last executing test programs:

5m54.589487199s ago: executing program 0 (id=2664):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00')
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019640)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000640)=""/102400, 0x19000)
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0xfff4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58}, 0x0)

5m54.210648713s ago: executing program 0 (id=2668):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000000340)=ANY=[@ANYBLOB="299b0ada805700b27b36c59feb010018000000000000000000060000000591a41c60e1077a82ae1a0000000000001002000000050000000000001008000000002e"], &(0x7f0000001e40)=""/192, 0x36, 0xc0, 0x1, 0xa, 0x0, @void, @value}, 0x28)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000002005000005e20300000000000900820073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x2)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000100)={'nr0\x00', 0x3})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="f80000030000000000000000020f000000010000000000010000d1a082b696de852e7e1e000000000001fc0100000000000000000000000000010000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1e01010000000033000000fc01000000000000000000000000000000010000000000000000000000000000000000000000000081000000000000000000000000000000effffffffffffeff030000000000000000000000000000000000000000000000000000000000000000000000000000002c00000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000b1a00100"], 0xf8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b0000000000000000000000000000ffffff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f00000001c0)=@x86={0x64, 0x0, 0x5, 0x0, 0x8, 0x5, 0x5, 0x1, 0xe5, 0x4, 0x8, 0x6, 0x0, 0xffffffff, 0x6, 0x8, 0x6, 0x1, 0x6, '\x00', 0x1})
ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000240)={0x80000, 0x0, [0x7, 0xef, 0xffffffffffffffff, 0xffffffffffffffff, 0x81, 0x80000001, 0x10, 0x6]})
r11 = syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2)
ioctl$VIDIOC_ENUMINPUT(r11, 0xc050561a, &(0x7f00000003c0)={0x1000, "d89d1a51b42b83b6270a94be6e88590734e889bc99d296f0160cf5bdf4f77876", 0x3, 0x5, 0x5, 0xffffff, 0x3000102, 0x2})
bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)

5m53.185869259s ago: executing program 0 (id=2675):
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
open(&(0x7f0000001180)='./bus\x00', 0x400101042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000015000200091bfbff3d030100000000008701000000000000bc26000000140000bf67000000000000140300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c78cd3e7dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
connect$inet(r1, 0x0, 0x0)
bind$inet(r1, 0x0, 0x0)
alarm(0x6)

5m52.635208342s ago: executing program 0 (id=2677):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000390400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000d1100100140003007767300000000000ffffffc30000000014001680100001800c000400f9ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x40008880)

5m52.547691833s ago: executing program 0 (id=2681):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
preadv(r0, &(0x7f0000000200), 0x0, 0x0, 0x2)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200)=<r3=>0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x9001, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000000000000001}}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0xb861}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}], [{@euid_lt={'euid<', 0xee01}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4)

5m51.378418019s ago: executing program 0 (id=2688):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206b1d010140000b0003010902870003010000000904000000010130"], 0x0)

5m36.206264668s ago: executing program 32 (id=2688):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206b1d010140000b0003010902870003010000000904000000010130"], 0x0)

5m29.501501602s ago: executing program 2 (id=2798):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x30}}, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_setup(0xa9e, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x2b, 0x1, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0)

5m28.451433007s ago: executing program 2 (id=2804):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f0000000280)={r2, 0xfbfd, 0x10}, 0x8)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)

5m27.480086741s ago: executing program 2 (id=2811):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_clone(0x300400, &(0x7f0000000000)="04ad0ddae5a6e8e38cec67ad6cc68c9164350a439e6e61e480532f75de7ea2ed68976cb91652cd55b0e57a6f4acef16dc887b76fe239f284704645252ce36cd72973e7a2c1bf3a835ee48f9e9ba500d65174f54841854ec0b2f84c0a744619babc0f94ece8d3a275dad8892c4f0cc4fa74877b1503b340f63716b138608187a7847c504dcd3303ea2150c3be813e45c4cfb221e304ee1c21f2a1d3e99a2b475afee3c8c4638dd70611c8e536cdfd86311a7900ab8840fd64a6e13ff3255b5267e6b17fb754e884a1e9161bbb1ae142", 0xcf, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000002c0)="faeb8814432cee4f16ae6e84b5f83b8d0390ff5ac68158cf22b90aa5a2b65ec5e718d6c1e77d25b7f3679bad6136532ec0b2d81981acbaf122ee246e89673376bfb6482d6be906098614dedad5a92912af85cdff25052948654ee56c80268d0f146c3ea4949d07500b8b72b27af168290d981261b0ed28f704e3d3c5883163d4bc2b661cd1c8")
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xfffffffffffffff7)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x10002, &(0x7f0000000540)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'staff_u'}}, {@dont_hash}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x66, 0x33, 0x36, 0x65, 0x63, 0x38, 0x38], 0x2d, [0x34, 0x32, 0x32, 0x38], 0x2d, [0x0, 0x32, 0x61, 0x64], 0x2d, [0x37, 0x66, 0x32, 0x30], 0x2d, [0x39, 0x30, 0x66, 0x51, 0x61, 0x36, 0x39, 0x62]}}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fowner_eq}, {@euid_eq}, {@fsname={'fsname', 0x3d, ']-%*\\('}}, {@dont_appraise}]})
r6 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x84)
mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000ec00080000001b110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4000)

5m26.939879036s ago: executing program 2 (id=2816):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000200)=0x81, 0x0, 0x4)
r5 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x0, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0xf000000}}]}, 0x20}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x0)
splice(r3, 0x0, r5, 0x0, 0xffffffe1, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m26.758235309s ago: executing program 2 (id=2818):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x6, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x80}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57)

5m26.36022583s ago: executing program 2 (id=2822):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x20000078}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'})
syz_emit_ethernet(0x109, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0)
getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000380))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000800ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

5m25.814172192s ago: executing program 33 (id=2822):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x20000078}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'})
syz_emit_ethernet(0x109, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0)
getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000380))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000800ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

5m11.827566631s ago: executing program 3 (id=2890):
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40c0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ftruncate(0xffffffffffffffff, 0xfbff)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x2000000}, 0x0)

5m11.588344815s ago: executing program 3 (id=2891):
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
write$binfmt_misc(r0, &(0x7f0000000300), 0x4)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18}, 0x20040001) (async)
sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18}, 0x20040001)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000a00)="33aa07", 0x3}], 0x1) (async)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000a00)="33aa07", 0x3}], 0x1)

5m8.024325541s ago: executing program 3 (id=2909):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0)
mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000006c2cb989237cab8072bccbe8144375c8e55ea0795ee802881f13081e9d2035255babf82595"])
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r8 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="8010e60080ed78", 0x206c}], 0x1}}], 0x1, 0x40000)
ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000007c0)={0x8, @raw_data="1cc406eb698d0d0dfaa701552d76942a60ebb3adb9bf67f483a90adc0580d37482df0985e272ff7087bfa3c0088ce7ed78b40431e924e85393804c4ea28618905e07f0aae8049a37696f940c27925e1d0fe1e7e75a07aa649f04eeab9ac265e8fe4f20feb7ad90190421e086bbbf15b8fde550046bfd8dea43a2262e1883940eb0264091889edc696e10b21f981733ce8584a9ef57a4677942e92dd8eda4dfeee964d96d476aa8691a6e5771ee30318542828589abb2f342276572371efdd4f71e9672069b4b3f64"})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500e88b036d00007a0a00ff180000004500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x90, &(0x7f0000000400)=""/144, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r9, 0x58, &(0x7f00000002c0)}, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r3, @ANYRES8=r2], 0x1c}, 0x1, 0x3000000}, 0x0)

5m6.95923965s ago: executing program 3 (id=2910):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0)
llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000340)='./bus/file0\x00', 0x0, 0x70, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e000000011000100000000000000000072666337353339657370286f666228746561292c626c616b6532732d3235362d783836290000000000000000000000000000000000000000000000000000d547d100"/227], 0xe0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080010000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5m3.68429129s ago: executing program 3 (id=2920):
r0 = fanotify_init(0xf00, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
fanotify_mark(r0, 0x105, 0x4800003a, r1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
r3 = dup(r2)
fallocate(r3, 0x10, 0x0, 0x72000)

5m1.964488852s ago: executing program 3 (id=2925):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

5m0.557512292s ago: executing program 34 (id=2925):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

5.097423298s ago: executing program 4 (id=4240):
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x5, {0x80, 0x1}, {0x50, 0x2}, @period={0x59, 0x0, 0x0, 0x6, 0x0, {0x20, 0x1, 0x0, 0x800f}, 0x0, 0x0}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8)

5.028203298s ago: executing program 5 (id=4241):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x31, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file1\x00'})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x500, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x50)

4.920243672s ago: executing program 7 (id=4242):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x103, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

