last executing test programs:

16m36.129340482s ago: executing program 4 (id=380):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
open(&(0x7f0000002280)='./file1\x00', 0x400, 0x10)
write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r4, r1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r5, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

16m35.38443409s ago: executing program 4 (id=383):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)="9c3b592cbee68a8425c5d92067f5b90ba08f811e2acb8b732f3044f45ef9e2ffc2343d21a9ebdd34f3faf30df717d6ce52c3aff24b4ddc1974ed8eebf0c5f06c688d0b80106870dd", 0x48})
r1 = syz_open_procfs(r0, &(0x7f0000000180)='map_files\x00')
fchdir(r1)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
connect(r2, 0x0, 0x0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000001c0)={0xcc2e, 0x4, 0x1, 0xb66})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x800, 0x4, 0x6, 0x9, 0xa7c, r0})
capset(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000200)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44})
r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000400)='ns\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
write$proc_mixer(0xffffffffffffffff, 0x0, 0x86)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0)
dup3(r6, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(0x0, 0x5, 0xe542)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0)
readlinkat(r4, 0x0, &(0x7f0000000440)=""/163, 0xa3)
socket$kcm(0x10, 0x2, 0x0)

16m33.110598695s ago: executing program 4 (id=387):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140008000000000a000000"], 0x14}}, 0x40000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'vxcan0\x00'})
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x20, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_emit_ethernet(0x82, &(0x7f00000011c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f004c2f0020010000000000000000000000000002000000000000000000390900000000012421080b00000000000600000021000000080a25000086dd080088be00000000100000000100000000000000080022eb00000000200080000000000000000000000000000800655800000000"], 0x0)
pipe2$9p(0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x8)

16m30.129771952s ago: executing program 4 (id=392):
r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r3 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
tkill(r3, 0xb)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)
close(0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0)

16m27.312618679s ago: executing program 4 (id=397):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)="9c3b592cbee68a8425c5d92067f5b90ba08f811e2acb8b732f3044f45ef9e2ffc2343d21a9ebdd34f3faf30df717d6ce52c3aff24b4ddc1974ed8eebf0c5f06c688d0b80106870dd", 0x48})
r1 = syz_open_procfs(r0, &(0x7f0000000180)='map_files\x00')
fchdir(r1)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
connect(r2, 0x0, 0x0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000001c0)={0xcc2e, 0x4, 0x1, 0xb66})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x800, 0x4, 0x6, 0x9, 0xa7c, r0})
capset(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000200)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44})
r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000400)='ns\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
write$proc_mixer(0xffffffffffffffff, 0x0, 0x86)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0)
dup3(r6, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(0x0, 0x5, 0xe542)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0)
readlinkat(r4, 0x0, &(0x7f0000000440)=""/163, 0xa3)
socket$kcm(0x10, 0x2, 0x0)

16m23.660412123s ago: executing program 4 (id=402):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140008000000000a000000"], 0x14}}, 0x40000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'vxcan0\x00'})
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x20, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_emit_ethernet(0x82, &(0x7f00000011c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f004c2f0020010000000000000000000000000002000000000000000000390900000000012421080b00000000000600000021000000080a25000086dd080088be00000000100000000100000000000000080022eb00000000200080000000000000000000000000000800655800000000"], 0x0)
pipe2$9p(0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x8)

16m9.648433283s ago: executing program 3 (id=425):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)

16m7.820811729s ago: executing program 32 (id=402):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140008000000000a000000"], 0x14}}, 0x40000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'vxcan0\x00'})
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x20, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_emit_ethernet(0x82, &(0x7f00000011c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f004c2f0020010000000000000000000000000002000000000000000000390900000000012421080b00000000000600000021000000080a25000086dd080088be00000000100000000100000000000000080022eb00000000200080000000000000000000000000000800655800000000"], 0x0)
pipe2$9p(0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x8)

16m5.148998444s ago: executing program 3 (id=439):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001340)={&(0x7f00000004c0)={0x50, 0x0, 0x1, {0x7, 0x2d, 0x6, 0x1008000, 0x5, 0x400, 0x3, 0xee4, 0x0, 0x0, 0x20, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x3, 0x4f834c58, 0x1, 0x103, 0x7, 0xa11, 0x0, 0x0, 0x4}}, 0x50)

16m2.412166847s ago: executing program 3 (id=443):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20)

16m1.310005182s ago: executing program 3 (id=447):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700})
mkdirat(0xffffffffffffff9c, 0x0, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084)

15m58.877717424s ago: executing program 3 (id=451):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8)
sendto$inet6(r0, &(0x7f0000000180)="a7", 0x1, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c)

15m56.537958055s ago: executing program 3 (id=454):
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
socket(0x14, 0x5, 0xfff)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = syz_open_dev$sndpcmp(0x0, 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

15m39.775686586s ago: executing program 33 (id=454):
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
socket(0x14, 0x5, 0xfff)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = syz_open_dev$sndpcmp(0x0, 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

7m16.48196725s ago: executing program 5 (id=1373):
mkdir(&(0x7f0000000340)='./file0/file0\x00', 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x498, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0xb, 0x0, 0x0)

7m4.854048323s ago: executing program 5 (id=1386):
syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54800000c86cbff77d77ab6d649dd7b196f13a7d6edb222429874597d3f9773fd081d8f01fe8329ce2664966f3b7b15edbe5392e40bf507e8c2715e2023b895e2c760d1c2e61153abae074d081a2dff0a3d7fd91096695f2ec9fd8808808e76cac8f48c513", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0007000000000000000c0090000004000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8894}, 0x8000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2})
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
unshare(0x2a020400)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x7ffc, 0xc95a, 0x20100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x4874, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x8, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x802, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x1, 0xb, 0x2000, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x2000008, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x1000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0xa, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
acct(&(0x7f0000000040)='./file0\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

7m2.158752213s ago: executing program 5 (id=1393):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$qrtr(0x2a, 0x2, 0x0)
sendmmsg(r2, &(0x7f00000029c0), 0x400006d, 0x20000004)
shutdown(r3, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @rand_addr, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)

6m59.717236994s ago: executing program 5 (id=1396):
syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
pipe(0x0)
fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c)

6m58.616131366s ago: executing program 5 (id=1399):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
syz_open_dev$cec(0x0, 0x0, 0xc4c00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vim2m(0x0, 0x2000000000002, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x990a23, 0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

6m54.624106386s ago: executing program 5 (id=1402):
poll(0x0, 0x0, 0x7)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

6m38.242704817s ago: executing program 34 (id=1402):
poll(0x0, 0x0, 0x7)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

5m48.3163392s ago: executing program 1 (id=1504):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084)

5m41.435392287s ago: executing program 1 (id=1515):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x8)
sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x161, 0x40000867, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
vmsplice(r6, &(0x7f00000009c0)=[{0x0}], 0x1, 0x7)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
fchown(0xffffffffffffffff, 0xee01, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m39.439855718s ago: executing program 1 (id=1516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)={0x112c, 0x3f, 0x100, 0x70bd2c, 0x25dfdbfb, {0x6}, [@generic="7a1762d696d9c3156d8d65d5b7cd6a04c1f472e2941b72e79f6ad6733f64fbf168fcaa2da22dfccab76e61dde0b6ac421281b1b580786cac8dfde7bb0fa49b4e97e064d49809511b3f8cb9b11bf012a01755322c4fe11466e8bd368fe51a403d35ca7a157e970bf912bc8a98f2b2357189a211b1dafd48a517a31f7bcdd123af57383c417c", @nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x8a}]}, @nested={0x2b, 0xdf, 0x0, 0x1, [@generic="c9d17abf30840ddc5381d1e9f914a01e3f9d5d7e6d737ffd6cfc17ace667ce69f090c6146bc43a"]}, @generic="bf7d0c6910a484b73ba4fdb3b9e84a3be89b0057572cd4e4fea0514a0bc2f6d9789f7b440599cb29df485106f1f1f7c248cd6233dab5b43bd10708bb24494b6eb204792b23eecd70e59fa52da97bcd68c80dbd6444af90d9984f77f8152c65", @generic="f2ee6128dc4372b16b0ea515869c224f82dd611b8d643f585d2a1034bfc2b52b622d7de0a8bcc026bb53996cd87c39a29f7403b262cbaf050f0837afbb7d9ef35dd730fc2934c25312f0fcf7b468c3f5fbfcf4db4bd1a4502268ddbc620c40f9201cbfeca393648b1fe4d5b59ddc52305b0cc9a4968f71046a70e219893fba25b56d172459950b89d80595e417cb5ac37e3cc786867d7b08d13dafdf27a8893fa0f826428774373581895de42c852a79642525bc50968a31910a42e685a88b4e4ea5316a9ae653f23395452323d862a9e663bd2924b9fcd019454de70e52b7672993708842a5b920ad6fdfe83f819c529084e83b77ab774a07f1fdfb9ff0bb665cba496dd814131484d78983215970ed8bc0103811650ae9264834ad75dbb7c30c576b4b07a67c94ded741730a569b7840d0bae3b55f892a2a7d480b4e6d97ab893edfda26a22faaf67804e2dc5daa9abe144591d909ea6f952572adac35e02fa188f9dc965a753f9fb9494191fb16921460a9799dbe83762c363a07e2edbe679644c900347caab141a03b5d2f08d7c61fc829a1bc4c4841fa62a8a696f1c9a26895e0e601534e9fb72975ec20a34d22378342cbc84efd0e315ff1de81b79d0b630d668d53486dd20a8176a111ecc6b3181f20f09b1ff33045b4672f1c387980e883c13c979738f93c155cface76202057ba5a84f407e0cf6e28adf547feffa9bba1286df3b35075fdc0da4836878cbcbeb4e71d52d6b4645e90997f5d9af9ec319159dc61f1ae5cf018392c6fbda81af7e60d1f86d8ae844f02208de1bc5a14a464be87549bfe2f57d4f81674167a5410ceed70b3bef1a7a30ca46a0a1bcb9c881f3c21d44cbb567e3b3bf84ace85630d03a48740d6b3d36aafed0804472679bf924051355de43fcac6a213831c8f5ddc9af62ccbe381baba7950f7dacefc349d50c553d67f9f5a32f6595d0f5ae6c49f5d702bb8a6a4710795e5d8f8619c6e3ef66fe65e2cda1cf306148fbbd3e7f9182db2fd1dc54cd843ec9bffe1cc127c2030447985a7a8cc36da997efb77fbf7bdaf0948b913a00a37ecf584a257b5c1197efce1f92b3c6158cb0dda7b727763cee05e79037ee4e18040a75ff1c2d6db61ef1e8104a6c8e8faa3b3bd57bf43df4fefbb7e965dc1c7a23d00487f2625d2ad676f4fc540f95bf42fea600f7e0fea988da03633cce5052155cf98072f7dd70f5a3cc584c7d3767e2c90c6c47a08575d99584e87df35e19eb3e8b0d4029292ba784eab2ebd6b91aaac22f85e9fc067497976f6b1bf880fbc13d2f1801bc8199bbb741dcffa8e7832bf5c2d558568bb48e3e29e5dc1ef3580a4a40593f08a884d993907862ee5442a50d677d30ef3b1cee86f0ca5e2a306522d0df77c793a7d3de22ee67ac7778e797f49ca08b99332454ad101c5cee8a32ede81306fc41a638d9e960b9c08b25733acd81527f079ed445c49c430f63a6ec14aaa8e91197edb70356eb1c27151ef62f6e2b84cb775effb82dfbaa0f8d60e9d62d3d0f5d1402b63112c5316cf57feddff38cebea0477d8c08ec6356a50f6783a124325e0e27ca8cc1fa94e98341e2c6fb9e062093eb3b8bf6778e9b392c310617aced60bd673ae9b776ba3f353c25fad8df586e7d1c8979c898d484dc41bb93cb3a04b5b8b465cb0801ca91b0eee0e3b5294607fa6fd8e8892c28dcc0a13185d62a66482022f1da8405b7eb18176d70bb9deed41853978bf2217ade390150f31858dbbffa87b2430e39a56a89216dccf44091130cd71717340ef9c9fc823107c976249905ed30830a9ea88164281a99883c918a5689b9c0fdca4eb14179b9ed1985d176c45eb8e3b442a8f10a122d74d6da66617812960922328b760f4a95dcfef5c4855f33961f3ffb656148c40ce937e0ce47f0c8fedb6d59e666b6d98eebd283da25746260fb88e9e58f93076833907ba0a4d672f5abea3bfe13ce65c1236d5a8fc8f66e4d2baa777c35642227d5bad504ada39db72aa4360c1801fdde63fa205f7e934fcaf1e8175d157e3735ea7e2b4983c4a34df26c3e359676b61035b34d307685d27e32254fb1efaf37205d159ceee151777f8b33d28c9720fab620596b71f066ab0e0fda9e4f3749cbacfc1611b77a8061d12cba04ea64f299dd819ee6c0acdb2673d28c52ddf45774b4f163f6cba901c0351465a9fb69709aa8be3d8ecf8114dfd652fa05507c9785a40ac39158df69752ca053c1e78a9411655a82cd57e09cf550783709ac53ed9dc31426c9fe7d189178e1f141c13349ecf3eb6a6750936154559c7178f6ee180e0d3bc3e7aaca9f61a7bc454d1adcc901c8b3de1f0cb923b2e32b199bfd7064bdc7b70526a7473ee66acf0a6417740b72bf89a88acad5eecf01c856f84cdc6f00dadd9bc8df00c610dbd2dd4c6e0325e5bbd70fb18a58aa8f2f0fed0027b9d8597c0bd3b96dc362c15d75aab4eaea1be13e370903fdac488c603701ed12c2d346f58f00b1daef0cf024d6a7af222b78045e77361bc7702fe52dd92e84959b53d27c92aae5eebb1cb40ffcfeb42e9e9689f98b1bc93febccf39bba191d941480dd0a645c2c62e8d4ac6bc87374e38a7ee779bd639e5053671cb93bdaf82b71ac02dd5a9b14e063b7b30d848731d3a8d51fa48d8a4a62046a4914838099c2265c64857b27fcf2a71c1b155366c02a3768d2fb26c0955e6f2958455bffed3f25eff6769e8d448184cbb9bb065da4120cbafa99c6adc9ab067bd405a9cb70c66038185bf66977d1bb9decaa6e223c5e02b6feebad6076ee5362270c64bcc3db010a8e194c52af5660caa03a194bec14f61e9a7cea6663826432b0ec08ec26e94e0d42b6f80c0db1a14affb7056d0e0614c0b1a9efb05f306e3ed7e10dee05c4a063aeefdda3809f8c137dd89a17641b0c5163082fe0da5b738d9be6344bafa4ded6b6e60f2809aa91634b7ecf8da6b4b50e37fd64d0ce1cc993e3bb4566c3ab2d552ae490cf1a19d0b538497440c55c1e0a8a837c405bc0bc8a2a8699d665262a1d8a10078455f464c5a05e7a2c7b0232c00423c309f67d0787f36e0f58b73dc1bc0dddbfb71974c7e455f8981ce678d3365451f86ce4241d7a1b32f30f0af800aa7e0ebf8fac47c498f3b6f6ea8ca30f4c2b03c65eba0a330ff3881ce7182b7711c339af940b418db509e451b2d69fa403d341f86c5f687912adcb54b5495c78b3e65281100daac04a9c80f76c049bf4c1cccc5e82d7e39f704bc70efeb9eb76149a8e45b88f5ff67f1aa9bf595c08ea861f85fe8e2ed84a1b438cc59b3f1df465ce6edbe94d9dbd35eb1091e8369abfbf14eef01225b6f31ec48380bd9f6987fb03c6fe15aabd29b9b8ba63f589ef2431b4a21bab968a49b6e31177f8d560aff0861d2d612e17dd709a26854e0503bcb417152bd1c441c057605b7897c1908310cb697fef6bde52b3f2bce2843c41bba935ca405e086ddce49e90d391485724d514afed0c4c48dcd187a0b924e2b3cd1f4e0b990af1b1b10ead77368fadb3ff74d2a72bc25062274f2446efdc114f944a0ceafa44f37a6ae5fa65e33ff1fc8f9b7972cf3cede33432ceb429f9c85617734dac004bbc1325954f464b673365d40c1cc335d65492808b1bb9ea4b5dbca1740048efbca7e3c21e8b7e6682345e1378a06cd8aee48ea3ea565dd7b2af353b8ee1b8d43f6bb2d06d21f3fdb8d185a802750dfbfec3c600f2d5caf08fc3b42938a5f3765d4618fb009bc5a869b92a52d32191469c4b239ec68e7d29db14e1b113f8b6fd07bca2a47957ce7235f2e4da739a263d357c55a50cd62fe81e4b769eba0e2f394d0c3572356f3823a52f6996e58ec5995a78d922142d12d098ee6662af5990ef49cd08d3065821771f4a0dd0572f5690eefe5676526c27a3b291e073049796b0223f57e91bbd349ea619d30ca127cca214b9ba5fc0de9381cab7c532e3ed71deb4610a5e5064c1c333f1c80095810c3bac9280ac194c4631d80a43b2ff10e221f0e188a2731437a00276d5cd64aeafddfafe3598cc02dd313c22d961e6ba98d837165da151b6aa13210e28e821e063c8e2e92cfd6ded18600253c64674ced490d3e163374cbae3c8aa7a39c8c4c7ebac05bd3d9816aa5a1f0471a3b172591f207475953ee153541868f808477f81d49f4ba57ad7908ae8b7a8d0b2a4ee628b3963eb6f74698f57ec8888d372a2810c45e30a36ef2aefd32dad94549a4b88aa7130e5c1900526a40ba6f89d56e9cc86f21e60ab796d2dde6f7d2207c1e86d5a275430bfadd6ade4bf644215f03e6d16861c00920bdcd79fb8dae8d47c416b672aaa81959efe50b124c921dc9a4692da7e2afd3ddce5f11ee6a6e7bfe74ea11a172d5e448e599083d5de8b0ab784a63ca4715308d7c6ba0313b2520a1fda4fa9f4d075681a9231e61c2338b175da5889d5c51b4b907005e0a4db77269b36cde1ae84f50fc24db33980936727d3623704abe46562ee5305a42e26671baec80cb7a853e97f5b239510dd5462841c51de31cd0502187f953f2b06c79d3496283856140bfd76e8f98387a1882d78b41afc5e8afd2aec61493480e6b03cb20b1896f76a8bfc06378af0983ce7d7e727bcdcce46bc5383881e824f801f88aab14f9fc98eaec00524d03c9f136262fd7b5c0eab90a4aad5cb840696030bdbe1cfff6ea663925172c87b14fa45e8447fba0b0705c2a284a4aacc10214a122f848bf3d782234c33d1443507683d31b3b71716a431091583d496fb81343567beff0e4e1b575ee4c93c2394fb58aa2c855eac46a6f1bdad8ad428f925b2b0d3e86b95624c373e36d07a9bf531c81495a377bb1d42098e4105a1290f93e4118ad61927e44558f58c6d07d6028aa6a6a5fb35805c78eab1a688814b5e00c64dff2dc46bd6eab669e462a4693640524c15ef8656778c0038fe38fbe3d512e489f44f74ed83ef8c316b6062381b2dfc2b61e90577d30343fd28c9941ce1e50f9cad8b895a80dbfd42bb519265dc739bb87928cf2a32243f1433299895aeb9f348e41406ecdee7480f7b131e3f5bdcf31e8cde4d84510bb38a6ec9409db84e42a7d93ddfca42b57835a76414a9d0711cc842b0866d587ac9a084f7ad3e711377e6603975a08471cc8639d531aa44e04099787caf3e7c64a1735e76d418fb34b3339301029f18aed09c3f4329d279aa4a7cd2b082b2283dca613b74ad608c14186efb548ac55d375a36ec8594fbba9268c39d958d9ece20e9ca489544ce90069e58f9b01a0fd0056cba270fa3137d441ce986b1a39ec45fbf7c852ff3146e16e42dc33b8bbd24583b852e0dfa48970f9277f11c22d725889a7197ce4eb53ec05c22937c98ce848aac97e6a824b8b2f2c263ff32a7da38b2a90245d4d127a507796255aebef86288384a12aa119219365a7c765dc920e83d72453968756873dcc2a35b3eea661b48763f877500cb8d508a297fc1649ba710fb35892bec332c20f13c50ed61d60d21087861891c7d7b1127d9485db5d1ae2f0170300fa1b6b1dbe34c75594caeac23c834c5d13e4f2df6799c7713bb0da61d717320e3edf6e39bf55cac563c7689ab6117950cb8e267f5524922b36ba16a8f416fbac01c8f7ceec7cf819da4dcb9267ece9384b9d9c9e9b1cadd575c61b6c1c21945fb389d3930f4f0d1f24706ebfb9ef54cffcbe846372a7ad03af7a8002de67c8ad03609db7c201d4e0b44071c7e7d26de9fa5513fe466011dc8fdf4466e3c522067f483b97840c291c39e7dc4ef1c8e65e93d0867f754"]}, 0x112c}, 0x1, 0x0, 0x0, 0x2010}, 0x8000)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
close_range(0xffffffffffffffff, r2, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socket(0x80000000000000a, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5m38.567279553s ago: executing program 1 (id=1519):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x2, 0x100000000], [0x1, 0x1, 0x6, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x7c, 0x8, 0x2ad6, 0x8, 0x1, 0x0, 0xa, 0x80000001, 0xd, 0x10001, 0xd, 0x5, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x4, 0x7, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10001, 0x1000, 0x2, 0x200000008, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x4, 0xfc72, 0x9, 0x2000000010, 0x7, 0x2, 0x6, 0x81, 0x2, 0x1, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xf000000000000000, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0xd13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]})
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(r0, &(0x7f0000000000)=""/42, 0x2a)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0x101, 0x8, {}, {0xffffffffffffffff}, 0x9, 0x7})
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x86, 0xffffffff, 0x2})
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85)
getdents(0xffffffffffffffff, &(0x7f0000000500)=""/198, 0xc6)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000040)=0xef)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

