&qdisc_xmit_lock_key#4){+...}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[ 1536.222617][T24186]  #9: ffffffff8d5ae320 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0
[ 1536.222663][T24186]  #10: ffffffff8d5ae320 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[ 1536.222708][T24186]  #11: ffffffff8d5ae320 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0
[ 1536.222755][T24186]  #12: ffffffff8d44e560 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x530
[ 1536.222799][T24186]  #13: ffffffff8d5ae380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x247/0x3b50
[ 1536.222844][T24186] 
[ 1536.222844][T24186] stack backtrace:
[ 1536.222861][T24186] CPU: 0 UID: 0 PID: 24186 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1536.222883][T24186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1536.222897][T24186] Workqueue: bond1 bond_alb_monitor
[ 1536.222928][T24186] Call Trace:
[ 1536.222939][T24186]  <TASK>
[ 1536.222948][T24186]  dump_stack_lvl+0x189/0x250
[ 1536.222973][T24186]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1536.222996][T24186]  ? __pfx__printk+0x10/0x10
[ 1536.223025][T24186]  ? print_lock_name+0xde/0x100
[ 1536.223053][T24186]  print_deadlock_bug+0x279/0x290
[ 1536.223081][T24186]  __lock_acquire+0x2540/0x2cf0
[ 1536.223111][T24186]  ? __lock_acquire+0x6b6/0x2cf0
[ 1536.223136][T24186]  ? __dev_queue_xmit+0xcd9/0x3b50
[ 1536.223156][T24186]  lock_acquire+0x117/0x340
[ 1536.223177][T24186]  ? __dev_queue_xmit+0xcd9/0x3b50
[ 1536.223199][T24186]  ? __dev_queue_xmit+0x247/0x3b50
[ 1536.223219][T24186]  ? __local_bh_disable_ip+0xa1/0x530
[ 1536.223241][T24186]  rt_spin_lock+0x88/0x3e0
[ 1536.223262][T24186]  ? __dev_queue_xmit+0xcd9/0x3b50
[ 1536.223284][T24186]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1536.223312][T24186]  __dev_queue_xmit+0xcd9/0x3b50
[ 1536.223357][T24186]  ? __dev_queue_xmit+0x247/0x3b50
[ 1536.223382][T24186]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1536.223402][T24186]  ? read_seqbegin+0x128/0x2e0
[ 1536.223426][T24186]  ? lockdep_hardirqs_on+0x98/0x140
[ 1536.223510][T24186]  ? read_seqbegin+0x27c/0x2e0
[ 1536.223532][T24186]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1536.223560][T24186]  ? __pfx_read_seqbegin+0x10/0x10
[ 1536.223592][T24186]  ip_finish_output2+0xd97/0x11d0
[ 1536.223622][T24186]  ? ip_finish_output2+0x452/0x11d0
[ 1536.223647][T24186]  ? __pfx_ip_finish_output2+0x10/0x10
[ 1536.223669][T24186]  ? ip_skb_dst_mtu+0x18d/0xb70
[ 1536.223687][T24186]  ? ip_skb_dst_mtu+0x917/0xb70
[ 1536.223708][T24186]  ? ip_finish_output+0x33a/0x3f0
[ 1536.223729][T24186]  ip_output+0x29f/0x450
[ 1536.223749][T24186]  ? ip_output+0x5b/0x450
[ 1536.223769][T24186]  iptunnel_xmit+0x5f8/0xa90
[ 1536.223870][T24186]  ip_tunnel_xmit+0x1c44/0x2390
[ 1536.223906][T24186]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[ 1536.223930][T24186]  ? gre_build_header+0x31c/0xa40
[ 1536.224002][T24186]  ? __pfx_gre_build_header+0x10/0x10
[ 1536.224023][T24186]  ? pskb_expand_head+0x382/0x1150
[ 1536.224044][T24186]  ? kmem_cache_free+0x191/0x8f0
[ 1536.224069][T24186]  ? pskb_expand_head+0x382/0x1150
[ 1536.224090][T24186]  __gre_xmit+0x19a/0x240
[ 1536.224113][T24186]  ? __pfx___gre_xmit+0x10/0x10
[ 1536.224139][T24186]  erspan_xmit+0xa04/0x1220
[ 1536.224168][T24186]  ? __pfx_erspan_xmit+0x10/0x10
[ 1536.224195][T24186]  dev_hard_start_xmit+0x2e0/0x840
[ 1536.224222][T24186]  sch_direct_xmit+0x241/0x4b0
[ 1536.224249][T24186]  ? __pfx_sch_direct_xmit+0x10/0x10
[ 1536.224273][T24186]  ? rcu_needs_cpu+0x80/0xb0
[ 1536.224299][T24186]  ? rt_spin_trylock+0x13b/0x2b0
[ 1536.224323][T24186]  __dev_queue_xmit+0x17b6/0x3b50
[ 1536.224348][T24186]  ? __dev_queue_xmit+0x247/0x3b50
[ 1536.224374][T24186]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1536.224391][T24186]  ? rcu_is_watching+0x15/0xb0
[ 1536.224416][T24186]  ? kmalloc_reserve+0xbd/0x290
[ 1536.224440][T24186]  ? trace_kmem_cache_alloc+0x1f/0xb0
[ 1536.224462][T24186]  ? kmem_cache_alloc_node_noprof+0x291/0x6e0
[ 1536.224489][T24186]  ? __build_skb_around+0x22d/0x3c0
[ 1536.224523][T24186]  ? __pfx___netdev_alloc_skb+0x10/0x10
[ 1536.224551][T24186]  ? alb_send_lp_vid+0x139/0x510