4.563519016s ago: executing program 5 (id=4243):
kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) (async)
kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
kexec_load(0x8, 0xa, &(0x7f00000018c0)=[{&(0x7f00000000c0)="56b0e64d74f42bf9f744fb1aac0a135e2ba55e9d95b2291070735dfbcff10ccad46940c683b26c2e869c0c8c1974de5c53544a5697549ebc6cf48a83932e949428ec17d43d0c80b3874f68f58f6bb600ff262a3c8f66ec10a812b11f722af64695087b0a01dbc28d974112bf1e2df987c706dc677b3392620ef48d67", 0x7c, 0xd56, 0x4}, {&(0x7f0000000140)="0b9d4f77e2eb217ff2188a9156f43ad39fd314dc2dc3", 0x16, 0xd, 0x2}, {&(0x7f00000007c0)="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", 0x1000, 0x80000000, 0x1}, {&(0x7f0000000200)="5e240a3d937e3d3c455d3c0d509a11104d8e8754140ac55f0787e793af0ef8c1e80c40fed87260e9ef77f70e714173e0547d75d7e19dcce39b825d8e6c0267b25b", 0x41, 0x1, 0xeca}, {&(0x7f0000000400)="629feb94e9d78775e9e24d7b29db8dced436d6f2351964cdeaf5f14c80282c2c84759efe23d51d2d184bbe6666bac2cc142845e087053426e91a5d567dd5bd0c3fc8c7416079da43101fd0fe95e494d962dc1856051421d6ea323593c1aa320e80be533e75eaca2b6cdf2f40b1868b0c9bca0bd77a3505b8ca5bd944717d97cd5b7ec2195971379c044640742b4b5a9bf0b89925048377991bd075bbe1c7cf0b83653e42fa3bf37bc5d20bf08ead737ff7aa4f4e018e194d55302ca2d5387899817717a5d126dc52608deb", 0xcb, 0xa3d4, 0x2}, {&(0x7f0000000280)="af63fb660c74e92ebcb013b6813ef92ee71e6ae572e683050b04", 0x1a, 0x27d7dba0, 0x5e81}, {&(0x7f0000000500)="4e06e8f2d14f78db0bcfc8c936b5f41d5a44473296e6e043ccee8b853c068fb6de13661b319e34072a5f66d2ffdf07a7841dfc294f775fa23e786eeaca487c636057013084761f8f34e3a7d9a80e11f3abdcb5fc44b21ecb5c477212362155da42c0e5e1c3e7f39395f429a773c27700ba0b515e0771a7c2039f7a9c644ceffa2d77e52902a26af9516182bc57d19006327ab137c72d6131fb0fed1e588e119bf3dbf457d0461bc0901a85f4b6e81d7d196903e0bbfdc2612ee6233b446f2d4902bc8c", 0xc3, 0x5, 0x9}, {&(0x7f0000000300)="656e10f52f2ab52e7b353a0a8d03e0f813e49f5b671410dcedfe708f7032cb76e024d458e59f2fa7ef64a6d7d797e952c79193787cf674b991d098089b152714a63d009463250021e989ec585d4f1d4bc0ba7c62cb2fc645f5d904", 0x5b, 0x9, 0xbe61}, {&(0x7f0000000600)="e87edcdca9e07dd38a1f9f59b8bc7ac7549917ec482a6fbaecfaf5b4687a30eaf1d4ce3bc3809686dc8e2a30262040ec9f921e6547508623c537b13261eb1320170b9328cb49e0a51805c9b7c5c13373d62be55a24698116e448d43ca7d75f76381928c31cd0acd316524bafccabc13a93d72744236cafe785261187187b782a404e6ec469a1b248eaf99843914289cffcf8f1fbb67a75e6145e95d106baf43c9213b5c2e38c92", 0xa7, 0x6, 0x2}, {&(0x7f00000017c0)="a4b3086470ac006fd023f5d8abf882d6cdb22c07695ceaa664d52ddc1a6e5c51272699776b14e7c4a51eccad322a510f1f41e74df0f99e8d7fe8d6435782b8b13af4ddf8f9a77d97122f2a2d5269c23370abdf3a96b7e8ceb6a9c80f15c62bee8ae0f0dced4cc917b945a80c12233e6083971549edbec0d5ecc703e1553cb9b99d05f0b89df0cb23c0c11707630cdb2a185b6cd70665372b53e2d096f33d7f7edd9208d2f064c2152e192f246371ec4516afa3a0cde26de57859b3c6669459e0f3d1d22ec358b0cb4e8f62eb771e8106e95e667846f2a76b07d46f0b0e0e1e6af6e286e1a16c533c57a0b439048c6f779556", 0xf2, 0x1, 0x2}], 0x2a0000)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket(0x1, 0x5, 0x0) (async)
r2 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r3)
quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r3, &(0x7f00000006c0))
r4 = dup(r1)
r5 = socket$kcm(0xf, 0x3, 0x2)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f0000000080)=0x7)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="0213020902000000", 0x8}, {&(0x7f0000000780)="a112fde44010973762", 0x9}], 0x2}, 0x400c010)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xceec, 0x10100}, &(0x7f0000000180)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async)
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x7}, 0x1c)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) (async)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)

4.503181026s ago: executing program 4 (id=4244):
fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
ioperm(0x0, 0xfffc, 0x8005)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x108}}, 0x80)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x6)
writev(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)="c113", 0x2}], 0x2)
ioctl$AUTOFS_IOC_READY(r2, 0x800442d2, 0x200000f3)
sendmsg$nl_generic(r1, 0x0, 0xc000)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x38414261}})
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'wg2\x00', 0x2000})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12)

4.030546949s ago: executing program 4 (id=4245):
ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40})
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4000}}, 0x20}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x64)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000004c0)=[@iv={0x78, 0x117, 0x2, 0x60, "aab9561ec519098886823c82141d1d228a4c0f5248f9c48f0655e7e0425461aadc115c1b2fec546da61dd115afdaf294ea3876b78b1ae97b057e0366c39f54d19ddabe080589b857ed8074127f873012f047e4953d8da989bc256b552d7f7e44"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xcb, "66b3af7c743de67d2dff13707922d9644e85af7ea599611b46cba2ebc4002a0ef2ec3baf1fea6b536bee7472beeba61f9d03ca9065a1178f11c586f2cb78fb1159a60a73c248c3c56665bc3a175dba885a2b4f567b95d4ea41be3c12cacfffe2f047610ee94223319e71b3bc189373c1b292db37c905f3bcf17c46e9cb789b90c85a4d95c11b4a10dafc2170609f4444aa4a15cbad9056af9da257ab1c912e3d0ff7ce12d42bfdde80b553f4ccb31e685e9b057fd8be7cfadd3b2257912a6ec0dc3ba0741ae89756309887"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x1a0, 0x4004000}, 0x24000800)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)

3.920283307s ago: executing program 5 (id=4246):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x28, 0x8, 0x0, 0x5, 0x0, 0x3e, 0xf, 0x20b, 0x40, 0x343, 0x2, 0x2, 0x38, 0x1, 0x1, 0x8, 0x2}, [{0x0, 0x5, 0xffffffffffffffff, 0x9, 0x1, 0xd329686, 0xfffffffffffffffa, 0x8}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000802000000004000500000000080001007f000001080007"], 0x2c}}, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c)

3.867414024s ago: executing program 5 (id=4248):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101e00000020000000000000000000000004e248001000700010a0080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c00110000000000000000030000000000000000fe8000000000000000000000000000bb00000000000000000000ffffac1e0101fc010000000000000000000000000001330300"], 0xec}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000)

3.728225921s ago: executing program 5 (id=4249):
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00')
r4 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
openat(0xffffffffffffffff, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000007fffffff0000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.195987636s ago: executing program 5 (id=4250):
syz_usb_connect(0x2, 0x3d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001812000056212c1b329fc0b3a7c4fb41b4f8241281487648a7ffe874d0b873608b0e08482ea7738366854dec237b1c83e0b4cc3df459d52edba7cc45842a5b8bb6e1d2dfba6905fd4e1f1ba976fec6fcd10824031ce273f692442d65361400f688fc5b4b48e97abc5cdc28389ca3a96c5e245fe6da16df66d7e461de1bf7f7612bcf09ee4c027dd514405822bdf919da89fc05759a00f00c3c3bd485c282f18074ee3069ef848b7eb3d3cda38366d7705d910b3ede823cfdc953649498783a0b6568c70883a2becfaa73c30fb4b4d14fdc374d9f66b5400400"/247, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x1000000000000010, 0x80802, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0xd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x8, 0x4, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=@deltaction={0x98, 0x31, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1befe0}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x98}}, 0x400c814)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0], 0x68}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

3.193489923s ago: executing program 6 (id=4251):
socket$nl_audit(0x10, 0x3, 0x9)
socket$can_j1939(0x1d, 0x2, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffca2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r1 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) (async)
socket$netlink(0x10, 0x3, 0xa)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(0xffffffffffffffff, 0x3)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) (async)
r8 = openat$smackfs_cipso(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pread64(r8, &(0x7f0000019800)=""/102380, 0x18fec, 0x0)

2.985543947s ago: executing program 4 (id=4254):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="611228000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000020000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.752191859s ago: executing program 7 (id=4255):
fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
ioperm(0x0, 0xfffc, 0x8005)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x108}}, 0x80)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x6)
writev(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)="c113", 0x2}], 0x2)
ioctl$AUTOFS_IOC_READY(r2, 0x800442d2, 0x200000f3)
sendmsg$nl_generic(r1, 0x0, 0xc000)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x38414261}})
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'wg2\x00', 0x2000})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12)