5m37.397162881s ago: executing program 1 (id=1524):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
ioprio_get$pid(0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f00000003c0)={&(0x7f00000002c0)=""/222, 0xde})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000580)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x549882, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000180)={0x28, 0x5, 0x0, 0x0, 0x1000, 0x7, 0x3ffe})
r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7})
write(r5, 0x0, 0x0)

5m34.484923209s ago: executing program 1 (id=1526):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
socket(0x40000000015, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044800)
socket$inet(0x2, 0x1, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x3, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff})
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000540)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x4}, 0x80, 0x0}, 0x10040800)

5m19.363496326s ago: executing program 35 (id=1526):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
socket(0x40000000015, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044800)
socket$inet(0x2, 0x1, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x3, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff})
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000540)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x4}, 0x80, 0x0}, 0x10040800)

26.584679334s ago: executing program 8 (id=2024):
r0 = socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x8)
sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48)
r5 = syz_io_uring_setup(0x6fd6, &(0x7f0000000080)={0x0, 0xb405, 0x20, 0x2, 0x49}, &(0x7f0000000000), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, 0x0, 0x0)
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x161, 0x40000867, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
vmsplice(r7, &(0x7f00000009c0)=[{0x0}], 0x1, 0x7)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
fchown(0xffffffffffffffff, 0xee01, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

26.328154985s ago: executing program 0 (id=2025):
dup(0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r1 = fanotify_init(0x200, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r1, 0x0, 0x20, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20)

24.625124195s ago: executing program 0 (id=2026):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), &(0x7f0000000280))

22.601965148s ago: executing program 0 (id=2027):
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r4, 0x6}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
setresuid(0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000a00)="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", &(0x7f0000000040)=""/17, &(0x7f0000001a00), &(0x7f0000000340)="fde7652b71e30d6b71a557d49c9bf726630b4fca1e29fa8b1562b2a12cc6cdd2706a37a184faba4cf52cba74ad98404d888f9148cfad492be378615449b89839af32e501bd796eadad3dc0c73d92e37287104ce4b14ea94b0570a9e102071cdb45307c69f84255cdb11855cc3a525cd9685374a1fffd84391eab5f339a97eb6533aa0c3387999d531b94d8977dd24f1fe613e863a5cad547cc2de65db3035650e1b77359d7eaddd0ea5f8b5819c24675c9e3043809251b2c97d05c9f9dde7346cd0b6f4fec447262a801073510d9eee53652", 0xd865824c, r7}, 0x38)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
accept(0xffffffffffffffff, 0x0, 0x0)

22.096115079s ago: executing program 8 (id=2030):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400, 0x0)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil)

20.91583258s ago: executing program 8 (id=2031):
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=<r0=>0x0)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000007c0)={0x0, @nfc={0x27, r0, 0x0, 0x1}, @isdn={0x22, 0x3, 0x0, 0x5, 0x3}, @rc={0x1f, @none, 0xd}, 0x7, 0x0, 0x0, 0x0, 0xf2c7, &(0x7f0000000780)='vcan0\x00', 0x5, 0xfffffffeffffffff, 0x1ff})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x108, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0x7, 0x1e0, 0xed00, 0xc, 0x417]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xda}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d300000000000000c0016800800018004000c8008000400ff0100001400030068737230"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r14, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x80, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x921}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa2d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x90}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x8, 0x400, 0x2, 0xfffffffd]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x400000d0)

19.405728558s ago: executing program 2 (id=2034):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0)

19.192151013s ago: executing program 2 (id=2035):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x0, 0x7, 0x7, 0x2}, {0x8, 0x1, 0x6, 0x5, 0xe595, 0x671}, 0x4000005, 0xae35, 0x169}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x908b43c158034cdb}, @TCA_TBF_RATE64={0xc, 0x4, 0x3cb8956c9a0790f9}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)

17.821334803s ago: executing program 0 (id=2037):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, 0x0, &(0x7f0000000280))

14.999912681s ago: executing program 0 (id=2039):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4800)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0)

14.924078602s ago: executing program 6 (id=2040):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x8)
sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48)
r4 = syz_io_uring_setup(0x6fd6, &(0x7f0000000080)={0x0, 0xb405, 0x20, 0x2, 0x49}, &(0x7f0000000000), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x161, 0x40000867, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
vmsplice(r6, &(0x7f00000009c0)=[{0x0}], 0x1, 0x7)
sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
fchown(0xffffffffffffffff, 0xee01, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13.534729709s ago: executing program 6 (id=2042):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getpeername$netrom(r3, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
read(r3, 0xfffffffffffffffc, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x6, @remote, 0x7}, @in6={0xa, 0x4e23, 0x101, @private0, 0x2}, @in6={0xa, 0x4e24, 0x10, @remote, 0x6}, @in6={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x6}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x80)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
kcmp(r0, r0, 0x6, r5, r4)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r6, r6, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)

12.605440578s ago: executing program 2 (id=2043):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.330137333s ago: executing program 8 (id=2044):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

10.328984505s ago: executing program 6 (id=2045):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000006c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r4, 0x104, 0x1, &(0x7f0000000000)=0x4, 0x4)
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5, 0x0, 0x6, 0x80, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)

10.016719885s ago: executing program 7 (id=2046):
openat$kvm(0xffffffffffffff9c, 0x0, 0x10b643, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb0, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)

9.422649783s ago: executing program 8 (id=2047):
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r4, 0x6}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
setresuid(0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000a00)="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", &(0x7f0000000040)=""/17, &(0x7f0000001a00), &(0x7f0000000340)="fde7652b71e30d6b71a557d49c9bf726630b4fca1e29fa8b1562b2a12cc6cdd2706a37a184faba4cf52cba74ad98404d888f9148cfad492be378615449b89839af32e501bd796eadad3dc0c73d92e37287104ce4b14ea94b0570a9e102071cdb45307c69f84255cdb11855cc3a525cd9685374a1fffd84391eab5f339a97eb6533aa0c3387999d531b94d8977dd24f1fe613e863a5cad547cc2de65db3035650e1b77359d7eaddd0ea5f8b5819c24675c9e3043809251b2c97d05c9f9dde7346cd0b6f4fec447262a801073510d9eee53652", 0xd865824c, r7}, 0x38)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
accept(0xffffffffffffffff, 0x0, 0x0)

9.171112506s ago: executing program 2 (id=2048):
dup(0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r1 = fanotify_init(0x200, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r1, 0x0, 0x20, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20)

7.788202072s ago: executing program 8 (id=2049):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x1, 0xffff, 0xa, 0x1ff, 0x1})

7.77551791s ago: executing program 2 (id=2050):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, 0x0, &(0x7f0000000280))

7.535217171s ago: executing program 6 (id=2051):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001580)={0x0, 0x8, 0x6, "401e18a4986a"}, 0xe)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

7.534552517s ago: executing program 7 (id=2052):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x8)
sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48)
r4 = syz_io_uring_setup(0x6fd6, &(0x7f0000000080)={0x0, 0xb405, 0x20, 0x2, 0x49}, &(0x7f0000000000), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x161, 0x40000867, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
vmsplice(r6, &(0x7f00000009c0)=[{0x0}], 0x1, 0x7)
sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
fchown(0xffffffffffffffff, 0xee01, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.353833338s ago: executing program 2 (id=2053):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef)
splice(r4, 0x0, r5, 0x0, 0x80, 0xc)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000002480))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={0x0})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0)

4.626127143s ago: executing program 7 (id=2054):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7e5}]})
socket$inet6(0xa, 0x2, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x1, r1})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
syz_clone3(0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

4.152554345s ago: executing program 0 (id=2055):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = epoll_create1(0x80000)
io_setup(0xdda, &(0x7f00000000c0)=<r8=>0x0)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r9, 0x200, &(0x7f0000000740)={0x0})
io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x2}])
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xe6, 0x3})
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000070500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r10], 0x4c}}, 0x40000)
sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r11 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
read(r11, 0x0, 0x0)

4.055772611s ago: executing program 6 (id=2056):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000080)={0x2a, 0x0, 0x7fff}, 0xc)
sendmmsg(r2, &(0x7f00000029c0), 0x400006d, 0x20000004)
shutdown(r3, 0x2)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.917656213s ago: executing program 7 (id=2057):
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0x20, 0x80)
socket$inet6_sctp(0xa, 0x1, 0x84)
fanotify_init(0x200, 0x0)
r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
dup(r0)
r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
dup(r1)
socket$inet_udp(0x2, 0x2, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x1607c1, 0x78e22799f4a46ffe)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
userfaultfd(0x80801)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.26026031s ago: executing program 7 (id=2058):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x47, 0x0, &(0x7f0000000080)=0x8)
openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x4000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000d0490bd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04000a0001000000000000000000140035006d6163766c616e30"], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
dup3(r8, r7, 0x0)
r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r9, 0x4161, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)

77.802086ms ago: executing program 7 (id=2059):
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r4, 0x6}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
setresuid(0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000a00)="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", &(0x7f0000000040)=""/17, &(0x7f0000001a00), &(0x7f0000000340)="fde7652b71e30d6b71a557d49c9bf726630b4fca1e29fa8b1562b2a12cc6cdd2706a37a184faba4cf52cba74ad98404d888f9148cfad492be378615449b89839af32e501bd796eadad3dc0c73d92e37287104ce4b14ea94b0570a9e102071cdb45307c69f84255cdb11855cc3a525cd9685374a1fffd84391eab5f339a97eb6533aa0c3387999d531b94d8977dd24f1fe613e863a5cad547cc2de65db3035650e1b77359d7eaddd0ea5f8b5819c24675c9e3043809251b2c97d05c9f9dde7346cd0b6f4fec447262a801073510d9eee53652", 0xd865824c, r6}, 0x38)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00'})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r7, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
accept(r7, 0x0, 0x0)