[ 1536.224578][T24186]  alb_send_lp_vid+0x324/0x510
[ 1536.224611][T24186]  ? __pfx_alb_send_lp_vid+0x10/0x10
[ 1536.224638][T24186]  ? rcu_is_watching+0x15/0xb0
[ 1536.224666][T24186]  alb_send_learning_packets+0x10d/0x2c0
[ 1536.224691][T24186]  ? __pfx_alb_send_learning_packets+0x10/0x10
[ 1536.224719][T24186]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[ 1536.224748][T24186]  bond_alb_monitor+0x3dc/0x1840
[ 1536.224772][T24186]  ? bond_alb_monitor+0xf2/0x1840
[ 1536.224796][T24186]  ? process_scheduled_works+0x9ef/0x1770
[ 1536.224815][T24186]  ? __pfx_bond_alb_monitor+0x10/0x10
[ 1536.224840][T24186]  ? process_scheduled_works+0x9ef/0x1770
[ 1536.224858][T24186]  ? process_scheduled_works+0x9ef/0x1770
[ 1536.224878][T24186]  process_scheduled_works+0xad1/0x1770
[ 1536.224909][T24186]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1536.224936][T24186]  worker_thread+0x8a0/0xda0
[ 1536.224961][T24186]  ? __kthread_parkme+0x7b/0x200
[ 1536.224985][T24186]  kthread+0x711/0x8a0
[ 1536.225010][T24186]  ? __pfx_worker_thread+0x10/0x10
[ 1536.225029][T24186]  ? __pfx_kthread+0x10/0x10
[ 1536.225050][T24186]  ? rt_spin_unlock+0x150/0x200
[ 1536.225075][T24186]  ? rt_spin_unlock+0x161/0x200
[ 1536.225097][T24186]  ? __pfx_kthread+0x10/0x10
[ 1536.225121][T24186]  ret_from_fork+0x52d/0xa60
[ 1536.225141][T24186]  ? __pfx_ret_from_fork+0x10/0x10
[ 1536.225164][T24186]  ? __switch_to_asm+0x39/0x70
[ 1536.225189][T24186]  ? __switch_to_asm+0x33/0x70
[ 1536.225212][T24186]  ? __pfx_kthread+0x10/0x10
[ 1536.225236][T24186]  ret_from_fork_asm+0x1a/0x30
[ 1536.225268][T24186]  </TASK>
[ 1536.491585][T13617] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1537.040033][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1537.074493][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1537.131889][ T5919] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1537.231550][T13617] usb 4-1: device descriptor read/64, error -71
[ 1537.417433][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1537.417477][ T5919] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1537.417507][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1537.432192][ T5919] usb 3-1: config 0 descriptor??
[ 1537.443390][ T5919] pwc: Askey VC010 type 2 USB webcam detected.
[ 1537.471537][T13617] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1537.702211][T13617] usb 4-1: device descriptor read/64, error -71
[ 1537.811720][T13617] usb usb4-port1: attempt power cycle
[ 1537.964366][ T5919] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1537.964879][ T5919] pwc: recv_control_msg error -32 req 02 val 2700
[ 1537.965333][ T5919] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1537.965776][ T5919] pwc: recv_control_msg error -32 req 04 val 1000
[ 1537.966260][ T5919] pwc: recv_control_msg error -32 req 04 val 1300
[ 1537.971357][ T5919] pwc: recv_control_msg error -32 req 04 val 1400
[ 1537.971974][ T5919] pwc: recv_control_msg error -32 req 02 val 2000
[ 1537.972458][ T5919] pwc: recv_control_msg error -32 req 02 val 2100
[ 1537.972936][ T5919] pwc: recv_control_msg error -32 req 04 val 1500
[ 1537.973405][ T5919] pwc: recv_control_msg error -32 req 02 val 2500
[ 1537.973867][ T5919] pwc: recv_control_msg error -32 req 02 val 2400
[ 1537.974332][ T5919] pwc: recv_control_msg error -32 req 02 val 2600
[ 1538.151545][T13617] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1538.172370][T13617] usb 4-1: device descriptor read/8, error -71
[ 1538.175414][ T5919] pwc: recv_control_msg error -71 req 02 val 2800
[ 1538.175717][ T5919] pwc: recv_control_msg error -71 req 04 val 1100
[ 1538.175975][ T5919] pwc: recv_control_msg error -71 req 04 val 1200
[ 1538.176828][ T5919] pwc: Registered as video103.
[ 1538.177613][ T5919] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input70
[ 1538.179579][ T5919] usb 3-1: USB disconnect, device number 26
[ 1538.431649][T13617] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1538.452272][T13617] usb 4-1: device descriptor read/8, error -71
[ 1538.562167][T13617] usb usb4-port1: unable to enumerate USB device
[ 1545.543723][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.543773][ T1324] ieee802154 phy1 wpan1: encryption failed: -22