2.751388565s ago: executing program 4 (id=4256):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000400)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@deltaction={0x1fc, 0x31, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x598}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4090}, 0x4048044)
r9 = dup(r7)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
setuid(0xee00)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0)
r11 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x81000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x5, 0x8, 0x5, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000b32", 0x2b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.657456034s ago: executing program 1 (id=4257):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
memfd_secret(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000002e00)=[{&(0x7f0000002e40)="415fad39e4df90f5c1aeb5d323b9146ea4f11ad7a868fd5502efcdab8967452333fe090d00000000b5bab26a554434f891b51af2704adc98369246c358dfc3ca51c56a9899a701217ff3eeb1068f3db05b6393355b33b448e6bdc37125e9d6068d8b682093ab9dcf8816299def602e51889ddee9b3871efe0d2221262a0519d937ae53ade78f0bd62cd5d37080d01cf039feb54b62f38bcdb4100f84d8e1480ccb601ec7c932ef979788f9c4a92230569927da6215d18361b3e2a33d5087dd80f1db565663d9dd78e9f3d6a33d9719e6552621c907376c0ab287ef0c3ed6c04f870ba70e08941d9d4e1694ce0416642d8a47750a5cd6cac70477f53d9d9f2ac5b6fa355cd66db3b375e0b2c9117cddb308c2104c64bfa3c95ceb302568c39f1ddba028a1683f05c4cdb5f02c75ef7c0dc4aa56d65a54ba2b6f51945690f5d1615a871da3d19ba85a5abbcefc41f6840d461802138e28b5ddbe3be64c4ecaca7b1876f8b17fb723215ab04e30a9e5f57ecb046351d3a9447b251bfa453746d9f9841caf1c943bd2c2be7d1bfd36e2f1e76f281f0433559a8b26b975be58b356dca6437a77a4cc8eac596c5c7a26c4da0d15845a2cc643f9a6caf58dece17556f52d66971255a57bbf49f9f3d3973315e928dd3980bb6e4c13f3a46d129de7c4ef3c69d978924c9469d8e47a6e5655a2785fcf7296bba6fbe3368e35f6d3e3cb6a836369db2f4aa5598a2b9ee5040dca0b5dc2a6925e29ac2c6602c2e6e1d7db9bbb447a675f15f3f69e8af1f0af361c16645daed14263032f0b758a5189ede07bae2d63db1f9357863c23198e6edd485e7e2ea56dde9ad2ff4e8185f5bd6b24c56cf452e6f21f1d768b740e090663396f6d334ea01a7d0c32cdfe3323028e72b685e7e42e32251ef936d786508a6c3f6aaf9e0f1f6670d40854054074ddfaac43add9c1b9ab3577197f146b7b4d9564b23f3979d6aa591475691dde8263fccb68997da5edd7641382bcf3937c4d10c6de930b4f4b9a73a389e26b201dd9b00c4d987c8a210fc64579e8c614ede3b9d8feeef2b43b6b1d194979e86852509e626ed87e973cc8aa3d936b2f53df18043a65925dc57eadb2ac583c2e69ee6de18ebbe7b319096c3ba19520e48760ee0ed57585bb3ca6007efbbe31c1dd0d819ecc1fa67d8e9630c66f85a4210c6cb665600051469f448f68ee1b6ac32338c0b1e95a5cfe3160b72d99a3fe58b48a7cda914d47df004b96719a1f2d877d41b6a595e87962bb9977cca680140f95d5b6df1f41dae7be2ba8137e9b3761dcbe3f82ed508e4bca2e17455bce99f1cd42e1ba0fcb2ec32302816a6107f35bb0ec50e1601236556561ba4618117c2937ebf88dce7a6f26b84d8767597b976cfccf79971bdf389db739cbc3260a4bfb4327e3866c366206fd6956ffca977c76b880be76a9516b335e846ca13a957f4268695908faca73b5d6628e172bac77f332aa5d7fc2500789f91c34556ffa67cb29701b242872f5523001002282cbb7982033d477b94f94398d4f44e742eafb9a9a56a0ce3335f88af7fded8569e8e57494a3275d614436e07b95187234589ecd2cff680a5743e5889d1765c5f7a400c0fe47e8a586beb44aa2e72c6d4d35da7102e4a0cc998b870354ac49ade9bce571be671819e34f4c50710fb596f3f94a64c5b7ddd2d9748db165589cf48db94dc8973a207b8d0e19af4919bfed8f2773e8ad96df6fffd79eaa636e681e7f877eb077d706759a00486e59db4f16da0f007e512b019eb51515102307c3380291b9e90b628e545a758b6846714650ac0e455637712cf3eec3d07f9fdad20206edd5b8bb3f14b21d6f33909458c58ae29346f5982081c193440dfb1c766a441c4e8e721b740a8fc7b15461724edab02fd063332241439abd32375a4e7b32fdbf41d9ed4fd5c2bee87caee0f2494d8be8d7c1640bd06cd29af4b066335bad1cac99ebfb93abac1bb6b08013f18b844653b28cb4d908b324471bdef1f1a365282c7ef6b77f84836dec3f08169a8473b8338ddef1dd75cc781a3495ec940078a3b15dbc6e9d8568c72c3672bf121c8636978b1202521414b2c9d5ee1afae08a590cbcaef129643c7558783a5943da3b0e9e939614852eb726b774e8069901eecdb11170dd3c90adefef4360e03e3a4d1f069c83872cec1d9d1f8939af6bc8dca857a069f54288538d05241835e05920ea1483160ca4b4cce22d8c95ecde1bbf1e06790043c411b79da1cce2c534e739904e6749d19afffb77c52ab852cac94ea547ab461bb4e0b8edec286596dfba1d6d933e834257a8debc885c328442816179385fcbf40e68502e22a17da98367b01d161364146baed0d58dac02b114f1ae07120b4bace8ad806c73db556c41358aa8132719910d1f52b6a2e4c90013870adca11901729405d22ebc51151181ac73acfb4f2ae96d0590c00b12be0fd678e17dda974c11493bb99b707d209102274ed78fe62eb1d5ca30d500df7c8f068d8824cb8305557b9d489a7604c459164e97e2c7fc7636941a6386637cf5c639db2fdbd954641bc24c67abac393882c82ab66bcfcb88178c22f75364a3ce7ca448779f7192338ee3ab2a67e376fbeec72e31992e06f8516ec6b06db2b7dc05cdf7203b2208515533295355ec5092fec31119fab38d017e8de0d4a6b0bda80470b1bd235a68f73f816b5bfb2bbbecc6dc080c430c7e556314902ae372309d9a1fedaccc6ba5868089763d9787e20e75ffefa1ded8763f6dee2b483d9eab36a3e874334aeaec146866cfdd3b3351c4bc4a6013f3b4627d0c4300d76c236db8486c2fc92045e64bbe951a2047708c25af9b5bbe3530664c2619fc6001b64f6f113467507a56859ead3558371c1509f616147945bcb2aa75e3ca481662cf0cf0595a8ef2493f846a13bbfde290bdd63b08e2bf11c667eb56b72fd7ff30809a5333625284c2277dbcb17cc8974fcb9ffd1257df57163308a7b9bc9bd2e2dbcb7c95f0b6fbe3aa9fe334e11bb59fb113971b401a1727d8a58f7d4151c672df2500fdc79fb9719a1d824406e16dd9cbc9f2885e909bd1a771759cf44e4e8888c1a8cbe29c2712bc0cc11a75cc2eccaf54f5d182597efb34b576217f84ed03c23f34d83e4d94e9891f92f34ea61835660441155e06e1c6896e2e6b11448b659766d5073dabd94b537f568c75932ffa0ea1163bb01d4ce034aafbb76c65efaef4733d3aa04a63d1417b1334d49a68d3dd0cbcb047be1063a16f16accc880fda01de09099e1f56e7d6b41c0ae99c76d3b4e41d7205ce3aee986a6ed7194cbdeda27be61280c43dec5eb4fc9ff2e97270aea02b565bb02a14a9552e927bac9e982f482e049fe004239a385d2256043548e6a02593e48899c3df21d5784f45a2181ca6d9d1f66ff6f07b3cc052caa9fc72ab17a8c8287d0b883d23340f67fd34d27d9a4597d1d52f0d64daff58481eb531ff83b070f913355619b45d2fe02539e1838c5ac3c9a295a003850aaa4ad2dada53543ef8e9584848768b9d1fd3224dc9f20e08b1c61c293b2f81adb0d76c40b721842db2104aeee6caa8e36b1da076a22bab3b36295deab785ba2a842daafd769002e83d2941283c4780e901601cd7067f13b0a4247a09fa4fb6d87d7ca9c3432bc69a536ab1120b4953c15f0ac00999406c2d8aa1ceee80d5e32803f23a932d79c72a826e3ffa6e53abda169b53ea29bf1db25fbeab2b8099480364ebb2c9b3a1255f427ee59db6cd0f1c286a6c670554d6f98022d6d1d8484934917531d65fee57afbc9008365ddcd2f4ef29c9da7d0dff4b0a1bad403206f9d4b1d8fe4d00717bac9d7629ec62150b93bbf41a0090fd7c18a027f5f6e0f5fde93f4b95c4eaf41ba79bdee0c96d4593034cfb1145b9ff53520598a2cae365f9d0a40140fc1892e597664262edd1aca41ea1fe25f5c879c94f0f4f375cabf38bc258374b6c26f7217dbe8fa7581e6dfbdcaa081badbfb6c5db278bbe2ab25bd97338a879513d0ac1290faa064193687e21e9c2080f5baa01cdd8fe44fd658ba0e037f33abb173b56a8dea8eeae232ad09b9569e2e887a1b702caccd2103bea66dfaeb00427c7367bcef91ece0eccf0b0f4cfecfa8dca92ab2efd61d5cd736aea1905c4e13f1bea7248fe4e5dc46a43b6214edd331e78dad46a2f81cef49511d971e7d89c3a881d3955a6bb45c1e988358b505d76967c499f804c7d7a4c869b732deabf2a63e630220fec28c0b8d501ca753885edaee091ceec9e0bd4d145aa06e5cdf5f884f1d1a71c7b82a32b07069a0837a236127ab3d87c693c716f51ababfd66c0b357f44b293a4923858e766051bba37d702cf0b352e4466024485ca377a5267de3f50114f4bec480d306a03df8f9465bf642444b1373f02bd4427015162ef95602bf30e0d7b3de22ed2ac70e6e0bfdd86adce6c3768cd23c92a634dd5555c83f6759798989f42c0bf40e58bbd3683fcb880ba6dbe620f37328c95e82c82e7079b03e", 0xc7d}, {&(0x7f0000001b80)="82", 0x1}], 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

2.6341731s ago: executing program 6 (id=4258):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000740)={'veth0_to_team\x00'})
r4 = landlock_create_ruleset(&(0x7f0000000c40)={0x400, 0x3, 0x2}, 0x18, 0x0)
readv(r4, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/112, 0x70}], 0x1)
syz_emit_ethernet(0xc2, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"0000000000115d48682e1c9a5500"}}}}}}}, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2})
syz_usb_connect$cdc_ecm(0x4, 0x66, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x8, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xb, {{0x6, 0x24, 0x6, 0x0, 0x0, "89"}, {0x5, 0x24, 0x0, 0xf6c}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x5, 0x9, 0x4}, [@acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x69f3}, @acm={0x4, 0x24, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xb, 0x1}, @acm={0x4, 0x24, 0x2, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0xe, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0xfb, 0x5}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xff, 0x4, 0xd3, 0xff, 0x9}, 0x16e, &(0x7f00000004c0)={0x5, 0xf, 0x16e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x7, 0x8000}, @generic={0x70, 0x10, 0x0, "1ce2b1ba719a9a28552f63af6e24b4c1a118c4a7b7a1499639ea79004afd648299b3eddd89e165e2fd09b50a421d85510c1a4752115f3adcdc03e550b53ce55da17c27a8dad74c45d6c887d969107b6193e054218ddcb58ec8f2f80bfe6532286f765983dd1f178b5327a4f0ad"}, @generic={0xc9, 0x10, 0x3, "0f5a947564ca6e4d4158675817868df4eddfc09529f32e569408cb7a297aadfeaa35d5761eb9e1a6ec2467fc26b2719b15e0c3c562d74f5fd9681c82168c6b08a2dc3f86255c69720a5138ce7c5e6ab3c6c6deabad828e359d0be66d14761864d4aeb1acf2eec14191fefa334ce57186329550451d74f419fb80f540b67a1f4f731192a60cfcf6ff5f094a31e353dcf0d3fd8075c6f13847101cb637673530c4b619370b5e00085bb9a5d9a681fcf003a269eb536827220f4d687e9557f4ec3da220ffbefc20"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xda, 0x51, 0x40, 0xf5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "42e5cd486492def995bf387ad565506f"}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1809}}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async)
socket$inet6(0xa, 0x3, 0x7) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x1}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) (async)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
userfaultfd(0x801) (async)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) (async)
ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000740)={'veth0_to_team\x00'}) (async)
landlock_create_ruleset(&(0x7f0000000c40)={0x400, 0x3, 0x2}, 0x18, 0x0) (async)
readv(r4, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/112, 0x70}], 0x1) (async)
syz_emit_ethernet(0xc2, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"0000000000115d48682e1c9a5500"}}}}}}}, 0x0) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) (async)
syz_usb_connect$cdc_ecm(0x4, 0x66, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x8, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xb, {{0x6, 0x24, 0x6, 0x0, 0x0, "89"}, {0x5, 0x24, 0x0, 0xf6c}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x5, 0x9, 0x4}, [@acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x69f3}, @acm={0x4, 0x24, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xb, 0x1}, @acm={0x4, 0x24, 0x2, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0xe, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0xfb, 0x5}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xff, 0x4, 0xd3, 0xff, 0x9}, 0x16e, &(0x7f00000004c0)={0x5, 0xf, 0x16e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x7, 0x8000}, @generic={0x70, 0x10, 0x0, "1ce2b1ba719a9a28552f63af6e24b4c1a118c4a7b7a1499639ea79004afd648299b3eddd89e165e2fd09b50a421d85510c1a4752115f3adcdc03e550b53ce55da17c27a8dad74c45d6c887d969107b6193e054218ddcb58ec8f2f80bfe6532286f765983dd1f178b5327a4f0ad"}, @generic={0xc9, 0x10, 0x3, "0f5a947564ca6e4d4158675817868df4eddfc09529f32e569408cb7a297aadfeaa35d5761eb9e1a6ec2467fc26b2719b15e0c3c562d74f5fd9681c82168c6b08a2dc3f86255c69720a5138ce7c5e6ab3c6c6deabad828e359d0be66d14761864d4aeb1acf2eec14191fefa334ce57186329550451d74f419fb80f540b67a1f4f731192a60cfcf6ff5f094a31e353dcf0d3fd8075c6f13847101cb637673530c4b619370b5e00085bb9a5d9a681fcf003a269eb536827220f4d687e9557f4ec3da220ffbefc20"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xda, 0x51, 0x40, 0xf5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "42e5cd486492def995bf387ad565506f"}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1809}}]}) (async)