0s ago: executing program 6 (id=2060):
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, 0x0, 0x113, 0x70bd26, 0x25dfdc00, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc, 0x8f, 0x4}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = getpgrp(0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x200000000000021d, 0x1, r4}}, 0x40)

kernel console output (not intermixed with test programs):

d
[  652.409855][ T8794] usb 3-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config
[  652.409900][ T8794] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 199, using maximum allowed: 30
[  652.409985][ T8794] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 199
[  652.413631][ T8794] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  652.413662][ T8794] usb 3-1: New USB device strings: Mfr=0, Product=174, SerialNumber=1
[  652.413684][ T8794] usb 3-1: Product: syz
[  652.413700][ T8794] usb 3-1: SerialNumber: syz
[  655.680062][   T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  655.928170][   T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  655.928198][   T31] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  655.934836][   T31] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=81.a9
[  655.934867][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.934896][   T31] usb 7-1: Product: syz
[  655.934910][   T31] usb 7-1: Manufacturer: syz
[  655.934925][   T31] usb 7-1: SerialNumber: syz
[  656.005698][   T31] usb 7-1: config 0 descriptor??
[  656.387929][    T9] usb 7-1: USB disconnect, device number 3
[  656.536544][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'.
[  657.674439][ T5112] Bluetooth: hci1: command 0x0406 tx timeout
[  658.471551][T10057] program syz.0.982 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  660.761151][   T31] usb 3-1: USB disconnect, device number 6
[  665.179352][T10091] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  665.948764][ T5800] Bluetooth: hci2: unexpected event for opcode 0x202a
[  670.407355][ T5800] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  670.407973][ T5800] Bluetooth: hci2: Injecting HCI hardware error event
[  670.408735][ T5800] Bluetooth: hci2: hardware error 0x00
[  673.188931][ T5800] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  679.018708][ T5800] Bluetooth: hci5: unexpected event for opcode 0x202a
[  680.230401][T10187] program syz.6.1022 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  683.305213][ T5800] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  683.311551][ T5800] Bluetooth: hci5: Injecting HCI hardware error event
[  683.315680][ T5112] Bluetooth: hci5: hardware error 0x00
[  686.404826][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  686.404876][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  687.577273][T10227] program syz.1.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  688.130724][T10234] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  688.603739][ T5112] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  690.896235][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'.
[  692.964049][T10276] program syz.1.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  693.754888][T10283] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  696.236070][T10300] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  699.252986][T10317] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[  699.252986][T10317]    program syz.2.1061 not setting count and/or reply_len properly
[  700.459014][T10324] program syz.5.1063 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  700.613034][T10329] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  707.054334][T10365] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  707.383054][T10373] program syz.0.1079 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  718.907499][T10447] overlay: filesystem on ./file0 not supported as upperdir
[  719.920069][T10453] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  720.008976][T10456] tmpfs: Unknown parameter 'usrquota_block_har'
[  721.181279][   T36] audit: type=1326 audit(1772277395.620:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10454 comm="syz.1.1102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff21a73c799 code=0x0
[  725.117813][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  725.272123][    T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  725.272157][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.272171][    T9] usb 6-1: Product: syz
[  725.272181][    T9] usb 6-1: Manufacturer: syz
[  725.272192][    T9] usb 6-1: SerialNumber: syz
[  725.342586][    T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  725.546408][  T809] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  727.781350][   T43] usb 6-1: USB disconnect, device number 4
[  728.376004][T10503] IPv6: sit1: Disabled Multicast RS
[  729.017413][  T809] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  729.017871][  T809] ath9k_htc: Failed to initialize the device
[  729.021655][   T43] usb 6-1: ath9k_htc: USB layer deinitialized
[  729.310067][T10508] tmpfs: Unknown parameter 'usrquota_block_har'
[  730.403508][T10502] program syz.1.1112 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  730.928797][   T36] audit: type=1326 audit(1772277405.370:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10511 comm="syz.6.1116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffab913c799 code=0x0
[  738.251964][T10555] tmpfs: Unknown parameter 'usrquota_block_har'
[  739.042551][T10554] overlay: filesystem on ./file0 not supported as upperdir
[  747.357239][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  747.359155][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  751.007045][T10624] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  751.064802][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1147'.
[  752.012585][T10632] program syz.5.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  754.132063][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  754.387735][   T10] usb 2-1: Using ep0 maxpacket: 16
[  754.403639][   T10] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  754.403667][   T10] usb 2-1: config 10 has 0 interfaces, different from the descriptor's value: 1
[  754.406812][   T10] usb 2-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08
[  754.406849][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.406870][   T10] usb 2-1: Product: syz
[  754.406885][   T10] usb 2-1: Manufacturer: syz
[  754.406900][   T10] usb 2-1: SerialNumber: syz
[  755.775700][ T8794] usb 2-1: USB disconnect, device number 15
[  758.870369][T10680] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  760.490861][   T10] IPVS: starting estimator thread 0...
[  760.617649][T10701] IPVS: using max 7 ests per chain, 16800 per kthread
[  760.847821][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  761.017583][   T10] usb 6-1: Using ep0 maxpacket: 32
[  761.059015][   T10] usb 6-1: descriptor type invalid, skip
[  761.284112][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  761.284148][   T10] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  761.383789][   T10] usb 6-1: New USB device found, idVendor=12d1, idProduct=1413, bcdDevice= 0.00
[  761.383822][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.383843][   T10] usb 6-1: Product: syz
[  761.383857][   T10] usb 6-1: Manufacturer: syz
[  761.383871][   T10] usb 6-1: SerialNumber: syz
[  761.654160][   T10] usb 6-1: USB disconnect, device number 5
[  762.184793][T10707] overlay: filesystem on ./file0 not supported as upperdir
[  767.357562][ T8794] IPVS: starting estimator thread 0...
[  767.812802][T10747] overlay: filesystem on ./file0 not supported as upperdir
[  768.316719][T10745] IPVS: using max 11 ests per chain, 26400 per kthread
[  770.674183][T10769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  774.728568][ T5963] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  775.087414][   T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  775.471553][T10801] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  776.271933][   T31] usb 6-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config
[  776.271976][   T31] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 199, using maximum allowed: 30
[  776.272018][   T31] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 199
[  776.335199][   T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  776.335286][   T31] usb 6-1: New USB device strings: Mfr=0, Product=174, SerialNumber=1
[  776.335309][   T31] usb 6-1: Product: syz
[  776.335324][   T31] usb 6-1: SerialNumber: syz
[  776.379308][T10788] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  776.715311][ T5963] usb 1-1: unable to get BOS descriptor or descriptor too short
[  777.858689][ T5963] usb 1-1: unable to read config index 0 descriptor/start: -71
[  777.858728][ T5963] usb 1-1: can't read configurations, error -71
[  779.297946][   T31] usb 6-1: USB disconnect, device number 6
[  783.267014][T10842] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  783.573813][T10844] overlay: filesystem on ./file0 not supported as upperdir
[  786.117580][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  786.624340][   T10] usb 7-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config
[  786.624390][   T10] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 199, using maximum allowed: 30
[  786.624430][   T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 199
[  786.911194][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  786.911227][   T10] usb 7-1: New USB device strings: Mfr=0, Product=174, SerialNumber=1
[  786.911248][   T10] usb 7-1: Product: syz
[  786.911263][   T10] usb 7-1: SerialNumber: syz
[  788.911134][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1229'.
[  788.922581][T10871] loop6: detected capacity change from 0 to 7
[  789.093950][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.094159][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.122092][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.122167][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.157452][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.157530][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.162292][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.162379][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.172153][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.172193][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.198253][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.198330][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.204837][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.205070][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.205334][T10871] ldm_validate_partition_table(): Disk read failed.
[  789.214724][T10876] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1229'.
[  789.217019][T10876] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1229'.
[  789.224814][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.224853][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.233266][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.233323][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.250026][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  789.250092][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  789.254949][T10871] Dev loop6: unable to read RDB block 0
[  789.599011][T10880] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  789.715072][T10871]  loop6: unable to read partition table
[  789.721327][T10871] loop6: partition table beyond EOD, truncated
[  789.721495][T10871] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[  789.918457][   T10] usb 7-1: USB disconnect, device number 4
[  793.872337][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'.
[  798.338961][T10927] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  798.368421][ T8794] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  798.570043][ T8794] usb 6-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config
[  798.570097][ T8794] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 199, using maximum allowed: 30
[  798.570139][ T8794] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 199
[  798.574637][ T8794] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  798.574667][ T8794] usb 6-1: New USB device strings: Mfr=0, Product=174, SerialNumber=1
[  798.574682][ T8794] usb 6-1: Product: syz
[  798.574692][ T8794] usb 6-1: SerialNumber: syz
[  804.098735][ T8794] usb 6-1: USB disconnect, device number 7
[  805.189665][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1257'.
[  808.429500][   T36] audit: type=1326 audit(1772277482.870:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.5.1263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d860cc799 code=0x0
[  808.811866][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  808.813083][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  812.668544][T11003] fuse: Bad value for 'user_id'
[  812.668567][T11003] fuse: Bad value for 'user_id'
[  813.151997][T11014] overlayfs: failed to resolve './file1': -2
[  813.329051][T11015] overlayfs: failed to resolve './file2': -2
[  813.794443][T11016] Can't find ip_set type bitmap:ip
[  814.268360][   T36] audit: type=1326 audit(1772277488.710:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11023 comm="syz.5.1278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d860cc799 code=0x0
[  814.447560][ T8794] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  814.624766][ T8794] usb 2-1: Using ep0 maxpacket: 8
[  814.640156][ T8794] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  814.640199][ T8794] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  814.640410][ T8794] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  814.640483][ T8794] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  814.640589][ T8794] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  814.640647][ T8794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.547548][ T8794] usb 2-1: GET_CAPABILITIES returned 0
[  815.547600][ T8794] usbtmc 2-1:16.0: can't read capabilities
[  815.710548][  T995] usb 2-1: USB disconnect, device number 16
[  818.135986][T11057] fuse: Bad value for 'fd'
[  818.755021][T11069] overlayfs: failed to resolve './file1': -2
[  818.928000][T11070] overlayfs: failed to resolve './file2': -2
[  819.367810][T11071] Can't find ip_set type bitmap:ip
[  819.794502][T11042] overlayfs: failed to resolve './file1': -2
[  819.839422][T11042] overlayfs: failed to resolve './file1/file0': -2
[  820.100581][   T36] audit: type=1326 audit(1772277494.540:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11075 comm="syz.0.1291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01775fc799 code=0x0
[  823.177514][ T9415] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  823.327376][ T9415] usb 1-1: Using ep0 maxpacket: 8
[  823.330482][ T9415] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  823.330519][ T9415] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  823.330545][ T9415] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  823.330570][ T9415] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  823.330613][ T9415] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  823.330638][ T9415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.658515][ T9415] usb 1-1: GET_CAPABILITIES returned 0
[  823.658564][ T9415] usbtmc 1-1:16.0: can't read capabilities
[  823.658620][T11102] fuse: Bad value for 'fd'
[  823.861830][   T31] usb 1-1: USB disconnect, device number 21
[  823.962806][T11108] program syz.1.1301 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  825.192168][   T36] audit: type=1326 audit(1772277499.630:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11120 comm="syz.2.1305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47cf16c799 code=0x0
[  827.279017][T11125] overlayfs: failed to resolve './file1': -2
[  827.330645][T11136] overlayfs: failed to resolve './file1/file0': -2
[  827.567031][T11143] fuse: Bad value for 'fd'
[  827.957377][ T8794] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  828.107323][ T8794] usb 7-1: Using ep0 maxpacket: 8
[  828.115781][ T8794] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  828.115814][ T8794] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  828.115842][ T8794] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  828.115868][ T8794] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  828.115912][ T8794] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  828.115937][ T8794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.395008][ T8794] usb 7-1: GET_CAPABILITIES returned 0
[  828.395115][ T8794] usbtmc 7-1:16.0: can't read capabilities
[  828.611101][   T31] usb 7-1: USB disconnect, device number 5
[  828.715136][T11155] fuse: Bad value for 'fd'
[  829.011834][   T36] audit: type=1326 audit(1772277503.440:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11158 comm="syz.0.1319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01775fc799 code=0x0
[  829.887603][T11171] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  829.911561][T11173] fuse: Bad value for 'fd'
[  830.143491][ T5963] IPVS: starting estimator thread 0...
[  830.227613][T11178] IPVS: using max 8 ests per chain, 19200 per kthread
[  834.274449][   T36] audit: type=1326 audit(1772277508.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11201 comm="syz.0.1334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01775fc799 code=0x0
[  834.348820][T11206] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  834.537635][T11211] fuse: Bad value for 'fd'
[  837.512597][T11237] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  837.551286][T11238] program syz.0.1343 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  837.971201][T11240] fuse: Bad value for 'fd'
[  840.238963][ T5947] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  841.327356][ T5947] usb 7-1: Using ep0 maxpacket: 16
[  841.332870][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.332899][ T5947] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  841.336247][ T5947] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  841.336274][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.336296][ T5947] usb 7-1: Product: syz
[  841.336313][ T5947] usb 7-1: Manufacturer: syz
[  841.336345][ T5947] usb 7-1: SerialNumber: syz
[  841.437681][ T5947] usb 7-1: config 0 descriptor??
[  846.029565][    T9] usb 7-1: USB disconnect, device number 6
[  848.239034][T11298] fuse: Invalid rootmode
[  850.123003][T11312] program syz.0.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  850.337390][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  850.787813][    T9] usb 7-1: Using ep0 maxpacket: 8
[  850.793804][    T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  850.793837][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  850.793863][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  850.793888][    T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  850.793929][    T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  850.793953][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.461487][    T9] usb 7-1: can't set config #16, error -71
[  852.465813][    T9] usb 7-1: USB disconnect, device number 7
[  857.189723][T11345] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  862.797330][ T5947] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  863.007455][ T5947] usb 7-1: Using ep0 maxpacket: 8
[  863.010818][ T5947] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  863.010839][ T5947] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  863.010861][ T5947] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  863.010879][ T5947] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  863.010909][ T5947] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  863.010926][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.314889][ T5947] usb 7-1: usb_control_msg returned -71
[  863.314924][ T5947] usbtmc 7-1:16.0: can't read capabilities
[  863.381912][ T5947] usb 7-1: USB disconnect, device number 8
[  866.054139][T11390] program syz.0.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  867.264409][T11395] fuse: Invalid rootmode
[  870.681755][T11418] overlay: filesystem on ./file0 not supported as upperdir
[  870.890417][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  870.890493][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  876.153849][T11438] program syz.2.1407 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  877.117818][T11442] fuse: Bad value for 'rootmode'
[  883.493357][T11485] program syz.0.1418 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  884.605741][T11493] fuse: Bad value for 'rootmode'
[  885.160551][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  886.141581][    T9] usb 6-1: Using ep0 maxpacket: 8
[  886.143791][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  886.143812][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  886.143830][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  886.143848][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  886.143877][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  886.143894][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.517417][    T9] usb 6-1: GET_CAPABILITIES returned 0
[  886.517465][    T9] usbtmc 6-1:16.0: can't read capabilities
[  886.923394][    T9] usb 6-1: USB disconnect, device number 8
[  889.687164][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  889.726195][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  889.743749][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  889.767990][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  889.772531][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  891.368733][   T36] audit: type=1326 audit(1772277565.810:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11523 comm="syz.0.1431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01775fc799 code=0x0
[  891.467776][T11529] program syz.2.1432 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  891.827472][ T5800] Bluetooth: hci4: command tx timeout
[  895.027560][ T5800] Bluetooth: hci4: command tx timeout
[  895.237582][T11544] program syz.0.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  895.246485][T11545] fuse: Bad value for 'rootmode'
[  896.098645][T11514] chnl_net:caif_netlink_parms(): no params data found
[  897.786773][ T5800] Bluetooth: hci4: command tx timeout
[  898.690229][   T36] audit: type=1326 audit(1772277573.130:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11572 comm="syz.0.1444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01775fc799 code=0x0
[  900.145949][ T5800] Bluetooth: hci4: command tx timeout
[  900.170786][   T67] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.506014][T11585] fuse: Unknown parameter 'use00000000000000000000'
[  901.716980][T11593] program syz.1.1448 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  902.595716][   T67] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  903.922846][   T67] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.771503][   T67] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.326379][T11514] bridge0: port 1(bridge_slave_0) entered blocking state
[  905.326597][T11514] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.326796][T11514] bridge_slave_0: entered allmulticast mode
[  905.362530][T11514] bridge_slave_0: entered promiscuous mode
[  905.378970][T11514] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.379167][T11514] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.379394][T11514] bridge_slave_1: entered allmulticast mode
[  905.388648][T11514] bridge_slave_1: entered promiscuous mode
[  907.201079][T11514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  908.184084][T11514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  908.469461][T11514] team0: Port device team_slave_0 added
[  908.473079][T11514] team0: Port device team_slave_1 added
[  910.358136][T11514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  910.358155][T11514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.358184][T11514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  910.423885][T11514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  910.423906][T11514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.423937][T11514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  911.982499][T11514] hsr_slave_0: entered promiscuous mode
[  911.983892][T11514] hsr_slave_1: entered promiscuous mode
[  912.010415][T11514] debugfs: 'hsr0' already exists in 'hsr'
[  912.010446][T11514] Cannot create hsr debugfs directory
[  913.433550][   T67] bridge_slave_1: left allmulticast mode
[  913.433582][   T67] bridge_slave_1: left promiscuous mode
[  913.433820][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.461568][T11665] program syz.6.1468 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  913.660063][   T67] bridge_slave_0: left allmulticast mode
[  913.660095][   T67] bridge_slave_0: left promiscuous mode
[  913.660372][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.204797][T11674] overlay: filesystem on ./file0 not supported as upperdir
[  920.408123][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  920.486694][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  920.681734][   T67] bond0 (unregistering): Released all slaves
[  920.950832][T11724] overlay: filesystem on ./file0 not supported as upperdir
[  922.654395][T11729] overlay: filesystem on ./file0 not supported as upperdir
[  923.176458][T11719] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  923.407332][T11514] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  924.347423][T11514] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  926.738038][T11746] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  927.155317][T11514] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  927.275347][T11514] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  930.533558][T11788] overlay: filesystem on ./file0 not supported as upperdir
[  931.819851][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  931.820402][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  938.123340][T11820] fuse: Unknown parameter 'user_i00000000000000000000'
[  938.172721][T11514] 8021q: adding VLAN 0 to HW filter on device bond0
[  939.147501][   T67] hsr_slave_0: left promiscuous mode
[  939.441620][T11835] overlay: filesystem on ./file0 not supported as upperdir
[  939.761468][   T67] hsr_slave_1: left promiscuous mode
[  939.762544][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  939.762571][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  939.928999][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  939.929038][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  940.028943][T11840] program syz.0.1507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  940.248705][   T67] veth1_macvtap: left promiscuous mode
[  940.248782][   T67] veth0_macvtap: left promiscuous mode
[  940.248942][   T67] veth1_vlan: left promiscuous mode
[  940.249053][   T67] veth0_vlan: left promiscuous mode
[  942.586451][T11861] overlayfs: missing 'workdir'
[  942.753656][T11862] overlayfs: failed to resolve './file2': -2
[  943.194458][T11863] Can't find ip_set type bitmap:ip
[  944.525055][T11878] overlay: filesystem on ./file0 not supported as upperdir
[  945.080794][ T9415] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  945.227354][ T9415] usb 1-1: Using ep0 maxpacket: 16
[  945.257438][ T9415] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  945.257462][ T9415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.257476][ T9415] usb 1-1: Product: syz
[  945.257487][ T9415] usb 1-1: Manufacturer: syz
[  945.257497][ T9415] usb 1-1: SerialNumber: syz
[  945.261306][ T9415] usb 1-1: config 0 descriptor??
[  945.310270][ T9415] gspca_main: spca508-2.14.0 probing 041e:4018
[  945.425610][T11880] program syz.2.1514 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  945.500554][ T9415] gspca_spca508: reg_read err -32
[  946.007618][ T9415] gspca_spca508: reg_read err -110
[  946.008050][ T9415] gspca_spca508: reg_read err -32
[  946.011864][ T9415] gspca_spca508: reg_read err -32
[  946.012278][ T9415] gspca_spca508: reg_read err -32
[  946.012784][ T9415] gspca_spca508: reg write: error -32
[  946.012888][ T9415] spca508 1-1:0.0: probe with driver spca508 failed with error -32
[  946.315719][ T9415] usb 1-1: USB disconnect, device number 22
[  948.272407][T11896] program syz.1.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  948.426344][T11898] program syz.0.1518 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  951.202535][T11911] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  951.475462][T11916] overlayfs: missing 'lowerdir'
[  951.644333][T11917] overlayfs: failed to resolve './file2': -2
[  952.087844][T11918] Can't find ip_set type bitmap:ip
[  952.680311][   T67] team0 (unregistering): Port device team_slave_1 removed
[  953.678258][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  953.684849][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  953.685308][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  953.686400][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  953.687136][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  953.738206][   T67] team0 (unregistering): Port device team_slave_0 removed
[  953.877349][  T995] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  954.199093][  T995] usb 1-1: Using ep0 maxpacket: 16
[  955.032448][  T995] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  955.032481][  T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.032502][  T995] usb 1-1: Product: syz
[  955.032517][  T995] usb 1-1: Manufacturer: syz
[  955.032532][  T995] usb 1-1: SerialNumber: syz
[  955.086061][  T995] usb 1-1: config 0 descriptor??
[  955.131890][  T995] gspca_main: spca508-2.14.0 probing 041e:4018
[  955.322814][  T995] gspca_spca508: reg_read err -32
[  955.448958][  T995] gspca_spca508: reg_read err -71
[  955.449342][  T995] gspca_spca508: reg_read err -71
[  955.449671][  T995] gspca_spca508: reg_read err -71
[  955.450044][  T995] gspca_spca508: reg_read err -71
[  955.450403][  T995] gspca_spca508: reg write: error -71
[  955.450468][  T995] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[  955.520253][  T995] usb 1-1: USB disconnect, device number 23
[  955.521336][   T36] audit: type=1326 audit(1772277629.960:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.2.1530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47cf16c799 code=0x0
[  955.715455][T11943] 9pnet_fd: Insufficient options for proto=fd
[  955.827420][ T5800] Bluetooth: hci5: command tx timeout
[  958.020992][ T5800] Bluetooth: hci5: command tx timeout
[  959.403593][T11928] chnl_net:caif_netlink_parms(): no params data found
[  960.068125][ T5800] Bluetooth: hci5: command tx timeout
[  961.562632][T11993] overlayfs: missing 'lowerdir'
[  961.848269][T11995] overlayfs: failed to resolve './file2': -2
[  962.632404][T11996] Can't find ip_set type bitmap:ip
[  962.724746][ T5800] Bluetooth: hci5: command tx timeout
[  963.104434][   T67] IPVS: stop unused estimator thread 0...
[  963.350723][T11928] bridge0: port 1(bridge_slave_0) entered blocking state
[  963.350851][T11928] bridge0: port 1(bridge_slave_0) entered disabled state
[  963.351098][T11928] bridge_slave_0: entered allmulticast mode
[  963.353918][T11928] bridge_slave_0: entered promiscuous mode
[  963.394086][T11928] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.394310][T11928] bridge0: port 2(bridge_slave_1) entered disabled state
[  963.394574][T11928] bridge_slave_1: entered allmulticast mode
[  963.421385][T11928] bridge_slave_1: entered promiscuous mode
[  963.484767][T11928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  963.500406][T11928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  963.552984][T11928] team0: Port device team_slave_0 added
[  963.556756][T11928] team0: Port device team_slave_1 added
[  963.611837][T11928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  963.611857][T11928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  963.611896][T11928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  963.614170][T11928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  963.614186][T11928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  963.614215][T11928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  965.041413][T12011] fuse: Invalid rootmode
[  965.248224][T12015] 9pnet_fd: Insufficient options for proto=fd
[  965.624643][T11928] hsr_slave_0: entered promiscuous mode
[  965.641578][T11928] hsr_slave_1: entered promiscuous mode
[  965.652729][T11928] debugfs: 'hsr0' already exists in 'hsr'
[  965.652843][T11928] Cannot create hsr debugfs directory
[  965.808085][T12018] IPv6: sit1: Disabled Multicast RS
[  966.307324][ T9415] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  966.467485][ T9415] usb 3-1: Using ep0 maxpacket: 32
[  966.485296][ T9415] usb 3-1: unable to get BOS descriptor or descriptor too short
[  966.486536][ T9415] usb 3-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[  966.486562][ T9415] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[  966.544100][ T9415] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[  966.544135][ T9415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.544158][ T9415] usb 3-1: Product: syz
[  966.544173][ T9415] usb 3-1: Manufacturer: syz
[  966.544189][ T9415] usb 3-1: SerialNumber: syz
[  970.176543][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  970.213179][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  970.213630][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  970.215377][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  970.216140][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  970.216430][ T9415] usb 3-1: USB disconnect, device number 7
[  970.848127][T12047] overlayfs: missing 'lowerdir'
[  971.030322][T12048] overlayfs: failed to resolve './file2': -2
[  971.481142][T12049] Can't find ip_set type bitmap:ip
[  971.665869][T12050] fuse: Bad value for 'fd'
[  972.390533][ T5800] Bluetooth: hci4: command tx timeout
[  973.037588][T12057] 9pnet_fd: Insufficient options for proto=fd
[  973.505711][T12067] overlay: filesystem on ./file0 not supported as upperdir
[  975.933280][ T5800] Bluetooth: hci4: command tx timeout
[  976.377416][ T8794] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  976.532371][ T8794] usb 3-1: Using ep0 maxpacket: 32
[  976.540818][ T8794] usb 3-1: unable to get BOS descriptor or descriptor too short
[  976.553263][ T8794] usb 3-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[  976.553289][ T8794] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[  976.577716][ T8794] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[  976.577749][ T8794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.577769][ T8794] usb 3-1: Product: syz
[  976.577784][ T8794] usb 3-1: Manufacturer: syz
[  976.577799][ T8794] usb 3-1: SerialNumber: syz
[  977.989604][ T5800] Bluetooth: hci4: command tx timeout
[  978.072094][T12089] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  978.072574][T12089] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  978.244103][T12090] overlayfs: failed to resolve './file2': -2
[  978.691715][T12091] Can't find ip_set type bitmap:ip
[  980.375747][ T5800] Bluetooth: hci4: command tx timeout
[  980.584828][ T8794] usb 3-1: USB disconnect, device number 8
[  980.759923][T12110] 9pnet_fd: Insufficient options for proto=fd
[  981.088099][ T5962] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  981.237370][ T5962] usb 3-1: Using ep0 maxpacket: 16
[  981.240807][ T5962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  981.240864][ T5962] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  981.240888][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.321032][ T5962] usb 3-1: config 0 descriptor??
[  981.405762][T11677] bridge_slave_1: left allmulticast mode
[  981.416060][T11677] bridge_slave_1: left promiscuous mode
[  981.650100][T11677] bridge0: port 2(bridge_slave_1) entered disabled state
[  981.934066][ T5962] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  982.140221][T11677] bridge_slave_0: left allmulticast mode
[  982.140261][T11677] bridge_slave_0: left promiscuous mode
[  982.140528][T11677] bridge0: port 1(bridge_slave_0) entered disabled state
[  984.160918][ T5963] usb 3-1: USB disconnect, device number 9
[  987.191035][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1575'.
[  987.191140][T12143] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1575'.
[  988.054378][T12148] 9pnet_fd: Insufficient options for proto=fd
[  988.470891][T12152] overlay: filesystem on ./file0 not supported as upperdir
[  988.529190][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  988.648717][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  988.730114][T11677] bond0 (unregistering): Released all slaves
[  988.889061][ T9415] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  988.977417][  T995] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  989.139378][  T995] usb 3-1: Using ep0 maxpacket: 16
[  989.142256][  T995] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  989.142312][  T995] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  989.142344][  T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.186096][  T995] usb 3-1: config 0 descriptor??
[  989.195534][ T9415] usb 1-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config
[  989.195586][ T9415] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 199, using maximum allowed: 30
[  989.195636][ T9415] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 199
[  989.208145][ T9415] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  989.208232][ T9415] usb 1-1: New USB device strings: Mfr=0, Product=174, SerialNumber=1
[  989.208289][ T9415] usb 1-1: Product: syz
[  989.208325][ T9415] usb 1-1: SerialNumber: syz
[  989.269715][  T995] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  989.327379][T11677] hsr_slave_0: left promiscuous mode
[  989.370734][T11677] hsr_slave_1: left promiscuous mode
[  989.375537][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0
[  990.425746][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1
[  992.043858][ T5963] usb 3-1: USB disconnect, device number 10
[  992.343868][ T9415] usb 1-1: USB disconnect, device number 24
[  992.955536][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1586'.
[  993.264512][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  993.266239][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  993.724142][T11677] team0 (unregistering): Port device team_slave_1 removed
[  995.535599][T12189] program syz.6.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  995.540730][T12190] 9pnet_fd: Insufficient options for proto=fd
[  995.649417][T11677] team0 (unregistering): Port device team_slave_0 removed
[  997.171627][T12203] overlay: filesystem on ./file0 not supported as upperdir
[  999.470912][T12036] chnl_net:caif_netlink_parms(): no params data found
[  999.541824][   T36] audit: type=1326 audit(1772277673.980:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12216 comm="syz.0.1597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01775fc799 code=0x0
[  999.636708][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'.
[  999.937685][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1000.807314][   T10] usb 7-1: Using ep0 maxpacket: 16
[ 1002.337272][   T10] usb 7-1: unable to read config index 0 descriptor/all
[ 1002.337319][   T10] usb 7-1: can't read configurations, error -71
[ 1002.378060][T12234] 9pnet_fd: Insufficient options for proto=fd
[ 1004.582969][T12036] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.583073][T12036] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1004.583278][T12036] bridge_slave_0: entered allmulticast mode
[ 1004.585327][T12036] bridge_slave_0: entered promiscuous mode
[ 1004.612399][T12036] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1004.615463][T12036] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1004.616116][T12036] bridge_slave_1: entered allmulticast mode
[ 1004.657703][T12036] bridge_slave_1: entered promiscuous mode
[ 1004.805902][T12036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1004.906458][T12036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1005.230251][T12036] team0: Port device team_slave_0 added
[ 1005.259221][T12036] team0: Port device team_slave_1 added
[ 1006.428858][T12036] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1006.428878][T12036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1006.428908][T12036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1006.986565][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'.