1.892621809s ago: executing program 1 (id=4259):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x2}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfe}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

1.891496518s ago: executing program 7 (id=4260):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90ff, @void, @value}, 0x94)

1.756424004s ago: executing program 6 (id=4261):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/269], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000)={0x3010000}, 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.752299425s ago: executing program 7 (id=4262):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f0000003640), 0x2, 0x20042)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
open(0x0, 0x10b942, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x12000, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r7, 0x9}, &(0x7f00000000c0)=0x8)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0)

1.350228895s ago: executing program 1 (id=4263):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0d00000000000000b702000014000000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000001009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x140a, 0x10, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x400c1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@generic={0x82, 0x3, "fa"}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x21}}, {@remote}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x80}}, {@private}]}]}}}}}}}, 0x0)

1.296265409s ago: executing program 6 (id=4264):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00')
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019640)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000640)=""/102400, 0x19000)
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58, 0xf4ff}, 0x0)

1.17655036s ago: executing program 4 (id=4265):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001, r0})
r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0)
close(r2)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8013}})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x200000013, 0x1ff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30110000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x6000000)
r6 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r7 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, r6)
r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r9 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}})
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)

1.030892614s ago: executing program 1 (id=4266):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)='~', 0x1}], 0x1}}], 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x101, 0x9}}]}]}]}, 0x48}}, 0x0)
listen(r0, 0xffffaadb)

1.030055405s ago: executing program 6 (id=4267):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'})
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r4 = io_uring_setup(0x4d57, &(0x7f0000000200)={0x0, 0xcb9c, 0x8, 0x1, 0x143})
io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000100)="ffa7", 0x2, 0x1, 0x1}}, 0x1)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000002240), &(0x7f0000002280)={'enc=', 'raw', ' hash=', {'sha384-arm64\x00'}}, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000b200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

788.254358ms ago: executing program 7 (id=4268):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0xffffff92, 0x4}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000300)="827be7271019b3fe048765ad", 0xc}, {&(0x7f00000005c0)="b8", 0x1}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="3800000000000000000000000700000000442400037f000001000000007f00000100970000ac1414bb00000000e0000001000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141427"], 0x58}, 0x0)

480.328187ms ago: executing program 1 (id=4269):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, 0x0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x70bd28, 0x25dfdbfb, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendto$inet6(r2, &(0x7f0000000080)="823d5c89f01435b22e2bb13541f4096c1d527e7dff5b83ab80c7681af3ca7e07cbd7c60e75eb17cf833d1eb18425d4055d791328941d8589ce7ccaba62c13dd6780b4fa0c32193b060b1ac63dbe3d3173d079f91fcaacf1a65", 0x59, 0x408c4, 0x0, 0x0) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

193.413726ms ago: executing program 6 (id=4270):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101e00000020000000000000000000000004e248001000700010a0080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c00110000000000000000060000000000000000fe8000000000000000000000000000bb00000000000000000000ffffac1e0101fc010000000000000000000000000001330300"], 0xec}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000)

192.933773ms ago: executing program 7 (id=4271):
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00')
r4 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
openat(0xffffffffffffffff, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000200000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

0s ago: executing program 1 (id=4272):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @exit, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
mkdir(&(0x7f0000001140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0)
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80, 0x85)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0)
getresuid(&(0x7f0000000440), &(0x7f00000001c0), &(0x7f00000004c0)=<r7=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC=r7])
setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
name_to_handle_at(r3, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@isofs_parent={0x14, 0x2, {0xd7, 0x8, 0x1, 0x7fffffff, 0xfffffffe, 0x8}}, &(0x7f0000000300), 0x1200)

kernel console output (not intermixed with test programs):

efee9175fa0 R15: 00007ffff8583e58
[  739.759618][T17513]  </TASK>
[  739.876148][T17511] macvlan0: left allmulticast mode
[  739.881556][T17486] vivid-000: reconnect
[  739.893034][T17511] veth1_vlan: left allmulticast mode
[  739.967953][T11444] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  739.977094][T11444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.993916][T11444] usb 6-1: config 0 descriptor??
[  741.152515][T17527] random: crng reseeded on system resumption
[  741.919138][T17534] xt_cluster: node mask cannot exceed total number of nodes
[  743.543941][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  743.550591][ T5841] Bluetooth: Wrong link type (-22)
[  743.555835][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x10
[  743.562651][ T5841] Bluetooth: Wrong link type (-22)
[  743.567976][ T5841] Bluetooth: hci0: link tx timeout
[  743.573135][ T5841] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  743.983391][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3304'.
[  744.087998][T11444] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  744.098485][T11444] asix 6-1:0.0: probe with driver asix failed with error -71
[  744.108388][T11444] usb 6-1: USB disconnect, device number 15
[  744.797902][ T7070] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  745.098961][ T7070] usb 5-1: unable to get BOS descriptor or descriptor too short
[  745.113136][ T7070] usb 5-1: unable to read config index 0 descriptor/start: -71
[  745.121970][ T7070] usb 5-1: can't read configurations, error -71
[  745.415991][T17587] 9pnet: Found fid 0 not clunked
[  745.613538][ T5822] Bluetooth: hci0: command 0x0406 tx timeout
[  745.779471][T17596] random: crng reseeded on system resumption
[  747.168466][T17613] FAULT_INJECTION: forcing a failure.
[  747.168466][T17613] name failslab, interval 1, probability 0, space 0, times 0
[  747.208329][ T7070] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  747.239642][T17616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  747.253311][T17613] CPU: 1 UID: 0 PID: 17613 Comm: syz.5.3322 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  747.264143][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  747.274235][T17613] Call Trace:
[  747.277538][T17613]  <TASK>
[  747.280489][T17613]  dump_stack_lvl+0x241/0x360
[  747.283117][T17616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  747.285194][T17613]  ? __pfx_dump_stack_lvl+0x10/0x10
[  747.298125][T17613]  ? __pfx__printk+0x10/0x10
[  747.302722][T17613]  ? __pfx___might_resched+0x10/0x10
[  747.308030][T17613]  should_fail_ex+0x3b0/0x4e0
[  747.312815][T17613]  should_failslab+0xac/0x100
[  747.317553][T17613]  kmem_cache_alloc_node_noprof+0x77/0x380
[  747.323400][T17613]  ? __alloc_skb+0x1c3/0x440
[  747.328031][T17613]  __alloc_skb+0x1c3/0x440
[  747.332488][T17613]  ? __pfx___netlink_lookup+0x10/0x10
[  747.337912][T17613]  ? __pfx___alloc_skb+0x10/0x10
[  747.342886][T17613]  ? netlink_autobind+0xd6/0x2f0
[  747.347837][T17613]  ? netlink_autobind+0x2b0/0x2f0
[  747.352882][T17613]  netlink_sendmsg+0x638/0xcb0
[  747.357671][T17613]  ? __pfx_netlink_sendmsg+0x10/0x10
[  747.362995][T17613]  ? lock_release+0xbf/0xa30
[  747.367628][T17613]  ? __pfx_netlink_sendmsg+0x10/0x10
[  747.372923][T17613]  __sock_sendmsg+0x221/0x270
[  747.377621][T17613]  ____sys_sendmsg+0x52a/0x7e0
[  747.382406][T17613]  ? __pfx_____sys_sendmsg+0x10/0x10
[  747.387735][T17613]  ? __fget_files+0x2a/0x410
[  747.392337][T17613]  ? __fget_files+0x2a/0x410
[  747.396933][T17613]  __sys_sendmsg+0x269/0x350
[  747.401530][T17613]  ? __pfx_lock_release+0x10/0x10
[  747.406582][T17613]  ? __pfx___sys_sendmsg+0x10/0x10
[  747.411709][T17613]  ? __pfx_vfs_write+0x10/0x10
[  747.416582][T17613]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  747.423009][T17613]  ? rcu_is_watching+0x15/0xb0
[  747.427893][T17613]  ? rcu_is_watching+0x15/0xb0
[  747.432802][T17613]  do_syscall_64+0xf3/0x230
[  747.437363][T17613]  ? clear_bhb_loop+0x35/0x90
[  747.442058][T17613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.447971][T17613] RIP: 0033:0x7fdd1b585d29
[  747.452390][T17613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  747.472009][T17613] RSP: 002b:00007fdd1c44f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  747.480444][T17613] RAX: ffffffffffffffda RBX: 00007fdd1b775fa0 RCX: 00007fdd1b585d29
[  747.488467][T17613] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  747.496480][T17613] RBP: 00007fdd1c44f090 R08: 0000000000000000 R09: 0000000000000000
[  747.504489][T17613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  747.512489][T17613] R13: 0000000000000000 R14: 00007fdd1b775fa0 R15: 00007ffc3a142bd8
[  747.520501][T17613]  </TASK>
[  747.528963][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  747.535448][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  747.597779][T11443] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  747.617760][ T7070] usb 5-1: Using ep0 maxpacket: 16
[  747.958576][ T7070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  747.964814][T11443] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  748.488806][ T7070] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  748.494656][T11443] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  748.498224][ T7070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.527205][T11443] usb 2-1: config 1 has no interface number 0
[  748.530280][ T7070] usb 5-1: Product: syz
[  748.537516][ T7070] usb 5-1: Manufacturer: syz
[  748.546631][T11443] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  748.547847][ T7070] usb 5-1: SerialNumber: syz
[  748.572383][T11443] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  748.575692][ T7070] usb 5-1: config 0 descriptor??
[  748.591401][T11443] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 117, using maximum allowed: 30
[  748.603983][T11443] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 117
[  749.148764][ T7070] usb 5-1: Cannot retrieve CPort count: 0
[  749.163019][ T7070] usb 5-1: Cannot retrieve CPort count: -5
[  749.171131][ T7070] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -5
[  749.251478][T11443] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  749.260762][T11443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.268877][T11443] usb 2-1: Product: syz
[  749.273602][T11443] usb 2-1: Manufacturer: syz
[  749.278503][T11443] usb 2-1: SerialNumber: syz
[  749.355396][ T7070] usb 5-1: USB disconnect, device number 71
[  749.424053][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3334'.
[  749.454928][T17651] dccp_invalid_packet: pskb_may_pull failed
[  749.588966][ T5822] Bluetooth: hci5: command 0x0406 tx timeout
[  749.907794][T17663] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  751.077995][T11443] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS
[  751.084158][T11443] cdc_ncm 2-1:1.1: bind() failure
[  751.115350][T11443] usb 2-1: USB disconnect, device number 61
[  751.167754][   T29] audit: type=1326 audit(2000000089.330:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8f85d29 code=0x7ffc0000
[  751.189781][   T29] audit: type=1326 audit(2000000089.330:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8f85d29 code=0x7ffc0000
[  751.211489][   T29] audit: type=1326 audit(2000000089.360:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efee8f85d29 code=0x7ffc0000
[  751.291893][   T29] audit: type=1326 audit(2000000089.360:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8f85d29 code=0x7ffc0000
[  751.333462][   T29] audit: type=1326 audit(2000000089.360:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7efee8f85d29 code=0x7ffc0000
[  751.400932][   T29] audit: type=1326 audit(2000000089.360:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8f85d29 code=0x7ffc0000
[  751.647908][   T29] audit: type=1326 audit(2000000089.360:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8f85d29 code=0x7ffc0000
[  751.914923][   T29] audit: type=1326 audit(2000000089.360:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7efee8f85d29 code=0x7ffc0000
[  751.948162][   T29] audit: type=1326 audit(2000000089.360:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8f85d29 code=0x7ffc0000
[  752.244576][T17697] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  752.279142][T17698] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3349'.
[  752.326802][T17700] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  752.368170][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'.
[  753.159653][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'.
[  753.168943][T17722] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3359'.
[  753.191253][T17717] macvlan1: entered allmulticast mode
[  753.671226][T17734] FAULT_INJECTION: forcing a failure.
[  753.671226][T17734] name failslab, interval 1, probability 0, space 0, times 0
[  753.684097][T17734] CPU: 1 UID: 0 PID: 17734 Comm: syz.1.3361 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  753.694890][T17734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  753.704956][T17734] Call Trace:
[  753.708268][T17734]  <TASK>
[  753.711216][T17734]  dump_stack_lvl+0x241/0x360
[  753.715901][T17734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  753.721127][T17734]  ? __pfx__printk+0x10/0x10
[  753.725726][T17734]  ? do_raw_spin_unlock+0x13c/0x8b0
[  753.730934][T17734]  ? __pfx___might_resched+0x10/0x10
[  753.736234][T17734]  should_fail_ex+0x3b0/0x4e0
[  753.740932][T17734]  should_failslab+0xac/0x100
[  753.745642][T17734]  __kmalloc_noprof+0xdd/0x4c0
[  753.750440][T17734]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  753.756177][T17734]  tomoyo_realpath_from_path+0xcf/0x5e0
[  753.761776][T17734]  tomoyo_check_open_permission+0x258/0x4f0
[  753.767721][T17734]  ? tomoyo_check_open_permission+0x207/0x4f0
[  753.773801][T17734]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  753.780235][T17734]  ? rcu_is_watching+0x15/0xb0
[  753.785028][T17734]  security_file_open+0xac/0x250
[  753.789984][T17734]  do_dentry_open+0x328/0x1b70
[  753.794778][T17734]  vfs_open+0x3e/0x330
[  753.798861][T17734]  path_openat+0x2c84/0x3590
[  753.803484][T17734]  ? __pfx_path_openat+0x10/0x10
[  753.808431][T17734]  ? __virt_addr_valid+0x183/0x530
[  753.813553][T17734]  ? rcu_is_watching+0x15/0xb0
[  753.818351][T17734]  do_filp_open+0x27f/0x4e0
[  753.822865][T17734]  ? __pfx_do_filp_open+0x10/0x10
[  753.827912][T17734]  do_sys_openat2+0x13e/0x1d0
[  753.832619][T17734]  ? __pfx_do_sys_openat2+0x10/0x10
[  753.837830][T17734]  ? preempt_schedule_irq+0x144/0x1c0
[  753.843342][T17734]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  753.849072][T17734]  ? rcu_is_watching+0x15/0xb0
[  753.853851][T17734]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  753.860213][T17734]  __x64_sys_openat+0x247/0x2a0
[  753.865331][T17734]  ? __pfx___x64_sys_openat+0x10/0x10
[  753.870712][T17734]  ? trace_irq_enable+0x2c/0x120
[  753.875653][T17734]  do_syscall_64+0xf3/0x230
[  753.880173][T17734]  ? clear_bhb_loop+0x35/0x90
[  753.884861][T17734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.890805][T17734] RIP: 0033:0x7f3283b85d29
[  753.895233][T17734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.915022][T17734] RSP: 002b:00007f3284938038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  753.923449][T17734] RAX: ffffffffffffffda RBX: 00007f3283d76080 RCX: 00007f3283b85d29
[  753.931430][T17734] RDX: 0000000000024300 RSI: 0000000020000500 RDI: ffffffffffffff9c
[  753.939436][T17734] RBP: 00007f3284938090 R08: 0000000000000000 R09: 0000000000000000
[  753.947435][T17734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.955414][T17734] R13: 0000000000000000 R14: 00007f3283d76080 R15: 00007ffd348ebdc8
[  753.963401][T17734]  </TASK>
[  753.972151][T17734] ERROR: Out of memory at tomoyo_realpath_from_path.
[  754.621127][ T7070] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  754.852574][T17748] FAULT_INJECTION: forcing a failure.
[  754.852574][T17748] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  754.881072][ T7070] usb 7-1: device descriptor read/64, error -71
[  754.891259][T17748] CPU: 0 UID: 0 PID: 17748 Comm: syz.4.3367 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  754.902098][T17748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  754.912195][T17748] Call Trace:
[  754.915509][T17748]  <TASK>
[  754.918471][T17748]  dump_stack_lvl+0x241/0x360
[  754.923192][T17748]  ? __pfx_dump_stack_lvl+0x10/0x10
[  754.928430][T17748]  ? __pfx__printk+0x10/0x10
[  754.933060][T17748]  ? __pfx_lock_release+0x10/0x10
[  754.938128][T17748]  should_fail_ex+0x3b0/0x4e0
[  754.942861][T17748]  _copy_from_iter+0x1e9/0x1c20
[  754.947762][T17748]  ? kmem_cache_alloc_node_noprof+0x22c/0x380
[  754.953874][T17748]  ? __alloc_skb+0x28f/0x440
[  754.958508][T17748]  ? __pfx__copy_from_iter+0x10/0x10
[  754.963845][T17748]  ? __virt_addr_valid+0x183/0x530
[  754.969012][T17748]  ? __virt_addr_valid+0x183/0x530
[  754.974170][T17748]  ? __virt_addr_valid+0x45f/0x530
[  754.979582][T17748]  ? __phys_addr_symbol+0x2f/0x70
[  754.984627][T17748]  ? __check_object_size+0x47a/0x730
[  754.989974][T17748]  netlink_sendmsg+0x73d/0xcb0
[  754.994763][T17748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  755.000085][T17748]  ? lock_release+0xbf/0xa30
[  755.004691][T17748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  755.009985][T17748]  __sock_sendmsg+0x221/0x270
[  755.014687][T17748]  ____sys_sendmsg+0x52a/0x7e0
[  755.019470][T17748]  ? __pfx_____sys_sendmsg+0x10/0x10
[  755.024764][T17748]  ? __fget_files+0x2a/0x410
[  755.029364][T17748]  ? __fget_files+0x2a/0x410
[  755.033965][T17748]  __sys_sendmsg+0x269/0x350
[  755.038573][T17748]  ? __pfx_lock_release+0x10/0x10
[  755.043695][T17748]  ? __pfx___sys_sendmsg+0x10/0x10
[  755.048821][T17748]  ? __pfx_vfs_write+0x10/0x10
[  755.053612][T17748]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  755.059979][T17748]  ? rcu_is_watching+0x15/0xb0
[  755.064797][T17748]  ? rcu_is_watching+0x15/0xb0
[  755.069577][T17748]  do_syscall_64+0xf3/0x230
[  755.074100][T17748]  ? clear_bhb_loop+0x35/0x90
[  755.078786][T17748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.084695][T17748] RIP: 0033:0x7f2c90585d29
[  755.089119][T17748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  755.108736][T17748] RSP: 002b:00007f2c91351038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  755.117162][T17748] RAX: ffffffffffffffda RBX: 00007f2c90775fa0 RCX: 00007f2c90585d29
[  755.125142][T17748] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  755.133119][T17748] RBP: 00007f2c91351090 R08: 0000000000000000 R09: 0000000000000000
[  755.141097][T17748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  755.149074][T17748] R13: 0000000000000000 R14: 00007f2c90775fa0 R15: 00007ffd1714bde8
[  755.157061][T17748]  </TASK>
[  755.308532][ T9952] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  755.407985][ T7070] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  755.629539][ T9952] usb 6-1: Using ep0 maxpacket: 16
[  756.028099][ T9952] usb 6-1: config index 0 descriptor too short (expected 57380, got 36)
[  756.037355][ T9952] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  756.047982][ T9952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  756.058310][ T9952] usb 6-1: config 0 interface 0 has no altsetting 0
[  756.078571][ T9952] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  756.088686][ T9952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.264773][ T9952] usb 6-1: config 0 descriptor??
[  756.314146][ T7070] usb 7-1: device descriptor read/64, error -71
[  756.427986][ T7070] usb usb7-port1: attempt power cycle
[  757.089167][T17772] delete_channel: no stack