[ 1008.067852][T12036] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1008.067872][T12036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1008.067902][T12036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1008.181926][T11928] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1008.275070][T11928] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1008.336954][T11928] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1008.420388][T11928] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1008.437347][ T8794] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1008.587264][ T8794] usb 1-1: Using ep0 maxpacket: 32
[ 1008.590160][ T8794] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1008.591722][ T8794] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1008.594804][ T8794] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[ 1008.594831][ T8794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.594852][ T8794] usb 1-1: Product: syz
[ 1008.594867][ T8794] usb 1-1: Manufacturer: syz
[ 1008.594882][ T8794] usb 1-1: SerialNumber: syz
[ 1008.596160][T12270] fuse: Unknown parameter '0x0000000000000005'
[ 1008.848135][T12036] hsr_slave_0: entered promiscuous mode
[ 1008.850743][T12036] hsr_slave_1: entered promiscuous mode
[ 1008.851775][T12036] debugfs: 'hsr0' already exists in 'hsr'
[ 1008.851800][T12036] Cannot create hsr debugfs directory
[ 1008.896329][ T8794] usb 1-1: Invalid number of CPorts: 0
[ 1008.896375][ T8794] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22
[ 1009.007400][ T5963] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1009.099418][   T10] usb 1-1: USB disconnect, device number 25
[ 1009.331817][ T5963] usb 3-1: Using ep0 maxpacket: 16
[ 1010.376908][ T5963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1010.376973][ T5963] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[ 1010.376998][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.538136][T11677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.264384][ T5963] usb 3-1: config 0 descriptor??
[ 1011.285323][ T5963] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1011.803873][T12291] 9pnet_fd: Insufficient options for proto=fd
[ 1012.822128][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1012.824231][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1012.825102][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1012.826265][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1012.827007][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1012.995231][T11677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1013.664112][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'.
[ 1014.329113][   T10] usb 3-1: USB disconnect, device number 11
[ 1014.867631][ T5800] Bluetooth: hci2: command tx timeout
[ 1016.947951][ T5800] Bluetooth: hci2: command tx timeout
[ 1018.230165][T11677] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode
[ 1018.232664][T11677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1019.028297][ T5800] Bluetooth: hci2: command tx timeout
[ 1019.133477][ T5963] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1019.175224][T11677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1019.472724][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'.
[ 1020.367320][ T5963] usb 7-1: Using ep0 maxpacket: 16
[ 1020.369608][ T5963] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1020.369665][ T5963] usb 7-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[ 1020.369690][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1020.375458][ T5963] usb 7-1: config 0 descriptor??
[ 1020.383287][ T5963] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1021.187648][ T5800] Bluetooth: hci2: command tx timeout
[ 1022.068846][T12379] kAFS: No cell specified
[ 1022.917836][ T9415] usb 7-1: USB disconnect, device number 11
[ 1025.159716][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'.
[ 1026.608441][T12036] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1026.727334][ T8794] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1026.878698][ T8794] usb 3-1: Using ep0 maxpacket: 16
[ 1026.881246][ T8794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1026.881300][ T8794] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[ 1026.881325][ T8794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1026.899407][ T8794] usb 3-1: config 0 descriptor??
[ 1026.965259][ T8794] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1027.077312][ T9415] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1028.492824][ T9415] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1028.492859][ T9415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.492880][ T9415] usb 7-1: Product: syz
[ 1028.492895][ T9415] usb 7-1: Manufacturer: syz
[ 1028.492910][ T9415] usb 7-1: SerialNumber: syz
[ 1028.579917][ T9415] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1028.676952][T11512] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1028.941773][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1028.995469][ T5962] usb 7-1: USB disconnect, device number 12
[ 1029.078155][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1029.121881][T11677] bond0 (unregistering): Released all slaves
[ 1029.152489][T12036] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1029.196550][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1029.218532][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1029.218932][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1029.220598][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1029.221338][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1029.866264][T12445] kAFS: No cell specified
[ 1030.084799][T12293] chnl_net:caif_netlink_parms(): no params data found
[ 1030.337527][ T9415] usb 3-1: USB disconnect, device number 12
[ 1031.192931][T11512] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 1031.193109][T11512] ath9k_htc: Failed to initialize the device
[ 1031.250138][ T5962] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1031.353902][ T5112] Bluetooth: hci5: command tx timeout
[ 1032.050688][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'.
[ 1033.551761][ T5800] Bluetooth: hci5: command tx timeout
[ 1035.285886][T12481] ceph: No mds server is up or the cluster is laggy
[ 1035.577592][ T5962] libceph: connect (1)[c::]:6789 error -101
[ 1035.577783][ T5962] libceph: mon0 (1)[c::]:6789 connect error
[ 1035.629038][ T5112] Bluetooth: hci5: command tx timeout
[ 1036.303466][  T995] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1036.547692][  T995] usb 3-1: Using ep0 maxpacket: 16
[ 1036.563927][  T995] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.564080][  T995] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[ 1036.564107][  T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1036.653082][T12494] kAFS: No cell specified
[ 1036.760630][  T995] usb 3-1: config 0 descriptor??
[ 1036.835512][  T995] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1037.678105][ T5112] Bluetooth: hci5: command tx timeout
[ 1039.282382][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1656'.
[ 1040.190810][    T9] usb 3-1: USB disconnect, device number 13
[ 1041.572258][T12536] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1041.759977][T11677] hsr_slave_0: left promiscuous mode
[ 1041.807419][T11677] hsr_slave_1: left promiscuous mode
[ 1041.808548][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1041.808576][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1041.894416][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1041.894447][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1042.020195][T11677] veth1_macvtap: left promiscuous mode
[ 1042.020303][T11677] veth0_macvtap: left promiscuous mode
[ 1042.020555][T11677] veth1_vlan: left promiscuous mode
[ 1042.020721][T11677] veth0_vlan: left promiscuous mode
[ 1043.285559][T12554] kAFS: No cell specified
[ 1044.697884][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'.
[ 1045.953582][T12560] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1045.953616][T12560] overlayfs: failed to set xattr on upper
[ 1045.953627][T12560] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1045.953636][T12560] overlayfs: ...falling back to index=off.
[ 1045.953645][T12560] overlayfs: ...falling back to uuid=null.
[ 1046.003424][T12565] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1046.003456][T12565] overlayfs: failed to set xattr on upper
[ 1046.003466][T12565] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1046.003475][T12565] overlayfs: ...falling back to index=off.
[ 1046.003484][T12565] overlayfs: ...falling back to uuid=null.
[ 1046.021563][T12565] overlayfs: conflicting lowerdir path
[ 1047.472798][T11677] team0 (unregistering): Port device team_slave_1 removed
[ 1047.503935][T11677] team0 (unregistering): Port device team_slave_0 removed
[ 1048.070286][T12591] program syz.6.1673 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1048.332970][T12293] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.333062][T12293] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.333399][T12293] bridge_slave_0: entered allmulticast mode
[ 1048.684389][T12293] bridge_slave_0: entered promiscuous mode
[ 1048.712023][T12293] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.712229][T12293] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.712433][T12293] bridge_slave_1: entered allmulticast mode
[ 1048.716203][T12293] bridge_slave_1: entered promiscuous mode
[ 1048.967203][T12596] kAFS: No cell specified
[ 1049.852764][T12293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1049.920337][T12293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1051.060010][T12293] team0: Port device team_slave_0 added
[ 1051.183407][T12293] team0: Port device team_slave_1 added
[ 1051.191767][T12437] chnl_net:caif_netlink_parms(): no params data found
[ 1051.460470][T12293] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1051.460490][T12293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1051.460519][T12293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1051.578093][T12293] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1051.578112][T12293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1051.578141][T12293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1053.023759][T12637] program syz.6.1683 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1053.510011][T12437] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1053.510462][T12437] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.510642][T12437] bridge_slave_0: entered allmulticast mode
[ 1053.514980][T12437] bridge_slave_0: entered promiscuous mode
[ 1053.580371][T11677] IPVS: stop unused estimator thread 0...
[ 1053.707043][T12293] hsr_slave_0: entered promiscuous mode
[ 1053.714306][T12293] hsr_slave_1: entered promiscuous mode
[ 1053.714932][T12293] debugfs: 'hsr0' already exists in 'hsr'
[ 1053.714950][T12293] Cannot create hsr debugfs directory
[ 1053.715402][T12437] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.715544][T12437] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.715697][T12437] bridge_slave_1: entered allmulticast mode
[ 1053.762719][T12437] bridge_slave_1: entered promiscuous mode
[ 1054.160138][T12437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1054.251311][T12437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1054.694873][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.694944][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.286549][T12672] overlayfs: failed to resolve './file0': -2
[ 1056.442582][T12673] overlayfs: failed to resolve './file2': -2
[ 1058.603775][T12677] program syz.6.1694 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1058.689216][T12437] team0: Port device team_slave_0 added
[ 1058.875138][T12437] team0: Port device team_slave_1 added
[ 1060.194199][T12437] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1060.194220][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1060.194250][T12437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1060.616160][T12437] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1060.616174][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1060.616195][T12437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1061.221865][T12698] overlayfs: failed to resolve './file0': -2
[ 1061.402244][T12699] overlayfs: failed to resolve './file2': -2
[ 1065.529114][T12437] hsr_slave_0: entered promiscuous mode
[ 1065.530116][T12437] hsr_slave_1: entered promiscuous mode
[ 1065.530802][T12437] debugfs: 'hsr0' already exists in 'hsr'
[ 1065.530821][T12437] Cannot create hsr debugfs directory
[ 1065.635046][T12714] program syz.0.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1068.542734][T12737] overlayfs: failed to resolve './file2': -2
[ 1074.019192][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1074.045552][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1074.055667][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1074.070037][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1074.071099][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1074.680124][T12785] overlayfs: failed to resolve './file2': -2
[ 1075.503202][T11677] bridge_slave_1: left allmulticast mode
[ 1075.503234][T11677] bridge_slave_1: left promiscuous mode
[ 1075.503517][T11677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1075.599855][T11677] bridge_slave_0: left allmulticast mode
[ 1075.599878][T11677] bridge_slave_0: left promiscuous mode
[ 1075.600072][T11677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.228070][ T5800] Bluetooth: hci4: command tx timeout
[ 1076.602171][T11677] bridge_slave_1: left allmulticast mode
[ 1076.602234][T11677] bridge_slave_1: left promiscuous mode
[ 1076.602505][T11677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.699119][T11677] bridge_slave_0: left allmulticast mode
[ 1076.699151][T11677] bridge_slave_0: left promiscuous mode
[ 1076.699417][T11677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1078.307425][ T5800] Bluetooth: hci4: command tx timeout
[ 1080.208602][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1080.358143][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1080.387300][ T5800] Bluetooth: hci4: command tx timeout
[ 1080.439726][T11677] bond0 (unregistering): Released all slaves
[ 1080.781728][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1080.868507][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1080.929253][T11677] bond0 (unregistering): Released all slaves
[ 1081.068376][T11512] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1081.233000][T11512] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1081.233025][T11512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.233039][T11512] usb 3-1: Product: syz
[ 1081.233050][T11512] usb 3-1: Manufacturer: syz
[ 1081.233060][T11512] usb 3-1: SerialNumber: syz
[ 1081.284179][T11512] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1081.364823][ T9415] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1082.206795][T12825] overlayfs: failed to resolve './file2': -2
[ 1082.722285][ T5800] Bluetooth: hci4: command tx timeout
[ 1083.772652][ T9415] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1083.772795][ T9415] ath9k_htc: Failed to initialize the device
[ 1085.714729][    T9] usb 3-1: USB disconnect, device number 14
[ 1085.780461][    T9] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1087.122832][T12832] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1088.417623][T11677] hsr_slave_0: left promiscuous mode
[ 1088.459711][T11677] hsr_slave_1: left promiscuous mode
[ 1088.505514][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1088.748375][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1090.117434][T11677] hsr_slave_0: left promiscuous mode
[ 1090.149410][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1090.154362][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1090.154786][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1090.156159][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1090.156877][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1090.197362][T11677] hsr_slave_1: left promiscuous mode
[ 1090.198270][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1090.556579][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1090.973175][   T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1091.139834][   T10] usb 1-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config
[ 1091.139880][   T10] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 199, using maximum allowed: 30
[ 1091.139930][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 199
[ 1091.142067][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1091.142095][   T10] usb 1-1: New USB device strings: Mfr=0, Product=174, SerialNumber=1
[ 1091.142117][   T10] usb 1-1: Product: syz
[ 1091.142141][   T10] usb 1-1: SerialNumber: syz
[ 1092.711011][ T5112] Bluetooth: hci2: command tx timeout
[ 1092.818982][T11677] team0 (unregistering): Port device team_slave_1 removed
[ 1092.848502][T11677] team0 (unregistering): Port device team_slave_0 removed
[ 1093.378017][T11677] team0 (unregistering): Port device team_slave_1 removed
[ 1093.440489][T11677] team0 (unregistering): Port device team_slave_0 removed
[ 1093.845799][   T10] usb 1-1: USB disconnect, device number 26
[ 1094.836865][ T5112] Bluetooth: hci2: command tx timeout
[ 1097.071642][ T5112] Bluetooth: hci2: command tx timeout
[ 1098.555435][   T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1099.108272][ T5112] Bluetooth: hci2: command tx timeout
[ 1100.467295][ T8794] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1100.546498][T12901] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[ 1100.548148][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1747'.
[ 1100.757611][ T8794] usb 7-1: Using ep0 maxpacket: 16
[ 1100.763601][ T8794] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1100.763628][ T8794] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1100.779834][ T8794] usb 7-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a
[ 1100.779912][ T8794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.779974][ T8794] usb 7-1: Product: syz
[ 1100.780004][ T8794] usb 7-1: Manufacturer: syz
[ 1100.780047][ T8794] usb 7-1: SerialNumber: syz
[ 1100.870226][ T8794] usb 7-1: config 0 descriptor??
[ 1101.061730][T12901] netdevsim netdevsim2: Direct firmware load for /
[ 1101.061730][T12901]  failed with error -2
[ 1101.061772][T12901] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[ 1101.061772][T12901] 
[ 1101.063639][T12774] chnl_net:caif_netlink_parms(): no params data found
[ 1101.170696][ T9415] usb 7-1: USB disconnect, device number 13
[ 1101.207444][ T5962] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1101.431759][ T5962] usb 1-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config
[ 1101.431805][ T5962] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 199, using maximum allowed: 30
[ 1101.431843][ T5962] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 199
[ 1101.433624][ T5962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1101.433659][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=174, SerialNumber=1
[ 1101.433675][ T5962] usb 1-1: Product: syz
[ 1101.433685][ T5962] usb 1-1: SerialNumber: syz
[ 1104.289479][ T5962] usb 1-1: USB disconnect, device number 28
[ 1104.463573][T12851] chnl_net:caif_netlink_parms(): no params data found
[ 1106.061530][T12774] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1106.062588][T12774] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.062856][T12774] bridge_slave_0: entered allmulticast mode
[ 1106.094622][T12774] bridge_slave_0: entered promiscuous mode
[ 1106.166152][T12774] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1106.176951][T12774] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.186434][T12774] bridge_slave_1: entered allmulticast mode
[ 1106.203004][T12774] bridge_slave_1: entered promiscuous mode
[ 1106.504282][T12774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1106.665687][T12774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1106.755267][T12851] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1106.755397][T12851] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.755649][T12851] bridge_slave_0: entered allmulticast mode
[ 1106.792241][T12851] bridge_slave_0: entered promiscuous mode
[ 1106.840314][T12851] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1106.840537][T12851] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.840786][T12851] bridge_slave_1: entered allmulticast mode
[ 1106.845696][T12851] bridge_slave_1: entered promiscuous mode
[ 1106.887569][T12774] team0: Port device team_slave_0 added
[ 1106.915394][T12774] team0: Port device team_slave_1 added
[ 1107.017325][   T31] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1107.167399][   T31] usb 7-1: Using ep0 maxpacket: 32
[ 1107.173498][   T31] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1107.174742][   T31] usb 7-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1107.174775][   T31] usb 7-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1107.179426][   T31] usb 7-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1107.179456][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1107.179478][   T31] usb 7-1: Product: syz
[ 1107.179493][   T31] usb 7-1: Manufacturer: syz
[ 1107.179507][   T31] usb 7-1: SerialNumber: syz
[ 1107.303444][T12851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1107.342256][T12851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1107.342725][T11677] bridge_slave_1: left allmulticast mode
[ 1107.342745][T11677] bridge_slave_1: left promiscuous mode
[ 1107.343001][T11677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1107.377485][ T8794] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1107.418962][T11677] bridge_slave_0: left allmulticast mode
[ 1107.418996][T11677] bridge_slave_0: left promiscuous mode
[ 1107.419273][T11677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.524148][T11677] bridge_slave_1: left allmulticast mode
[ 1107.524181][T11677] bridge_slave_1: left promiscuous mode
[ 1107.524477][T11677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1107.640053][ T8794] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1107.640087][ T8794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1107.640110][ T8794] usb 3-1: Product: syz
[ 1107.640124][ T8794] usb 3-1: Manufacturer: syz
[ 1107.640140][ T8794] usb 3-1: SerialNumber: syz
[ 1107.690665][T11677] bridge_slave_0: left allmulticast mode
[ 1107.690703][T11677] bridge_slave_0: left promiscuous mode
[ 1107.691639][T11677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.723859][ T8794] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1107.779187][    T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1109.192587][    T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1109.195888][    T9] ath9k_htc: Failed to initialize the device
[ 1109.205472][  T995] usb 3-1: USB disconnect, device number 15
[ 1109.299823][  T995] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1109.481359][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1109.631988][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1109.709989][T11677] bond0 (unregistering): Released all slaves
[ 1110.888697][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1111.168284][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1112.139506][T11677] bond0 (unregistering): Released all slaves
[ 1112.428321][T12774] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1112.428340][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1112.428369][T12774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1112.543518][T12774] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1112.543532][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1112.543553][T12774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1112.698169][    T9] usb 7-1: USB disconnect, device number 14
[ 1112.795999][T12851] team0: Port device team_slave_0 added
[ 1112.823306][T12851] team0: Port device team_slave_1 added
[ 1113.044076][T12851] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1113.044095][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1113.044130][T12851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1113.047939][T12851] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1113.047955][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1113.047981][T12851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1113.308097][T12967] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1113.813924][T11677] hsr_slave_0: left promiscuous mode
[ 1113.841284][T11677] hsr_slave_1: left promiscuous mode
[ 1113.842055][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1113.869536][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1114.037377][T11677] hsr_slave_0: left promiscuous mode
[ 1114.061580][T11677] hsr_slave_1: left promiscuous mode
[ 1114.062583][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1114.343496][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1114.712114][T12986] ALSA: mixer_oss: invalid OSS volume ''
[ 1115.139636][T11677] team0 (unregistering): Port device team_slave_1 removed
[ 1115.186256][T11677] team0 (unregistering): Port device team_slave_0 removed
[ 1116.051481][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.052071][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.688976][T11677] team0 (unregistering): Port device team_slave_1 removed
[ 1116.738607][T11677] team0 (unregistering): Port device team_slave_0 removed
[ 1117.034433][T12774] hsr_slave_0: entered promiscuous mode
[ 1117.035896][T12774] hsr_slave_1: entered promiscuous mode
[ 1117.036960][T12774] debugfs: 'hsr0' already exists in 'hsr'
[ 1117.036986][T12774] Cannot create hsr debugfs directory
[ 1117.161655][T12998] input: syz1 as /devices/virtual/input/input6
[ 1117.254136][T12851] hsr_slave_0: entered promiscuous mode
[ 1117.255218][T12851] hsr_slave_1: entered promiscuous mode
[ 1117.255962][T12851] debugfs: 'hsr0' already exists in 'hsr'
[ 1117.255982][T12851] Cannot create hsr debugfs directory
[ 1117.735542][ T8794] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1117.921252][ T8794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1117.921289][ T8794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1117.921328][ T8794] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1117.921352][ T8794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.963979][ T8794] usb 7-1: config 0 descriptor??
[ 1118.349021][T13006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1118.349644][T13006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1118.506181][T12774] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1118.867695][T12774] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1118.962932][ T9415] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1119.207403][ T9415] usb 3-1: Using ep0 maxpacket: 32
[ 1119.211675][ T9415] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1119.213808][ T9415] usb 3-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1119.213835][ T9415] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1119.218531][ T9415] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1119.218629][ T9415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.218653][ T9415] usb 3-1: Product: syz
[ 1119.218669][ T9415] usb 3-1: Manufacturer: syz
[ 1119.218685][ T9415] usb 3-1: SerialNumber: syz
[ 1119.346759][T12774] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1122.591694][T12774] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1122.649158][ T9415] usb 3-1: can't set config #102, error -71
[ 1122.653045][ T9415] usb 3-1: USB disconnect, device number 16
[ 1122.790134][ T8794] usbhid 7-1:0.0: can't add hid device: -71
[ 1122.790554][ T8794] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1122.821966][ T8794] usb 7-1: USB disconnect, device number 15
[ 1122.989547][T12851] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1124.817873][T12851] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1124.859399][T12851] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1124.987421][T12851] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1126.850659][T12774] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1126.979696][T12774] 8021q: adding VLAN 0 to HW filter on device team0
[ 1127.068261][T11677] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1127.068403][T11677] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1127.149969][T12851] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1127.159713][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.160157][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1127.283171][T12851] 8021q: adding VLAN 0 to HW filter on device team0
[ 1127.350281][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1127.350533][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1127.522719][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.531236][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1129.367623][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1129.405618][T12774] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1129.527322][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1129.552540][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1129.572742][   T10] usb 3-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1129.572771][   T10] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1129.579561][   T10] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1129.579592][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.579613][   T10] usb 3-1: Product: syz
[ 1129.579628][   T10] usb 3-1: Manufacturer: syz
[ 1129.579644][   T10] usb 3-1: SerialNumber: syz
[ 1130.383687][   T10] usb 3-1: USB disconnect, device number 17
[ 1130.476056][T12851] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1130.768035][T12774] veth0_vlan: entered promiscuous mode
[ 1130.784911][T12774] veth1_vlan: entered promiscuous mode
[ 1130.873511][T12774] veth0_macvtap: entered promiscuous mode
[ 1130.886427][T12774] veth1_macvtap: entered promiscuous mode
[ 1130.929339][T12774] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1130.953399][T13089] QAT: Invalid ioctl 1075883590
[ 1130.953520][T13089] QAT: Invalid ioctl 1075883590
[ 1130.953711][T13089] QAT: Invalid ioctl 1075883590
[ 1130.953799][T13089] QAT: Invalid ioctl 1075883590
[ 1130.956239][T13089] QAT: Invalid ioctl 1075883590
[ 1130.956340][T13089] QAT: Invalid ioctl 1075883590
[ 1130.956430][T13089] QAT: Invalid ioctl 1075883590
[ 1130.956537][T13089] QAT: Invalid ioctl 1075883590
[ 1130.956830][T13089] QAT: Invalid ioctl 1075883590
[ 1130.960271][T13089] QAT: Invalid ioctl 1075883590
[ 1131.023067][T12774] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1131.091113][ T1046] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1131.091492][ T1046] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1131.091537][ T1046] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1131.091574][ T1046] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1131.682645][T13098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1780'.
[ 1132.017408][T13100] ALSA: mixer_oss: invalid OSS volume ''
[ 1132.034610][T13100] netlink: 'syz.2.1780': attribute type 8 has an invalid length.
[ 1134.726946][T12851] veth0_vlan: entered promiscuous mode
[ 1136.228060][T12851] veth1_vlan: entered promiscuous mode
[ 1136.581755][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1136.599416][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1136.601574][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1136.626960][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1136.649152][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1136.755843][T12851] veth0_macvtap: entered promiscuous mode
[ 1136.792478][T12851] veth1_macvtap: entered promiscuous mode
[ 1136.826981][T12851] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1136.915430][T12851] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1136.949082][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.949616][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1137.002801][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1137.064972][  T142] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.707460][ T5112] Bluetooth: hci5: command tx timeout
[ 1138.939081][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1787'.
[ 1139.072369][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1139.072393][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1139.507353][ T5947] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1139.647286][ T5947] usb 3-1: device descriptor read/64, error -71
[ 1139.920294][ T5947] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1139.921686][ T3098] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1140.010296][T13151] syz_tun: entered allmulticast mode
[ 1140.047892][ T5947] usb 3-1: device descriptor read/64, error -71
[ 1140.089178][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1140.089202][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1140.159703][ T5947] usb usb3-port1: attempt power cycle
[ 1140.667240][ T5947] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1140.687997][ T5947] usb 3-1: device descriptor read/8, error -71
[ 1140.714063][ T3098] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1140.787567][ T5112] Bluetooth: hci5: command tx timeout
[ 1141.187225][ T5947] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1141.209053][ T5947] usb 3-1: device descriptor read/8, error -71
[ 1141.251891][T13115] chnl_net:caif_netlink_parms(): no params data found
[ 1141.329674][ T5947] usb usb3-port1: unable to enumerate USB device
[ 1141.626836][ T3098] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.623063][ T3098] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.869038][ T5112] Bluetooth: hci5: command tx timeout
[ 1142.882159][T13115] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1142.892410][T13115] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.892675][T13115] bridge_slave_0: entered allmulticast mode
[ 1142.895449][T13115] bridge_slave_0: entered promiscuous mode
[ 1142.907308][   T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1142.939153][T13115] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1142.939355][T13115] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1142.939621][T13115] bridge_slave_1: entered allmulticast mode
[ 1142.942597][T13115] bridge_slave_1: entered promiscuous mode
[ 1143.053961][T13115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1143.073589][   T43] usb 3-1: Using ep0 maxpacket: 32
[ 1143.121842][   T43] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1143.135925][T13115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1143.147008][   T43] usb 3-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1143.147040][   T43] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1143.174786][   T43] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1143.174817][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1143.174841][   T43] usb 3-1: Product: syz
[ 1143.174851][   T43] usb 3-1: Manufacturer: syz
[ 1143.174862][   T43] usb 3-1: SerialNumber: syz
[ 1143.264009][T13198] ALSA: mixer_oss: invalid OSS volume ''
[ 1143.350427][T13115] team0: Port device team_slave_0 added
[ 1143.373897][T13115] team0: Port device team_slave_1 added
[ 1143.884723][T13115] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1143.884744][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1143.885150][T13115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1144.021617][   T43] usb 3-1: USB disconnect, device number 22
[ 1144.139030][T13115] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1144.139045][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1144.139066][T13115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1144.634452][ T3098] bridge_slave_1: left allmulticast mode
[ 1144.634485][ T3098] bridge_slave_1: left promiscuous mode
[ 1144.634735][ T3098] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.742586][ T3098] bridge_slave_0: left allmulticast mode
[ 1144.742618][ T3098] bridge_slave_0: left promiscuous mode
[ 1144.742854][ T3098] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1144.947340][ T5112] Bluetooth: hci5: command tx timeout
[ 1147.643826][T13232] loop6: detected capacity change from 0 to 7
[ 1148.493900][    C1] blk_print_req_error: 10 callbacks suppressed
[ 1148.493954][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.494043][    C1] buffer_io_error: 10 callbacks suppressed
[ 1148.494086][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.494603][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.494698][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.496358][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.496394][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.496911][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.496945][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.586401][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.586432][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.638867][ T3098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1148.640475][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.640503][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.640757][T13232] ldm_validate_partition_table(): Disk read failed.
[ 1148.640812][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.640832][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.641145][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.641179][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.641327][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.641346][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.641475][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1148.641495][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1148.641586][T13232] Dev loop6: unable to read RDB block 0
[ 1148.642898][T13232]  loop6: unable to read partition table
[ 1148.643042][T13232] loop6: partition table beyond EOD, truncated
[ 1148.643070][T13232] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[ 1148.948197][ T3098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1149.001133][ T3098] bond0 (unregistering): Released all slaves
[ 1149.089331][T13115] hsr_slave_0: entered promiscuous mode
[ 1149.118227][T13115] hsr_slave_1: entered promiscuous mode
[ 1149.119123][T13115] debugfs: 'hsr0' already exists in 'hsr'
[ 1149.119142][T13115] Cannot create hsr debugfs directory
[ 1149.515174][T13211] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1150.355880][T13258] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1151.569741][T11512] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1151.901985][T11512] usb 9-1: Using ep0 maxpacket: 32
[ 1151.950166][T11512] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1151.955530][T11512] usb 9-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1151.955551][T11512] usb 9-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1151.959050][T11512] usb 9-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1151.959072][T11512] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1151.959086][T11512] usb 9-1: Product: syz
[ 1151.959097][T11512] usb 9-1: Manufacturer: syz
[ 1151.959108][T11512] usb 9-1: SerialNumber: syz
[ 1153.017915][T11512] usb 9-1: USB disconnect, device number 2
[ 1153.341648][ T3098] hsr_slave_0: left promiscuous mode
[ 1153.397439][ T3098] hsr_slave_1: left promiscuous mode
[ 1153.403857][ T3098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1153.403880][ T3098] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1153.490886][ T3098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1153.490908][ T3098] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1153.645422][ T3098] veth1_macvtap: left promiscuous mode
[ 1153.645494][ T3098] veth0_macvtap: left promiscuous mode
[ 1153.645654][ T3098] veth1_vlan: left promiscuous mode
[ 1153.645766][ T3098] veth0_vlan: left promiscuous mode
[ 1155.199161][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1812'.
[ 1155.518225][ T3098] team0 (unregistering): Port device team_slave_1 removed
[ 1155.593155][ T3098] team0 (unregistering): Port device team_slave_0 removed
[ 1157.270504][T13299] ALSA: mixer_oss: invalid OSS volume ''
[ 1159.887327][ T9415] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1160.037247][ T9415] usb 3-1: Using ep0 maxpacket: 32
[ 1160.037270][   T43] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1160.040998][ T9415] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1160.042491][ T9415] usb 3-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1160.042517][ T9415] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1160.062759][ T9415] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1160.062848][ T9415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.062915][ T9415] usb 3-1: Product: syz
[ 1160.062958][ T9415] usb 3-1: Manufacturer: syz