[  757.144269][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.200445][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.208638][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.216032][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.225512][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.233566][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.273736][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.307807][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.320572][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.361343][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.369654][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x3
[  757.383886][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.422501][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.437488][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.472331][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.491051][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.502017][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.512176][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.522440][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.530940][ T9952] steelseries 0003:1038:1410.0016: unknown main item tag 0x0
[  757.540387][ T9952] steelseries 0003:1038:1410.0016: unexpected long global item
[  757.549299][ T9952] steelseries 0003:1038:1410.0016: parse failed
[  757.560729][ T9952] steelseries 0003:1038:1410.0016: probe with driver steelseries failed with error -22
[  757.562911][ T9952] usb 6-1: USB disconnect, device number 16
[  758.339433][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3384'.
[  758.758167][ T9952] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  759.186012][T17811] tmpfs: Unknown parameter '��A�'
[  759.199935][ T9952] usb 6-1: unable to get BOS descriptor or descriptor too short
[  759.217332][ T9952] usb 6-1: unable to read config index 0 descriptor/start: -71
[  759.241723][ T9952] usb 6-1: can't read configurations, error -71
[  759.750127][T17820] Process accounting resumed
[  759.827835][ T5822] Bluetooth: hci0: command 0x0406 tx timeout
[  761.628306][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  761.634921][ T5841] Bluetooth: Wrong link type (-22)
[  761.640203][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x10
[  761.646784][ T5841] Bluetooth: Wrong link type (-22)
[  761.652309][ T5841] Bluetooth: hci3: link tx timeout
[  761.657465][ T5841] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  761.665500][ T5841] Bluetooth: hci3: link tx timeout
[  761.671053][ T5841] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  762.677840][ T9952] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  762.761924][T17873] Process accounting resumed
[  762.951607][ T9952] usb 7-1: Using ep0 maxpacket: 8
[  763.108015][ T9952] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  763.172957][ T9952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9
[  763.210837][ T9952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024
[  763.242519][ T9952] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  763.264505][ T9952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.294912][ T9952] usb 7-1: Product: syz
[  763.313622][ T9952] usb 7-1: Manufacturer: syz
[  763.327449][ T9952] usb 7-1: SerialNumber: syz
[  763.340940][ T9952] usb 7-1: config 0 descriptor??
[  763.373156][T17884] veth3: entered promiscuous mode
[  763.546513][T17892] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3411'.
[  763.564822][ T9952] rc_core: IR keymap rc-streamzap not found
[  763.581275][ T9952] Registered IR keymap rc-empty
[  763.667986][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  763.675092][ T5841] Bluetooth: Wrong link type (-22)
[  763.680672][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x10
[  763.687604][ T5841] Bluetooth: Wrong link type (-22)
[  763.693381][ T5841] Bluetooth: hci2: link tx timeout
[  763.737795][ T5841] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  763.907968][T15358] Bluetooth: hci3: command 0x0406 tx timeout
[  764.022804][ T9952] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  764.035074][ T9952] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input40
[  764.047454][ T9953] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  764.060066][ T9952] usb 7-1: USB disconnect, device number 15
[  764.216173][ T9953] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  764.303179][ T9953] usb 6-1: config 0 has no interface number 0
[  764.318247][ T9953] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  764.333409][ T9953] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  764.345575][ T9953] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  764.356807][ T9953] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  764.380401][ T9953] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  764.546188][ T9953] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  764.738583][ T9953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.756836][T17914] Process accounting resumed
[  764.811969][ T9953] usb 6-1: config 0 descriptor??
[  764.859791][ T9953] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  765.177918][ T9953] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  765.347129][ T9953] usb 5-1: Using ep0 maxpacket: 16
[  765.373897][ T9953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  765.854159][T17886] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3409'.
[  765.863457][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  765.874012][T17886] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[  765.881045][ T9953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  765.892172][ T9953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  765.901919][ T9953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  765.911655][ T9953] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  765.927836][T11444] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  765.947624][T11443] usb 6-1: USB disconnect, device number 19
[  765.960275][ T9953] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  765.961661][T11443] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  765.970264][ T9953] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  765.984502][ T9953] usb 5-1: Manufacturer: syz
[  765.999114][ T5841] Bluetooth: hci3: command 0x0406 tx timeout
[  766.006968][ T9953] usb 5-1: config 0 descriptor??
[  766.077888][T11444] usb 7-1: Using ep0 maxpacket: 16
[  766.084623][T11444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  766.109930][T11444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  766.121921][T11444] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  766.338991][T11444] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.352824][T11444] usb 7-1: config 0 descriptor??
[  766.715139][T17943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.738023][T17943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.770414][T11444] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x0
[  766.780400][T17945] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3426'.
[  766.798964][T11444] konepure 0003:1E7D:2DB4.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.6-1/input0
[  770.070473][T11444] usb 7-1: USB disconnect, device number 16
[  771.387063][ T5822] Bluetooth: hci2: command 0x0406 tx timeout
[  771.427747][ T9953] rc_core: IR keymap rc-hauppauge not found
[  771.433723][ T9953] Registered IR keymap rc-empty
[  771.438740][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  771.459955][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  771.494117][ T9953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  771.517342][ T9953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input41
[  771.573593][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3434'.
[  771.589798][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  771.629923][T17970] Process accounting resumed
[  771.934980][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  772.027998][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  772.047803][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  772.069120][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  772.087861][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  772.130713][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  772.163968][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  772.199399][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  772.354245][ T9953] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  772.408015][ T9952] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  772.477090][ T9953] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  772.544294][ T9953] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  772.593773][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3438'.
[  772.603572][ T9952] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  772.611903][ T9952] usb 6-1: config 0 has no interface number 0
[  772.625638][ T9953] usb 5-1: USB disconnect, device number 72
[  772.632026][ T9952] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  772.655012][ T9952] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  772.676691][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3441'.
[  772.712437][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'.
[  772.716145][ T9952] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  772.764684][ T9952] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  772.782877][ T9952] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  772.796102][ T9952] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  772.805301][ T9952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.817221][ T9952] usb 6-1: config 0 descriptor??
[  772.839070][ T9952] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  773.073411][T17978] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3436'.
[  773.130902][T18007] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3443'.
[  773.221477][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3443'.
[  773.547973][T18011] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[  773.584308][T11444] usb 6-1: USB disconnect, device number 20
[  773.592371][T11444] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  773.853947][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  773.907885][ T9953] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  773.949800][ T5841] Bluetooth: Wrong link type (-22)
[  773.955426][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x10
[  773.962330][ T5841] Bluetooth: Wrong link type (-22)
[  773.968162][ T5841] Bluetooth: hci6: link tx timeout
[  773.973572][ T5841] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  774.427310][ T9953] usb 5-1: Using ep0 maxpacket: 16
[  774.435928][ T9953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.623709][ T5822] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  774.942202][ T9953] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  774.951453][ T9953] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  774.960610][ T9953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.198681][ T9953] usb 5-1: config 0 descriptor??
[  776.124263][T18036] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3453'.
[  776.316325][ T5841] Bluetooth: hci6: command 0x0405 tx timeout
[  776.496157][T11444] usb 5-1: USB disconnect, device number 73
[  776.838516][T18047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  776.845909][T18047] IPv6: NLM_F_CREATE should be set when creating new route
[  776.853152][T18047] IPv6: NLM_F_CREATE should be set when creating new route
[  776.947613][T18053] usb usb1: check_ctrlrecip: process 18053 (syz.7.3460) requesting ep 01 but needs 81
[  776.964785][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3455'.
[  776.974063][T18053] usb usb1: usbfs: process 18053 (syz.7.3460) did not claim interface 0 before use
[  777.327794][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  777.337878][ T5841] Bluetooth: Wrong link type (-22)
[  777.345594][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x10
[  777.356043][ T5841] Bluetooth: Wrong link type (-22)
[  777.428037][ T7070] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  777.588027][ T7070] usb 6-1: Using ep0 maxpacket: 32
[  777.660221][ T7070] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  778.100306][ T7070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.108563][ T7070] usb 6-1: Product: syz
[  778.112798][ T7070] usb 6-1: Manufacturer: syz
[  778.117435][ T7070] usb 6-1: SerialNumber: syz
[  778.164212][ T7070] usb 6-1: config 0 descriptor??
[  778.173726][ T7070] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  778.381627][ T7070] gspca_ov534_9: reg_w failed -71
[  779.961825][ T7070] gspca_ov534_9: Unknown sensor 0000
[  779.961886][ T7070] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[  780.020180][ T7070] usb 6-1: USB disconnect, device number 21
[  780.867926][ T7070] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  780.899581][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'.
[  781.469114][T18142] Process accounting resumed
[  781.501532][T18120] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3479'.
[  781.612653][ T7070] usb 5-1: unable to get BOS descriptor or descriptor too short
[  781.622536][ T7070] usb 5-1: unable to read config index 0 descriptor/start: -71
[  781.635726][ T7070] usb 5-1: can't read configurations, error -71
[  782.190941][T18146] Process accounting resumed
[  782.263745][T18153] trusted_key: encrypted_key: insufficient parameters specified
[  782.622425][ T9958] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  782.961431][ T9958] usb 7-1: config 0 has an invalid interface number: 43 but max is 0
[  782.979135][ T9958] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  783.008105][ T9958] usb 7-1: config 0 has no interface number 0
[  783.014748][ T9958] usb 7-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=80.90
[  783.024033][ T9958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.054091][ T9958] usb 7-1: config 0 descriptor??
[  783.225320][ T9958] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[  783.236031][ T9958] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  784.424720][T18179] netlink: 'syz.7.3496': attribute type 2 has an invalid length.
[  784.446876][T11444] kernel write not supported for file /snd/seq (pid: 11444 comm: kworker/0:17)
[  784.713774][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  784.758639][ T9958] usb 7-1: USB disconnect, device number 17
[  784.827623][T18185] Process accounting resumed
[  785.150820][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  785.444879][T18195] ntfs3(nullb0): Primary boot signature is not NTFS.
[  785.452234][T18195] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  785.469902][T18195] bridge0: port 3(erspan0) entered blocking state
[  785.476733][T18195] bridge0: port 3(erspan0) entered disabled state
[  785.484130][T18195] erspan0: entered allmulticast mode
[  785.494097][T18195] erspan0: entered promiscuous mode
[  785.500824][T18195] bridge0: port 3(erspan0) entered blocking state
[  785.507351][T18195] bridge0: port 3(erspan0) entered forwarding state
[  786.274414][T18205] overlayfs: conflicting options: userxattr,redirect_dir=on
[  788.963579][T18226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  788.970930][T18226] IPv6: NLM_F_CREATE should be set when creating new route
[  788.978416][T18226] IPv6: NLM_F_CREATE should be set when creating new route
[  789.174840][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3513'.
[  789.612722][T18249] random: crng reseeded on system resumption
[  790.824378][T18256] vlan2: entered promiscuous mode
[  790.830130][T18256] vlan2: entered allmulticast mode
[  790.970314][T18254] random: crng reseeded on system resumption
[  790.991907][T18266] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3521'.
[  791.968732][T18279] dccp_invalid_packet: pskb_may_pull failed
[  792.238055][ T9958] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  792.517834][ T9958] usb 2-1: Using ep0 maxpacket: 32