[ 1160.063001][ T9415] usb 3-1: SerialNumber: syz
[ 1160.205025][   T43] usb 9-1: device descriptor read/64, error -71
[ 1160.246825][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1822'.
[ 1160.437279][   T43] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1160.853486][   T43] usb 9-1: device descriptor read/64, error -71
[ 1161.085968][   T43] usb usb9-port1: attempt power cycle
[ 1161.613927][ T9415] usb 3-1: USB disconnect, device number 23
[ 1162.122624][   T43] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1162.229487][   T43] usb 9-1: device descriptor read/8, error -71
[ 1162.519873][T13115] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1162.544836][T13115] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1162.601536][   T43] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1162.621748][   T43] usb 9-1: device descriptor read/8, error -71
[ 1162.625940][T13115] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1162.702582][T13115] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1162.734262][   T43] usb usb9-port1: unable to enumerate USB device
[ 1163.254546][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1832'.
[ 1163.406977][T13115] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1163.560314][T13115] 8021q: adding VLAN 0 to HW filter on device team0
[ 1163.578825][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1163.578974][ T3098] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1163.649840][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1163.649972][ T3098] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1164.638695][ T9415] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1164.827234][ T9415] usb 7-1: Using ep0 maxpacket: 32
[ 1164.837642][ T9415] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1164.839281][ T9415] usb 7-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1164.839307][ T9415] usb 7-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1164.863997][ T9415] usb 7-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1164.864029][ T9415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1164.864051][ T9415] usb 7-1: Product: syz
[ 1164.864067][ T9415] usb 7-1: Manufacturer: syz
[ 1164.864080][ T9415] usb 7-1: SerialNumber: syz
[ 1165.220569][ T9415] usb 7-1: USB disconnect, device number 16
[ 1165.257824][T13248] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1165.397218][T13248] usb 3-1: device descriptor read/64, error -71
[ 1165.545907][T13115] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1165.647343][T13248] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1165.780501][T13248] usb 3-1: device descriptor read/64, error -71
[ 1165.887794][T13248] usb usb3-port1: attempt power cycle
[ 1166.004701][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1842'.
[ 1166.318891][T13248] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1166.384616][T13248] usb 3-1: device descriptor read/8, error -71
[ 1166.667396][T13248] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1166.777319][T13248] usb 3-1: device descriptor read/8, error -71
[ 1166.935077][T13248] usb usb3-port1: unable to enumerate USB device
[ 1167.475283][T13115] veth0_vlan: entered promiscuous mode
[ 1167.505788][T13115] veth1_vlan: entered promiscuous mode
[ 1167.632855][T13115] veth0_macvtap: entered promiscuous mode
[ 1167.636684][T13115] veth1_macvtap: entered promiscuous mode
[ 1167.693241][T13115] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1167.723549][T13115] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1168.192679][ T3098] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1168.195882][T11678] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1168.218560][ T1046] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1168.219986][ T1046] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.088920][T13445] program syz.0.1853 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1171.257996][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1854'.
[ 1171.274240][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1171.274297][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1171.477950][ T5963] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1171.700281][ T5963] usb 7-1: Using ep0 maxpacket: 32
[ 1171.718683][ T5963] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1171.739909][ T5963] usb 7-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1171.739984][ T5963] usb 7-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1171.901499][ T5963] usb 7-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1171.901550][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1171.901606][ T5963] usb 7-1: Product: syz
[ 1171.901623][ T5963] usb 7-1: Manufacturer: syz
[ 1171.901677][ T5963] usb 7-1: SerialNumber: syz
[ 1174.097420][T13459] syz_tun: entered allmulticast mode
[ 1174.138886][ T6683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1174.138909][ T6683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1174.172773][ T5963] usb 7-1: USB disconnect, device number 17
[ 1177.630050][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.630102][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.108360][T13491] ALSA: mixer_oss: invalid OSS volume ''
[ 1179.048134][T13495] program syz.2.1867 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1179.131104][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1866'.
[ 1181.903907][T13486] syz.7.1863 (13486): drop_caches: 2
[ 1182.267399][ T5962] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1182.417240][ T5962] usb 9-1: Using ep0 maxpacket: 32
[ 1182.424437][ T5962] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1182.441088][ T5962] usb 9-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1182.441118][ T5962] usb 9-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1182.446064][ T5962] usb 9-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1182.446095][ T5962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.446204][ T5962] usb 9-1: Product: syz
[ 1182.446221][ T5962] usb 9-1: Manufacturer: syz
[ 1182.446236][ T5962] usb 9-1: SerialNumber: syz
[ 1182.783824][ T5962] usb 9-1: USB disconnect, device number 7
[ 1183.769050][T13526] ALSA: mixer_oss: invalid OSS volume ''
[ 1185.581691][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1879'.
[ 1187.200328][T13538] netlink: 'syz.7.1880': attribute type 6 has an invalid length.
[ 1187.201260][T13538] netlink: 'syz.7.1880': attribute type 6 has an invalid length.
[ 1187.487350][ T5963] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1187.842217][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1882'.
[ 1188.792518][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1188.792552][ T5963] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1188.796799][ T5963] usb 8-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19
[ 1188.796822][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1188.796837][ T5963] usb 8-1: Product: syz
[ 1188.796847][ T5963] usb 8-1: Manufacturer: syz
[ 1188.796858][ T5963] usb 8-1: SerialNumber: syz
[ 1188.898177][ T5963] usb 8-1: config 0 descriptor??
[ 1188.940285][ T5963] usb 8-1: USB disconnect, device number 2
[ 1189.570075][T13560] netlink: 'syz.0.1886': attribute type 1 has an invalid length.
[ 1190.124947][T13572] fuse: Bad value for 'group_id'
[ 1190.124969][T13572] fuse: Bad value for 'group_id'
[ 1190.187298][ T5963] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1190.247782][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1892'.
[ 1191.417221][ T5963] usb 9-1: Using ep0 maxpacket: 32
[ 1191.421149][ T5963] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1191.422995][ T5963] usb 9-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[ 1191.423022][ T5963] usb 9-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[ 1191.426237][ T5963] usb 9-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[ 1191.426267][ T5963] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.426289][ T5963] usb 9-1: Product: syz
[ 1191.426305][ T5963] usb 9-1: Manufacturer: syz
[ 1191.426321][ T5963] usb 9-1: SerialNumber: syz
[ 1192.384959][ T5112] Bluetooth: hci0: unexpected event for opcode 0x203d
[ 1192.500228][ T5963] usb 9-1: USB disconnect, device number 8
[ 1192.712935][T13594] lo: Caught tx_queue_len zero misconfig
[ 1193.721532][ T5112] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 1193.721584][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1193.721610][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1193.721625][ T5112] Workqueue: hci3 hci_rx_work
[ 1193.721820][ T5112] Call Trace:
[ 1193.721833][ T5112]  <TASK>
[ 1193.721844][ T5112]  dump_stack_lvl+0xe8/0x150
[ 1193.721924][ T5112]  sysfs_create_dir_ns+0x271/0x2a0
[ 1193.722010][ T5112]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1193.722101][ T5112]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1193.722130][ T5112]  ? rt_spin_unlock+0x160/0x200
[ 1193.722158][ T5112]  kobject_add_internal+0x631/0xd10
[ 1193.722256][ T5112]  kobject_add+0x163/0x240
[ 1193.722297][ T5112]  ? __pfx_kobject_add+0x10/0x10
[ 1193.722339][ T5112]  ? get_device_parent+0x370/0x3a0
[ 1193.722456][ T5112]  device_add+0x408/0xb80
[ 1193.722501][ T5112]  hci_conn_add_sysfs+0xd5/0x210
[ 1193.722574][ T5112]  le_conn_complete_evt+0xf1d/0x1430
[ 1193.722661][ T5112]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1193.722699][ T5112]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1193.722730][ T5112]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1193.722787][ T5112]  ? skb_pull_data+0xfb/0x200
[ 1193.722899][ T5112]  hci_le_conn_complete_evt+0x187/0x470
[ 1193.722943][ T5112]  hci_event_packet+0x7af/0x12c0
[ 1193.723004][ T5112]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1193.723038][ T5112]  ? __pfx_hci_event_packet+0x10/0x10
[ 1193.723066][ T5112]  ? rt_spin_unlock+0x14f/0x200
[ 1193.723101][ T5112]  ? hci_send_to_monitor+0xe2/0x590
[ 1193.723127][ T5112]  hci_rx_work+0x3ee/0x1030
[ 1193.723165][ T5112]  ? process_scheduled_works+0xa25/0x1830
[ 1193.723222][ T5112]  process_scheduled_works+0xb02/0x1830
[ 1193.723286][ T5112]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1193.723326][ T5112]  ? assign_work+0x3d5/0x5e0
[ 1193.723365][ T5112]  worker_thread+0xa50/0xfc0
[ 1193.723428][ T5112]  kthread+0x388/0x470
[ 1193.723453][ T5112]  ? __pfx_worker_thread+0x10/0x10
[ 1193.723484][ T5112]  ? __pfx_kthread+0x10/0x10
[ 1193.723516][ T5112]  ret_from_fork+0x51e/0xb90
[ 1193.723570][ T5112]  ? __pfx_ret_from_fork+0x10/0x10
[ 1193.723601][ T5112]  ? __switch_to+0xc7d/0x1450
[ 1193.723646][ T5112]  ? __pfx_kthread+0x10/0x10
[ 1193.723672][ T5112]  ret_from_fork_asm+0x1a/0x30
[ 1193.723713][ T5112]  </TASK>
[ 1193.723747][ T5112] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1193.723790][ T5112] Bluetooth: hci3: failed to register connection device
[ 1196.403349][ T5800] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1196.404198][ T5800] Bluetooth: hci0: Injecting HCI hardware error event
[ 1196.407504][ T5112] Bluetooth: hci0: hardware error 0x00
[ 1196.551521][T13612] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1197.452186][T13616] openvswitch: netlink: IP tunnel TTL not specified.
[ 1197.824772][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'.
[ 1199.427407][ T5112] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1200.802011][ T5112] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[ 1201.728084][T13644] netlink: 'syz.7.1915': attribute type 6 has an invalid length.
[ 1201.728551][T13644] netlink: 'syz.7.1915': attribute type 6 has an invalid length.
[ 1202.057223][T11512] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1202.207284][T11512] usb 3-1: Using ep0 maxpacket: 16
[ 1202.652141][T11512] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1202.652229][T11512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.652278][T11512] usb 3-1: Product: syz
[ 1202.652331][T11512] usb 3-1: Manufacturer: syz
[ 1202.652373][T11512] usb 3-1: SerialNumber: syz
[ 1203.150024][T11512] usb 3-1: config 0 descriptor??
[ 1203.237356][T11512] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1203.643565][T11512] gspca_spca508: reg_read err -71
[ 1203.643934][T11512] gspca_spca508: reg_read err -71
[ 1203.644239][T11512] gspca_spca508: reg_read err -71
[ 1203.644534][T11512] gspca_spca508: reg_read err -71
[ 1203.644887][T11512] gspca_spca508: reg write: error -71
[ 1203.644948][T11512] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[ 1203.721125][T11512] usb 3-1: USB disconnect, device number 28
[ 1204.184452][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1924'.
[ 1211.787306][ T5962] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1211.940299][ T5962] usb 9-1: Using ep0 maxpacket: 16
[ 1211.956109][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1938'.
[ 1213.058458][ T5962] usb 9-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1213.058526][ T5962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1213.058582][ T5962] usb 9-1: Product: syz
[ 1213.058637][ T5962] usb 9-1: Manufacturer: syz
[ 1213.058654][ T5962] usb 9-1: SerialNumber: syz
[ 1213.275994][ T5962] usb 9-1: config 0 descriptor??
[ 1213.877957][ T5962] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1215.002204][ T5962] gspca_spca508: reg_read err -71
[ 1215.002517][ T5962] gspca_spca508: reg_read err -71
[ 1215.002833][ T5962] gspca_spca508: reg_read err -71
[ 1215.003126][ T5962] gspca_spca508: reg_read err -71
[ 1215.003494][ T5962] gspca_spca508: reg write: error -71
[ 1215.003560][ T5962] spca508 9-1:0.0: probe with driver spca508 failed with error -71
[ 1215.080101][ T5962] usb 9-1: USB disconnect, device number 9
[ 1215.096659][T13118] udevd[13118]: setting mode of /dev/bus/usb/009/009 to 020664 failed: No such file or directory
[ 1215.096848][T13118] udevd[13118]: setting owner of /dev/bus/usb/009/009 to uid=0, gid=0 failed: No such file or directory
[ 1215.454064][ T5800] Bluetooth: hci2: command 0x0406 tx timeout
[ 1218.692928][T13738] overlayfs: failed to resolve './file2': -2
[ 1220.818551][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'.
[ 1225.352218][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1955'.
[ 1227.177225][ T9415] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1227.367293][ T9415] usb 7-1: Using ep0 maxpacket: 16
[ 1227.371775][ T9415] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1227.371808][ T9415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.371830][ T9415] usb 7-1: Product: syz
[ 1227.371845][ T9415] usb 7-1: Manufacturer: syz
[ 1227.371861][ T9415] usb 7-1: SerialNumber: syz
[ 1227.433962][ T9415] usb 7-1: config 0 descriptor??
[ 1227.696538][ T9415] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1228.375371][ T9415] gspca_spca508: reg_read err -110
[ 1228.387234][ T9415] gspca_spca508: reg_read err -32
[ 1228.389028][ T9415] gspca_spca508: reg_read err -32
[ 1228.392731][ T9415] gspca_spca508: reg_read err -32
[ 1228.393168][ T9415] gspca_spca508: reg write: error -32
[ 1228.393259][ T9415] spca508 7-1:0.0: probe with driver spca508 failed with error -32
[ 1228.674987][T11512] usb 7-1: USB disconnect, device number 18
[ 1234.253132][T13827] input: syz1 as /devices/virtual/input/input9
[ 1234.667331][   T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1234.742131][T13838] program syz.7.1975 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1235.017199][   T43] usb 7-1: Using ep0 maxpacket: 16
[ 1237.233485][   T43] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1237.233534][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.233556][   T43] usb 7-1: Product: syz
[ 1237.233571][   T43] usb 7-1: Manufacturer: syz
[ 1237.233588][   T43] usb 7-1: SerialNumber: syz
[ 1237.308406][   T43] usb 7-1: config 0 descriptor??
[ 1237.354247][   T43] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1237.956577][   T43] gspca_spca508: reg_read err -110
[ 1237.960634][   T43] gspca_spca508: reg_read err -32
[ 1238.000072][   T43] gspca_spca508: reg_read err -32
[ 1238.040244][   T43] gspca_spca508: reg_read err -32
[ 1238.059057][   T43] gspca_spca508: reg_read err -32
[ 1238.078662][   T43] gspca_spca508: reg write: error -32
[ 1238.078921][   T43] spca508 7-1:0.0: probe with driver spca508 failed with error -32
[ 1238.564555][   T43] usb 7-1: USB disconnect, device number 19
[ 1238.873908][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.873979][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.245626][T13871] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1246.287308][ T9415] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1246.607222][ T9415] usb 7-1: Using ep0 maxpacket: 16
[ 1246.612325][ T9415] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1246.612357][ T9415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1246.612372][ T9415] usb 7-1: Product: syz
[ 1246.612382][ T9415] usb 7-1: Manufacturer: syz
[ 1246.612392][ T9415] usb 7-1: SerialNumber: syz
[ 1246.631576][ T9415] usb 7-1: config 0 descriptor??
[ 1247.553137][ T9415] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1248.006337][ T9415] gspca_spca508: reg_read err -71
[ 1248.006738][ T9415] gspca_spca508: reg_read err -71
[ 1248.007190][ T9415] gspca_spca508: reg_read err -71
[ 1248.008179][ T9415] gspca_spca508: reg_read err -71
[ 1248.008990][ T9415] gspca_spca508: reg write: error -71
[ 1248.009217][ T9415] spca508 7-1:0.0: probe with driver spca508 failed with error -71
[ 1248.047302][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1248.079533][ T9415] usb 7-1: USB disconnect, device number 20
[ 1248.544682][ T5112] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[ 1249.177193][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 1249.179972][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1249.180026][    T9] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1249.180055][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1249.231499][    T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1249.231522][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1249.231537][    T9] usb 3-1: Product: syz
[ 1249.231548][    T9] usb 3-1: Manufacturer: syz
[ 1249.231580][    T9] usb 3-1: SerialNumber: syz
[ 1249.302879][    T9] usb 3-1: config 0 descriptor??
[ 1249.660830][    T9] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1249.660936][    T9] imon 3-1:0.0: unable to initialize intf0, err -19
[ 1249.660955][    T9] imon:imon_probe: failed to initialize context!
[ 1249.660968][    T9] imon 3-1:0.0: unable to register, err -19
[ 1250.627952][    T9] usb 3-1: USB disconnect, device number 29
[ 1252.180751][T13943] adf_ctl_ioctl: 4 callbacks suppressed
[ 1252.180772][T13943] QAT: Invalid ioctl 1075883590
[ 1252.180870][T13943] QAT: Invalid ioctl 1075883590
[ 1252.181082][T13943] QAT: Invalid ioctl 1075883590
[ 1252.181174][T13943] QAT: Invalid ioctl 1075883590
[ 1252.181272][T13943] QAT: Invalid ioctl 1075883590
[ 1252.181363][T13943] QAT: Invalid ioctl 1075883590
[ 1252.181468][T13943] QAT: Invalid ioctl 1075883590
[ 1252.181560][T13943] QAT: Invalid ioctl 1075883590
[ 1252.186567][T13943] QAT: Invalid ioctl 1075883590
[ 1252.186664][T13943] QAT: Invalid ioctl 1075883590
[ 1252.530934][T13946] overlay: filesystem on ./file0 not supported as upperdir
[ 1255.041945][T13957] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1255.327386][ T9415] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1255.387229][    T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1255.477259][ T9415] usb 7-1: Using ep0 maxpacket: 16
[ 1255.482744][ T9415] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1255.482776][ T9415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.482797][ T9415] usb 7-1: Product: syz
[ 1255.482813][ T9415] usb 7-1: Manufacturer: syz
[ 1255.482828][ T9415] usb 7-1: SerialNumber: syz
[ 1255.487218][T13248] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1255.498814][ T9415] usb 7-1: config 0 descriptor??
[ 1255.512875][ T9415] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1255.551021][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1255.554876][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1255.561252][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1255.561342][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.561367][    T9] usb 1-1: Product: syz
[ 1255.561383][    T9] usb 1-1: Manufacturer: syz
[ 1255.561398][    T9] usb 1-1: SerialNumber: syz
[ 1255.668725][T13248] usb 8-1: Using ep0 maxpacket: 16