[  792.524508][ T9958] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  792.536841][ T9958] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  792.546568][ T9958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.689300][T18287] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3526'.
[  792.965539][T18293] random: crng reseeded on system resumption
[  793.347956][ T9958] usb 2-1: Product: syz
[  793.352350][ T9958] usb 2-1: Manufacturer: syz
[  793.356991][ T9958] usb 2-1: SerialNumber: syz
[  793.374625][ T9958] usb 2-1: config 0 descriptor??
[  793.390771][ T9958] usb 2-1: bad CDC descriptors
[  793.397306][ T9958] usb 2-1: unsupported MDLM descriptors
[  793.612874][ T9958] usb 2-1: USB disconnect, device number 62
[  793.676607][T18301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  793.776633][T18303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  794.661542][T18314] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3535'.
[  794.980594][T18333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  794.987962][T18333] IPv6: NLM_F_CREATE should be set when creating new route
[  794.995221][T18333] IPv6: NLM_F_CREATE should be set when creating new route
[  795.257906][ T5966] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  795.423601][ T5966] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  795.433285][ T5966] usb 6-1: config 0 has no interface number 0
[  795.527925][ T5966] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  795.715363][ T5966] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  795.798567][ T5966] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  796.120039][ T5966] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  796.146609][ T5966] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  796.262972][ T5966] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  796.293137][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.451456][ T5966] usb 6-1: config 0 descriptor??
[  796.474702][ T5966] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  796.869174][T18329] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3541'.
[  796.878927][T18329] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[  796.895251][ T7070] usb 6-1: USB disconnect, device number 22
[  796.902984][ T7070] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  796.924079][T18364] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3551'.
[  799.347263][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3561'.
[  799.521942][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3560'.
[  800.982242][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3565'.
[  802.452711][T18424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  802.598020][T11443] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  803.493798][T18435] overlayfs: failed to resolve './file0': -2
[  804.037266][T11443] usb 2-1: Using ep0 maxpacket: 32
[  804.065520][T11443] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  804.087087][T11443] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[  804.472114][T11443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.480462][T11443] usb 2-1: Product: syz
[  804.484690][T11443] usb 2-1: Manufacturer: syz
[  804.489394][T11443] usb 2-1: SerialNumber: syz
[  804.506457][T11443] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input42
[  804.727937][ T9953] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  804.815423][ T5181] bcm5974 2-1:1.0: could not read from device
[  804.815720][T11443] usb 2-1: USB disconnect, device number 63
[  805.749936][ T5841] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  805.963592][ T9953] usb 7-1: unable to read config index 0 descriptor/start: -61
[  805.971720][ T9953] usb 7-1: can't read configurations, error -61
[  806.897411][ T9953] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  807.580220][ T9953] usb 7-1: unable to read config index 0 descriptor/start: -71
[  807.588439][ T9953] usb 7-1: can't read configurations, error -71
[  807.611083][ T9953] usb usb7-port1: attempt power cycle
[  807.908708][T18486] 9pnet_fd: Insufficient options for proto=fd
[  807.976794][T18493] netlink: 1304 bytes leftover after parsing attributes in process `syz.6.3590'.
[  808.235624][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3594'.
[  808.372901][T18500] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3593'.
[  808.538332][ T5966] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  808.744022][ T5966] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  808.923223][ T5966] usb 2-1: config 0 has no interface number 0
[  808.929507][ T5966] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  808.940935][ T5966] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  808.954122][ T5966] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  808.963805][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  808.965849][ T5966] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  808.973807][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  808.983370][ T5966] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  809.002750][ T5966] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  809.012097][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.026528][ T5966] usb 2-1: config 0 descriptor??
[  809.066997][ T5966] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  809.598636][T18511] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3598'.
[  809.660649][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'.
[  809.785787][T18516] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3595'.
[  809.798103][T18516] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90
[  811.090843][ T9925] usb 2-1: USB disconnect, device number 64
[  811.101186][ T9925] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  812.286750][T18558] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3611'.
[  812.380582][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3611'.
[  812.497517][ T5966] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  812.710242][ T5966] usb 2-1: Using ep0 maxpacket: 32
[  812.780323][ T5966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  812.791324][ T5966] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00
[  812.802157][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.806452][T18563] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3613'.
[  812.819331][ T5966] usb 2-1: config 0 descriptor??
[  812.828400][ T5966] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  812.837592][ T5966] usb 2-1: Detected SIO
[  812.843789][ T5966] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  813.002559][T11443] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  813.572635][ T9953] usb 2-1: USB disconnect, device number 65
[  813.588863][ T9953] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  813.621824][ T9953] ftdi_sio 2-1:0.0: device disconnected
[  813.645635][T11443] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  813.675988][T11443] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  813.698231][T11443] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  813.716058][T11443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.792554][T18557] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  813.805502][T11443] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  815.097126][ T9953] usb 5-1: USB disconnect, device number 76
[  815.307966][ T5966] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  815.323012][ T5822] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1
[  815.479449][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  815.503058][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  815.515311][ T5966] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  815.526431][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.540380][ T5966] usb 2-1: config 0 descriptor??
[  815.790413][T18606] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3626'.
[  815.954467][ T5966] usbhid 2-1:0.0: can't add hid device: -32
[  815.963340][ T5966] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  816.273459][ T9958] usb 2-1: USB disconnect, device number 66
[  816.308272][ T5822] Bluetooth: hci6: command 0x0405 tx timeout
[  816.471319][T18615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  816.698178][ T5966] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  819.706292][ T5966] usb 7-1: unable to read config index 0 descriptor/all
[  819.719434][ T5966] usb 7-1: can't read configurations, error -71
[  819.811710][T18653] dccp_invalid_packet: pskb_may_pull failed
[  819.882635][T18650] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3639'.
[  819.924471][T18661] netlink: 'syz.4.3640': attribute type 4 has an invalid length.
[  819.972176][T18661] Dead loop on virtual device ip6_vti0, fix it urgently!
[  820.107336][T18670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  820.116308][T18670] IPv6: NLM_F_CREATE should be set when creating new route
[  820.398449][   T29] audit: type=1326 audit(2000000158.560:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3283b85d29 code=0x7ffc0000
[  820.418179][T18661] Dead loop on virtual device ip6_vti0, fix it urgently!
[  820.429246][   T29] audit: type=1326 audit(2000000158.570:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3283b85d29 code=0x7ffc0000
[  820.500208][   T29] audit: type=1326 audit(2000000158.570:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f3283b85d29 code=0x7ffc0000
[  820.529854][    C1] vkms_vblank_simulate: vblank timer overrun
[  820.563781][   T29] audit: type=1326 audit(2000000158.570:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3283b85d29 code=0x7ffc0000
[  821.767924][   T29] audit: type=1326 audit(2000000158.570:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3283b85d29 code=0x7ffc0000
[  821.830442][   T29] audit: type=1326 audit(2000000158.600:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3283b84690 code=0x7ffc0000
[  821.857374][   T29] audit: type=1326 audit(2000000158.600:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3283b85d29 code=0x7ffc0000
[  821.882614][   T29] audit: type=1326 audit(2000000158.600:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3283b85d29 code=0x7ffc0000
[  821.920026][   T29] audit: type=1326 audit(2000000158.640:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3283b85d29 code=0x7ffc0000
[  821.949227][   T29] audit: type=1326 audit(2000000158.650:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18663 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3283b85d29 code=0x7ffc0000
[  822.859802][ T9953] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  823.350589][T18705] dccp_invalid_packet: pskb_may_pull failed
[  823.609163][ T9953] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  823.637391][ T9953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  823.738828][ T5841] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  823.783624][ T9953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  823.796786][ T9953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9411, setting to 1024
[  824.208870][ T9953] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  824.219451][ T9953] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  825.260033][ T9953] usb 2-1: Product: syz
[  825.277408][ T9953] usb 2-1: Manufacturer: syz
[  825.428023][T18727] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3657'.
[  825.440915][T18727] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  825.898652][ T9953] usb 2-1: can't set config #1, error -71
[  825.909093][ T9953] usb 2-1: USB disconnect, device number 67
[  826.129370][T18737] ISOFS: Unable to identify CD-ROM format.
[  827.163125][ T9925] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  827.279115][T18758] netlink: 'syz.1.3667': attribute type 25 has an invalid length.
[  827.288224][T18758] netlink: 'syz.1.3667': attribute type 1 has an invalid length.
[  827.297222][T18758] bridge0: port 1(bridge_slave_0) entered learning state
[  827.374987][T18762] netlink: 'syz.4.3669': attribute type 25 has an invalid length.
[  827.387868][T18762] netlink: 'syz.4.3669': attribute type 1 has an invalid length.
[  827.397272][T18762] bridge0: port 1(bridge_slave_0) entered learning state
[  827.442781][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3671'.
[  827.522130][T18766] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  827.733591][ T9925] usb 6-1: config 0 has an invalid interface number: 120 but max is 0
[  828.422092][ T9925] usb 6-1: config 0 has no interface number 0
[  828.429096][ T9925] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 51141, setting to 1024
[  828.442161][ T9925] usb 6-1: config 0 interface 120 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024
[  828.453963][ T9925] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  828.464285][ T9925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.481700][ T9925] usb 6-1: config 0 descriptor??
[  828.487558][T18756] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  828.516209][ T9925] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input43
[  828.732417][T18756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  828.747400][T18756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  828.838619][T18786] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3675'.
[  829.463290][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3675'.
[  829.525339][    C0] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1
[  829.573755][ T9958] usb 6-1: USB disconnect, device number 23
[  829.573811][    C1] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19
[  829.721469][T18794] dccp_invalid_packet: pskb_may_pull failed
[  830.548377][ T9958] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  830.805121][ T9958] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  830.832912][ T9958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  830.917754][ T9958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  830.955348][ T9958] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  831.008825][ T9958] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  831.021710][T18814] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3684'.
[  831.023060][ T9958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  831.054104][ T9958] usb 6-1: config 0 descriptor??
[  831.347826][ T5966] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  831.744416][ T9958] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  831.785243][ T9958] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[  831.858668][ T9958] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  831.943994][ T5966] usb 2-1: device descriptor read/64, error -71
[  831.970489][ T9958] usb 6-1: USB disconnect, device number 24
[  832.187911][ T5966] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  832.255623][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.265108][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.272941][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.280402][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.289527][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.297883][ T9925] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  832.302085][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.313246][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.321204][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.329166][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.336294][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.344117][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.351586][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.358607][ T5966] usb 2-1: device descriptor read/64, error -71