[ 1255.757271][T13248] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1255.757327][T13248] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1255.757355][T13248] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1256.428041][ T9415] gspca_spca508: reg_read err -110
[ 1256.428542][ T9415] gspca_spca508: reg_read err -32
[ 1256.431580][ T9415] gspca_spca508: reg_read err -32
[ 1256.432073][ T9415] gspca_spca508: reg_read err -32
[ 1256.434575][ T9415] gspca_spca508: reg write: error -32
[ 1256.434728][ T9415] spca508 7-1:0.0: probe with driver spca508 failed with error -32
[ 1256.742463][T13248] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1256.742498][T13248] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1256.742518][T13248] usb 8-1: Product: syz
[ 1256.742532][T13248] usb 8-1: Manufacturer: syz
[ 1256.742547][T13248] usb 8-1: SerialNumber: syz
[ 1256.762421][T13248] usb 8-1: config 0 descriptor??
[ 1257.012606][T13248] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1257.012673][T13248] imon 8-1:0.0: unable to initialize intf0, err -19
[ 1257.012686][T13248] imon:imon_probe: failed to initialize context!
[ 1257.012695][T13248] imon 8-1:0.0: unable to register, err -19
[ 1257.033623][T13248] usb 8-1: USB disconnect, device number 3
[ 1257.398411][T13248] usb 7-1: USB disconnect, device number 21
[ 1258.384598][ T5962] usb 1-1: USB disconnect, device number 29
[ 1259.969928][T13999] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1262.000022][ T5112] Bluetooth: hci5: command 0x0406 tx timeout
[ 1266.784262][T14031] netlink: 'syz.8.2031': attribute type 13 has an invalid length.
[ 1267.043567][T14041] netlink: 'syz.8.2031': attribute type 1 has an invalid length.
[ 1267.043634][T14041] netlink: 280 bytes leftover after parsing attributes in process `syz.8.2031'.
[ 1267.127181][T13248] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1267.277377][T13248] usb 7-1: Using ep0 maxpacket: 16
[ 1267.302864][T13248] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1267.302899][T13248] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.302920][T13248] usb 7-1: Product: syz
[ 1267.302936][T13248] usb 7-1: Manufacturer: syz
[ 1267.302951][T13248] usb 7-1: SerialNumber: syz
[ 1267.371716][T13248] usb 7-1: config 0 descriptor??
[ 1267.390139][T13248] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1268.516182][ T5800] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[ 1268.772365][T13248] gspca_spca508: reg_read err -110
[ 1268.772776][T13248] gspca_spca508: reg_read err -71
[ 1268.773165][T13248] gspca_spca508: reg_read err -71
[ 1268.773554][T13248] gspca_spca508: reg_read err -71
[ 1268.773942][T13248] gspca_spca508: reg write: error -71
[ 1268.774025][T13248] spca508 7-1:0.0: probe with driver spca508 failed with error -71
[ 1268.811564][T13248] usb 7-1: USB disconnect, device number 22
[ 1272.007681][T14048] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1273.171626][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2041'.
[ 1277.933489][T14097] wg0: Caught tx_queue_len zero misconfig
[ 1278.552699][T12295] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[ 1278.552725][T12295] CPU: 1 UID: 0 PID: 12295 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1278.552757][T12295] Tainted: [L]=SOFTLOCKUP
[ 1278.552763][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1278.552774][T12295] Workqueue: hci2 hci_rx_work
[ 1278.552802][T12295] Call Trace:
[ 1278.552809][T12295]  <TASK>
[ 1278.552816][T12295]  dump_stack_lvl+0xe8/0x150
[ 1278.552847][T12295]  sysfs_create_dir_ns+0x271/0x2a0
[ 1278.552867][T12295]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1278.552886][T12295]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1278.552906][T12295]  ? rt_spin_unlock+0x160/0x200
[ 1278.552951][T12295]  kobject_add_internal+0x631/0xd10
[ 1278.552997][T12295]  kobject_add+0x163/0x240
[ 1278.553041][T12295]  ? __pfx_kobject_add+0x10/0x10
[ 1278.553082][T12295]  ? get_device_parent+0x370/0x3a0
[ 1278.553112][T12295]  device_add+0x408/0xb80
[ 1278.553139][T12295]  hci_conn_add_sysfs+0xd5/0x210
[ 1278.553162][T12295]  le_conn_complete_evt+0xf1d/0x1430
[ 1278.553197][T12295]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1278.553224][T12295]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1278.553247][T12295]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1278.553271][T12295]  ? skb_pull_data+0xfb/0x200
[ 1278.553300][T12295]  hci_le_conn_complete_evt+0x187/0x470
[ 1278.553331][T12295]  hci_event_packet+0x7af/0x12c0
[ 1278.553356][T12295]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1278.553381][T12295]  ? __pfx_hci_event_packet+0x10/0x10
[ 1278.553401][T12295]  ? preempt_schedule_common+0x82/0xd0
[ 1278.553493][T12295]  ? preempt_schedule_thunk+0x16/0x30
[ 1278.553517][T12295]  ? hci_send_to_monitor+0xe2/0x590
[ 1278.553536][T12295]  hci_rx_work+0x3ee/0x1030
[ 1278.553558][T12295]  ? preempt_schedule_thunk+0x16/0x30
[ 1278.553579][T12295]  ? process_scheduled_works+0xa25/0x1830
[ 1278.553606][T12295]  process_scheduled_works+0xb02/0x1830
[ 1278.553650][T12295]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1278.553678][T12295]  ? assign_work+0x3d5/0x5e0
[ 1278.553704][T12295]  worker_thread+0xa50/0xfc0
[ 1278.553754][T12295]  kthread+0x388/0x470
[ 1278.553771][T12295]  ? __pfx_worker_thread+0x10/0x10
[ 1278.553793][T12295]  ? __pfx_kthread+0x10/0x10
[ 1278.553811][T12295]  ret_from_fork+0x51e/0xb90
[ 1278.553839][T12295]  ? __pfx_ret_from_fork+0x10/0x10
[ 1278.553862][T12295]  ? __switch_to+0xc7d/0x1450
[ 1278.553886][T12295]  ? __pfx_kthread+0x10/0x10
[ 1278.553903][T12295]  ret_from_fork_asm+0x1a/0x30
[ 1278.553931][T12295]  </TASK>
[ 1278.572113][T12295] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1278.572281][T12295] Bluetooth: hci2: failed to register connection device
[ 1282.420710][   T36] audit: type=1326 audit(1772277956.860:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14115 comm="syz.7.2054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f728e56c799 code=0x0
[ 1282.481701][   T36] audit: type=1326 audit(1772277956.920:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14115 comm="syz.7.2054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f728e56c799 code=0x0
[ 1284.087681][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2056'.
[ 1286.995991][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 1286.996056][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1286.996090][ T5800] Tainted: [L]=SOFTLOCKUP
[ 1286.996100][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1286.996117][ T5800] Workqueue: hci5 hci_rx_work
[ 1286.996153][ T5800] Call Trace:
[ 1286.996168][ T5800]  <TASK>
[ 1286.996181][ T5800]  dump_stack_lvl+0xe8/0x150
[ 1286.996220][ T5800]  sysfs_create_dir_ns+0x271/0x2a0
[ 1286.996254][ T5800]  ? __pfx_rt_[ 1286.996254][ T5800]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1286.996283][ T5800]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1286.996312][ T5800]  ? rt_spin_unlock+0x160/0x200
[ 1286.996341][ T5800]  kobject_add_internal+0x631/0xd10
[ 1286.996389][ T5800]  kobject_add+0x163/0x240
[ 1286.996431][ T5800]  ? __pfx_kobject_add+0x10/0x10
[ 1286.996474][ T5800]  ? get_device_parent+0x370/0x3a0
[ 1286.996514][ T5800]  device_add+0x408/0xb80
[ 1286.996553][ T5800]  hci_conn_add_sysfs+0xd5/0x210
[ 1286.996585][ T5800]  le_conn_complete_evt+0xf1d/0x1430
[ 1286.996634][ T5800]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1286.996670][ T5800]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1286.996702][ T5800]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1286.996736][ T5800]  ? skb_pull_data+0xfb/0x200
[ 1286.996777][ T5800]  hci_le_conn_complete_evt+0x187/0x470
[ 1286.996821][ T5800]  hci_event_packet+0x7af/0x12c0
[ 1286.996859][ T5800]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1286.996893][ T5800]  ? __pfx_hci_event_packet+0x10/0x10
[ 1286.996922][ T5800]  ? preempt_schedule_common+0x82/0xd0
[ 1286.996952][ T5800]  ? preempt_schedule_thunk+0x16/0x30
[ 1286.996985][ T5800]  ? hci_send_to_monitor+0xe2/0x590
[ 1286.997012][ T5800]  hci_rx_work+0x3ee/0x1030
[ 1286.997043][ T5800]  ? preempt_schedule_thunk+0x16/0x30
[ 1286.997073][ T5800]  ? process_scheduled_works+0xa25/0x1830
[ 1286.997108][ T5800]  process_scheduled_works+0xb02/0x1830
[ 1286.997174][ T5800]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1286.997216][ T5800]  ? assign_work+0x3d5/0x5e0
[ 1286.997261][ T5800]  worker_thread+0xa50/0xfc0
[ 1286.997328][ T5800]  kthread+0x388/0x470
[ 1286.997353][ T5800]  ? __pfx_worker_thread+0x10/0x10
[ 1286.997383][ T5800]  ? __pfx_kthread+0x10/0x10
[ 1286.997409][ T5800]  ret_from_fork+0x51e/0xb90
[ 1286.997447][ T5800]  ? __pfx_ret_from_fork+0x10/0x10
[ 1286.997477][ T5800]  ? __switch_to+0xc7d/0x1450
[ 1286.997511][ T5800]  ? __pfx_kthread+0x10/0x10
[ 1286.997536][ T5800]  ret_from_fork_asm+0x1a/0x30
[ 1286.997579][ T5800]  </TASK>
[ 1287.048477][ T5800] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1287.048812][ T5800] Bluetooth: hci5: failed to register connection device
[ 1287.468319][ T5800] ==================================================================
[ 1287.468340][ T5800] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x86a/0x1390
[ 1287.468376][ T5800] Read of size 8 at addr ffff88804bac2500 by task kworker/u9:3/5800
[ 1287.468396][ T5800] 
[ 1287.468412][ T5800] CPU: 0 UID: 0 PID: 5800 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1287.468443][ T5800] Tainted: [L]=SOFTLOCKUP
[ 1287.468451][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1287.468468][ T5800] Workqueue: hci5 hci_rx_work
[ 1287.468500][ T5800] Call Trace:
[ 1287.468509][ T5800]  <TASK>
[ 1287.468519][ T5800]  dump_stack_lvl+0xe8/0x150
[ 1287.468556][ T5800]  print_report+0xba/0x230
[ 1287.468618][ T5800]  ? l2cap_connect_cfm+0x86a/0x1390
[ 1287.468640][ T5800]  kasan_report+0x117/0x150
[ 1287.468768][ T5800]  ? l2cap_connect_cfm+0x86a/0x1390
[ 1287.468796][ T5800]  l2cap_connect_cfm+0x86a/0x1390
[ 1287.468823][ T5800]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1287.468846][ T5800]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1287.468868][ T5800]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1287.468888][ T5800]  ? hci_connect_cfm+0x86/0x140
[ 1287.468922][ T5800]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1287.468959][ T5800]  hci_connect_cfm+0x95/0x140
[ 1287.468993][ T5800]  le_conn_complete_evt+0xf65/0x1430
[ 1287.469035][ T5800]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1287.469070][ T5800]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1287.469102][ T5800]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1287.469141][ T5800]  ? skb_pull_data+0xfb/0x200
[ 1287.469178][ T5800]  hci_le_conn_complete_evt+0x187/0x470
[ 1287.469217][ T5800]  hci_event_packet+0x7af/0x12c0
[ 1287.469247][ T5800]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1287.469280][ T5800]  ? __pfx_hci_event_packet+0x10/0x10
[ 1287.469308][ T5800]  ? preempt_schedule_common+0x82/0xd0
[ 1287.469337][ T5800]  ? preempt_schedule_thunk+0x16/0x30
[ 1287.469367][ T5800]  ? hci_send_to_monitor+0xe2/0x590
[ 1287.469390][ T5800]  hci_rx_work+0x3ee/0x1030
[ 1287.469418][ T5800]  ? preempt_schedule_thunk+0x16/0x30
[ 1287.469447][ T5800]  ? process_scheduled_works+0xa25/0x1830
[ 1287.469480][ T5800]  process_scheduled_works+0xb02/0x1830
[ 1287.469527][ T5800]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1287.469571][ T5800]  ? assign_work+0x3d5/0x5e0
[ 1287.469604][ T5800]  worker_thread+0xa50/0xfc0
[ 1287.469651][ T5800]  kthread+0x388/0x470
[ 1287.469675][ T5800]  ? __pfx_worker_thread+0x10/0x10
[ 1287.469706][ T5800]  ? __pfx_kthread+0x10/0x10
[ 1287.469729][ T5800]  ret_from_fork+0x51e/0xb90
[ 1287.469763][ T5800]  ? __pfx_ret_from_fork+0x10/0x10
[ 1287.469795][ T5800]  ? __switch_to+0xc7d/0x1450
[ 1287.469823][ T5800]  ? __pfx_kthread+0x10/0x10
[ 1287.469846][ T5800]  ret_from_fork_asm+0x1a/0x30
[ 1287.469877][ T5800]  </TASK>
[ 1287.469886][ T5800] 
[ 1287.469891][ T5800] Allocated by task 5800:
[ 1287.469903][ T5800]  kasan_save_track+0x3e/0x80
[ 1287.469931][ T5800]  __kasan_kmalloc+0x93/0xb0
[ 1287.469960][ T5800]  __kmalloc_cache_noprof+0x3a6/0x690
[ 1287.470026][ T5800]  l2cap_chan_create+0x51/0x7a0
[ 1287.470050][ T5800]  l2cap_sock_new_connection_cb+0x182/0x2e0
[ 1287.470105][ T5800]  l2cap_connect_cfm+0x368/0x1390
[ 1287.470131][ T5800]  hci_connect_cfm+0x95/0x140
[ 1287.470159][ T5800]  le_conn_complete_evt+0xf65/0x1430
[ 1287.470190][ T5800]  hci_le_conn_complete_evt+0x187/0x470
[ 1287.470220][ T5800]  hci_event_packet+0x7af/0x12c0
[ 1287.470244][ T5800]  hci_rx_work+0x3ee/0x1030
[ 1287.470268][ T5800]  process_scheduled_works+0xb02/0x1830
[ 1287.470295][ T5800]  worker_thread+0xa50/0xfc0
[ 1287.470324][ T5800]  kthread+0x388/0x470
[ 1287.470343][ T5800]  ret_from_fork+0x51e/0xb90
[ 1287.470370][ T5800]  ret_from_fork_asm+0x1a/0x30
[ 1287.470388][ T5800] 
[ 1287.470393][ T5800] Freed by task 14144:
[ 1287.470403][ T5800]  kasan_save_track+0x3e/0x80
[ 1287.470431][ T5800]  kasan_save_free_info+0x46/0x50
[ 1287.470469][ T5800]  __kasan_slab_free+0x5c/0x80
[ 1287.470496][ T5800]  kfree+0x1c1/0x6c0
[ 1287.470520][ T5800]  l2cap_sock_cleanup_listen+0xf0/0x440
[ 1287.470542][ T5800]  l2cap_sock_release+0x6e/0x270
[ 1287.470561][ T5800]  sock_close+0xc3/0x240
[ 1287.470622][ T5800]  __fput+0x461/0xa90
[ 1287.470694][ T5800]  task_work_run+0x1d9/0x270
[ 1287.470717][ T5800]  get_signal+0x11c3/0x1310
[ 1287.470750][ T5800]  arch_do_signal_or_restart+0xbc/0x830
[ 1287.470775][ T5800]  exit_to_user_mode_loop+0x86/0x480
[ 1287.470821][ T5800]  do_syscall_64+0x32d/0xf80
[ 1287.470877][ T5800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.470920][ T5800] 
[ 1287.470926][ T5800] The buggy address belongs to the object at ffff88804bac2000
[ 1287.470926][ T5800]  which belongs to the cache kmalloc-2k of size 2048
[ 1287.470945][ T5800] The buggy address is located 1280 bytes inside of
[ 1287.470945][ T5800]  freed 2048-byte region [ffff88804bac2000, ffff88804bac2800)
[ 1287.470970][ T5800] 
[ 1287.470975][ T5800] The buggy address belongs to the physical page:
[ 1287.470998][ T5800] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4bac0
[ 1287.471019][ T5800] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1287.471038][ T5800] flags: 0x80000000000040(head|node=0|zone=1)
[ 1287.471060][ T5800] page_type: f5(slab)
[ 1287.471080][ T5800] raw: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122
[ 1287.471099][ T5800] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 1287.471126][ T5800] head: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122
[ 1287.471146][ T5800] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 1287.471167][ T5800] head: 0080000000000003 ffffea00012eb001 00000000ffffffff 00000000ffffffff
[ 1287.471185][ T5800] head: 00000007f1673bb1 0000000000000000 00000000ffffffff 0000000000000008
[ 1287.471197][ T5800] page dumped because: kasan: bad access detected
[ 1287.471213][ T5800] page_owner tracks the page as allocated
[ 1287.471221][ T5800] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5796, tgid 5796 (kworker/1:3), ts 99711462028, free_ts 89718910811
[ 1287.471260][ T5800]  post_alloc_hook+0x231/0x280
[ 1287.471403][ T5800]  get_page_from_freelist+0x28bb/0x2950
[ 1287.471443][ T5800]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1287.471463][ T5800]  allocate_slab+0x77/0x660
[ 1287.471507][ T5800]  refill_objects+0x334/0x3c0
[ 1287.471527][ T5800]  __pcs_replace_empty_main+0x328/0x5f0
[ 1287.471552][ T5800]  __kmalloc_cache_noprof+0x44e/0x690
[ 1287.471583][ T5800]  wg_noise_handshake_begin_session+0xcc/0xbe0
[ 1287.471657][ T5800]  wg_packet_send_handshake_response+0x13c/0x310
[ 1287.471710][ T5800]  wg_packet_handshake_receive_worker+0x72a/0x10a0
[ 1287.471746][ T5800]  process_scheduled_works+0xb02/0x1830
[ 1287.471775][ T5800]  worker_thread+0xa50/0xfc0
[ 1287.471804][ T5800]  kthread+0x388/0x470
[ 1287.471823][ T5800]  ret_from_fork+0x51e/0xb90
[ 1287.471851][ T5800]  ret_from_fork_asm+0x1a/0x30
[ 1287.471870][ T5800] page last free pid 5782 tgid 5782 stack trace:
[ 1287.471882][ T5800]  free_unref_folios+0xe7b/0x1c70
[ 1287.471913][ T5800]  folios_put_refs+0x56f/0x680
[ 1287.472003][ T5800]  free_pages_and_swap_cache+0x2e7/0x5b0
[ 1287.472048][ T5800]  tlb_flush_mmu+0x6d3/0xa30
[ 1287.472089][ T5800]  tlb_finish_mmu+0xf9/0x230
[ 1287.472107][ T5800]  unmap_region+0x2a5/0x330
[ 1287.472133][ T5800]  vms_complete_munmap_vmas+0x493/0xc60
[ 1287.472154][ T5800]  do_vmi_align_munmap+0x3bd/0x4d0
[ 1287.472176][ T5800]  do_vmi_munmap+0x252/0x2d0
[ 1287.472195][ T5800]  __vm_munmap+0x22c/0x3d0
[ 1287.472218][ T5800]  __x64_sys_munmap+0x60/0x70
[ 1287.472268][ T5800]  do_syscall_64+0x14d/0xf80
[ 1287.472297][ T5800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.472319][ T5800] 
[ 1287.472324][ T5800] Memory state around the buggy address:
[ 1287.472337][ T5800]  ffff88804bac2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1287.472354][ T5800]  ffff88804bac2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1287.472370][ T5800] >ffff88804bac2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1287.472382][ T5800]                    ^
[ 1287.472394][ T5800]  ffff88804bac2580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1287.472409][ T5800]  ffff88804bac2600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1287.472421][ T5800] ==================================================================
[ 1287.472449][ T5800] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1287.472470][ T5800] CPU: 0 UID: 0 PID: 5800 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1287.472501][ T5800] Tainted: [L]=SOFTLOCKUP
[ 1287.472509][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1287.472524][ T5800] Workqueue: hci5 hci_rx_work
[ 1287.472553][ T5800] Call Trace:
[ 1287.472563][ T5800]  <TASK>
[ 1287.472572][ T5800]  vpanic+0x56c/0xa60
[ 1287.472609][ T5800]  ? __pfx_vpanic+0x10/0x10
[ 1287.472648][ T5800]  panic+0xc5/0xd0
[ 1287.472679][ T5800]  ? __pfx_panic+0x10/0x10
[ 1287.472714][ T5800]  ? l2cap_connect_cfm+0x86a/0x1390
[ 1287.472742][ T5800]  ? l2cap_connect_cfm+0x86a/0x1390
[ 1287.472762][ T5800]  check_panic_on_warn+0x89/0xb0
[ 1287.472787][ T5800]  ? l2cap_connect_cfm+0x86a/0x1390
[ 1287.472807][ T5800]  end_report+0x73/0x180
[ 1287.472839][ T5800]  ? l2cap_connect_cfm+0x86a/0x1390
[ 1287.472859][ T5800]  kasan_report+0x128/0x150
[ 1287.472894][ T5800]  ? l2cap_connect_cfm+0x86a/0x1390
[ 1287.472920][ T5800]  l2cap_connect_cfm+0x86a/0x1390
[ 1287.472947][ T5800]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1287.472969][ T5800]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1287.472990][ T5800]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1287.473013][ T5800]  ? hci_connect_cfm+0x86/0x140
[ 1287.473044][ T5800]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1287.473066][ T5800]  hci_connect_cfm+0x95/0x140
[ 1287.473098][ T5800]  le_conn_complete_evt+0xf65/0x1430
[ 1287.473146][ T5800]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1287.473181][ T5800]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1287.473212][ T5800]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1287.473243][ T5800]  ? skb_pull_data+0xfb/0x200
[ 1287.473279][ T5800]  hci_le_conn_complete_evt+0x187/0x470
[ 1287.473316][ T5800]  hci_event_packet+0x7af/0x12c0
[ 1287.473346][ T5800]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1287.473377][ T5800]  ? __pfx_hci_event_packet+0x10/0x10
[ 1287.473404][ T5800]  ? preempt_schedule_common+0x82/0xd0
[ 1287.473432][ T5800]  ? preempt_schedule_thunk+0x16/0x30
[ 1287.473461][ T5800]  ? hci_send_to_monitor+0xe2/0x590
[ 1287.473485][ T5800]  hci_rx_work+0x3ee/0x1030
[ 1287.473512][ T5800]  ? preempt_schedule_thunk+0x16/0x30
[ 1287.473539][ T5800]  ? process_scheduled_works+0xa25/0x1830
[ 1287.473570][ T5800]  process_scheduled_works+0xb02/0x1830
[ 1287.473617][ T5800]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1287.473650][ T5800]  ? assign_work+0x3d5/0x5e0
[ 1287.473683][ T5800]  worker_thread+0xa50/0xfc0
[ 1287.473729][ T5800]  kthread+0x388/0x470
[ 1287.473752][ T5800]  ? __pfx_worker_thread+0x10/0x10
[ 1287.473781][ T5800]  ? __pfx_kthread+0x10/0x10
[ 1287.473803][ T5800]  ret_from_fork+0x51e/0xb90
[ 1287.473836][ T5800]  ? __pfx_ret_from_fork+0x10/0x10
[ 1287.473865][ T5800]  ? __switch_to+0xc7d/0x1450
[ 1287.473895][ T5800]  ? __pfx_kthread+0x10/0x10
[ 1287.473917][ T5800]  ret_from_fork_asm+0x1a/0x30
[ 1287.473948][ T5800]  </TASK>
[ 1287.474559][ T5800] Kernel Offset: disabled