[  832.360374][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.372394][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.380017][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.387503][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.394544][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.401950][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.409549][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.417080][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.424167][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.431925][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.439490][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.446686][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.448508][ T9925] usb 5-1: Using ep0 maxpacket: 16
[  832.454868][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.468895][ T5966] usb usb2-port1: attempt power cycle
[  832.469815][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.482473][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.485231][ T9925] usb 5-1: config 0 interface 0 has no altsetting 0
[  832.489718][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.504455][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.512286][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.519838][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.530480][ T9925] usb 5-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49
[  832.540706][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.548392][ T9925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.557065][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.563873][ T9925] usb 5-1: Product: syz
[  832.568236][ T9925] usb 5-1: Manufacturer: syz
[  832.573176][ T9925] usb 5-1: SerialNumber: syz
[  832.579760][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.586927][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.595726][ T9925] usb 5-1: config 0 descriptor??
[  832.602608][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.611595][ T9925] ipheth 5-1:0.0: Unable to find endpoints
[  832.619825][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.629198][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.636562][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.645055][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.653299][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.664657][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.671699][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.678938][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.686038][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.693150][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.700256][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.707128][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.721678][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.729562][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.738153][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.745542][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.752896][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.759948][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.770138][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.779522][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.794989][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.802124][T11443] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  832.804295][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.817153][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.824639][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.832264][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.837885][ T5966] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  832.840304][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  832.902325][T18841] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3691'.
[  832.994112][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3691'.
[  833.307027][T18829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3687'.
[  833.331773][T18829] netlink: 'syz.4.3687': attribute type 1 has an invalid length.
[  833.340109][T18829] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3687'.
[  833.489018][T18832] tmpfs: Unknown parameter 'grpquota_ide_hardlimit'
[  833.735263][T11443] usb 7-1: Using ep0 maxpacket: 8
[  833.748826][ T5966] usb 2-1: device descriptor read/8, error -71
[  833.782659][T11443] usb 7-1: config 0 has an invalid interface number: 128 but max is 0
[  833.792866][T11443] usb 7-1: config 0 has no interface number 0
[  833.822447][T11443] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  833.838284][ T9958] usb 5-1: USB disconnect, device number 77
[  833.897473][T11443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.906158][T11443] usb 7-1: Product: syz
[  833.910810][T11443] usb 7-1: Manufacturer: syz
[  833.915646][T11443] usb 7-1: SerialNumber: syz
[  833.940745][T11443] usb 7-1: config 0 descriptor??
[  834.044652][T11443] radio-usb-si4713 7-1:0.128: Si4713 development board discovered: (10C4:8244)
[  834.078052][ T5966] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  835.013113][ T5966] usb 2-1: device not accepting address 71, error -71
[  835.020639][ T5966] usb usb2-port1: unable to enumerate USB device
[  835.592318][T11443] radio-usb-si4713 7-1:0.128: probe with driver radio-usb-si4713 failed with error -71
[  835.603161][T11443] usbhid 7-1:0.128: couldn't find an input interrupt endpoint
[  835.628462][T11443] usb 7-1: USB disconnect, device number 23
[  836.351699][T18883] dccp_invalid_packet: pskb_may_pull failed
[  837.268075][ T9953] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  837.432377][ T9953] usb 6-1: Using ep0 maxpacket: 16
[  837.455774][ T9953] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  837.542034][ T9953] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  837.572160][ T9953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10
[  837.585362][ T9953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024
[  837.599287][ T9953] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  837.608905][ T9953] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  837.618284][ T9953] usb 6-1: Manufacturer: syz
[  837.632328][ T9953] usb 6-1: config 0 descriptor??
[  837.726621][T18887] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  837.908983][ T7084] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  837.933745][T18916] dccp_invalid_packet: pskb_may_pull failed
[  837.946138][ T9953] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  837.957205][ T9953] usb 6-1: USB disconnect, device number 25
[  838.034741][T18918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3717'.
[  838.071620][ T7084] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  838.092765][ T7084] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  838.117592][ T7084] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  838.127730][ T7084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.136279][ T7084] usb 5-1: Product: syz
[  838.146330][ T7084] usb 5-1: Manufacturer: syz
[  838.160590][ T7084] usb 5-1: SerialNumber: syz
[  838.263972][T18929] gfs2: gfs2 mount does not exist
[  838.399707][ T7084] usb 5-1: 0:2 : does not exist
[  838.423555][ T7084] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  838.449551][ T7084] usb 5-1: USB disconnect, device number 78
[  838.638425][T18640] udevd[18640]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  839.747999][ T9953] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  839.937453][ T9953] usb 2-1: Using ep0 maxpacket: 32
[  840.003394][ T9953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  840.029721][ T9953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  840.042577][ T9953] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  840.058121][ T9953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.103153][ T9953] usb 2-1: config 0 descriptor??
[  840.142478][ T9953] hub 2-1:0.0: USB hub found
[  840.351328][ T9953] hub 2-1:0.0: 1 port detected
[  840.716418][T18963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3731'.
[  840.957896][ T9958] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  841.057939][ T5966] usb 7-1: new low-speed USB device number 24 using dummy_hcd
[  841.137302][ T9958] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  841.153025][ T9958] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  841.167809][ T9953] hub 2-1:0.0: activate --> -90
[  841.174416][ T9958] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  841.189212][ T9958] usb 6-1: config 1 has no interface number 1
[  841.195923][ T9958] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  841.197781][ T5966] usb 7-1: device descriptor read/64, error -71
[  841.223383][ T9958] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  841.257460][ T9958] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  841.274060][ T9958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.299192][ T9958] usb 6-1: Product: syz
[  841.304544][ T9958] usb 6-1: Manufacturer: syz
[  841.314611][ T9958] usb 6-1: SerialNumber: syz
[  841.487864][ T5966] usb 7-1: new low-speed USB device number 25 using dummy_hcd
[  841.575970][T18962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.603845][T18962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.638176][ T5966] usb 7-1: device descriptor read/64, error -71
[  841.662422][ T9958] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  841.719795][ T9958] usb 6-1: USB disconnect, device number 26
[  841.769312][ T5966] usb usb7-port1: attempt power cycle
[  841.971091][T18643] udevd[18643]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  842.134276][ T5966] usb 7-1: new low-speed USB device number 26 using dummy_hcd
[  842.219136][ T5966] usb 7-1: device descriptor read/8, error -71
[  842.417512][ T7084] usb 2-1: USB disconnect, device number 72
[  842.455376][ T9953] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  842.527859][ T5966] usb 7-1: new low-speed USB device number 27 using dummy_hcd
[  842.561996][ T5966] usb 7-1: device descriptor read/8, error -71
[  842.688229][ T5966] usb usb7-port1: unable to enumerate USB device
[  843.651529][T19002] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3745'.
[  843.906026][T19010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  844.043078][T19015] syz.6.3749 (19015): /proc/19014/oom_adj is deprecated, please use /proc/19014/oom_score_adj instead.
[  844.557188][T19018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3746'.
[  844.661320][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'.
[  846.657746][ T9925] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  846.997718][ T9925] usb 6-1: Using ep0 maxpacket: 32
[  847.109607][ T9925] usb 6-1: unable to get BOS descriptor or descriptor too short
[  847.129466][ T9925] usb 6-1: config 7 has an invalid interface number: 187 but max is 0
[  847.187897][ T9925] usb 6-1: config 7 has no interface number 0
[  847.207871][ T9925] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947
[  847.234362][ T9925] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  847.257830][ T9925] usb 6-1: config 7 interface 187 has no altsetting 0
[  847.316388][ T9925] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  847.349023][ T9925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.381021][ T9925] usb 6-1: Product: syz
[  847.385717][ T9925] usb 6-1: Manufacturer: syz
[  847.417854][ T9925] usb 6-1: SerialNumber: syz
[  847.435222][T19047] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3758'.
[  847.458753][T19030] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  847.487340][T19030] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  847.748142][ T9925] usb 6-1: Cannot retrieve CPort count: -71
[  847.775104][ T9925] usb 6-1: Cannot retrieve CPort count: -71
[  847.806159][ T9925] es2_ap_driver 6-1:7.187: probe with driver es2_ap_driver failed with error -71
[  847.849054][ T9925] usb 6-1: USB disconnect, device number 27
[  850.932654][T19089] tmpfs: Unknown parameter '00000000000000000000000'
[  850.979583][T19089] netlink: 428 bytes leftover after parsing attributes in process `syz.7.3771'.
[  850.989011][T19089] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3771'.
[  851.928783][T19123] dccp_invalid_packet: pskb_may_pull failed
[  852.197845][ T7070] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  852.228092][ T7084] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  852.257429][   T29] kauditd_printk_skb: 42 callbacks suppressed
[  852.257453][   T29] audit: type=1326 audit(2000000190.420:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.297225][   T29] audit: type=1326 audit(2000000190.420:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.322685][   T29] audit: type=1326 audit(2000000190.440:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.348707][   T29] audit: type=1326 audit(2000000190.440:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.373725][   T29] audit: type=1326 audit(2000000190.440:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.378021][ T7070] usb 2-1: Using ep0 maxpacket: 16
[  852.401478][   T29] audit: type=1326 audit(2000000190.440:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.430038][ T9925] usb 7-1: new low-speed USB device number 28 using dummy_hcd
[  852.441183][ T7070] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  852.444537][   T29] audit: type=1326 audit(2000000190.440:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.459635][ T7070] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  852.475566][T19131] netlink: 'syz.5.3787': attribute type 10 has an invalid length.
[  852.497837][ T7070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.499552][   T29] audit: type=1326 audit(2000000190.440:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.516101][ T7070] usb 2-1: Product: syz
[  852.534219][   T29] audit: type=1326 audit(2000000190.440:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.543653][ T7070] usb 2-1: Manufacturer: syz
[  852.563568][   T29] audit: type=1326 audit(2000000190.440:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.5.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1b585d29 code=0x7ffc0000
[  852.593680][T19132] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3787'.
[  852.594931][T19131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  852.604409][T19132] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3787'.
[  852.615617][T19131] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  852.644786][ T7084] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  852.654671][ T7084] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  852.657902][ T7070] usb 2-1: SerialNumber: syz
[  852.670514][ T7084] usb 5-1: config 0 has no interface number 0
[  852.676964][ T7084] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  852.687166][ T7084] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  852.700185][ T7070] usb 2-1: config 0 descriptor??
[  852.709274][ T7070] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  852.718852][ T7070] usb 2-1: Detected FT232R
[  852.722427][ T9925] usb 7-1: config index 0 descriptor too short (expected 1307, got 27)
[  852.732998][ T9925] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  852.747124][ T9925] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  852.757289][ T7084] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  852.766863][ T7084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.775382][ T9925] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  852.787101][ T7084] usb 5-1: Product: syz
[  852.792004][ T7084] usb 5-1: Manufacturer: syz
[  852.798172][ T7084] usb 5-1: SerialNumber: syz
[  852.803459][ T9925] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  852.816441][ T9925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  852.828497][ T7084] usb 5-1: config 0 descriptor??
[  852.834670][ T9925] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  852.853359][ T9925] usb 7-1: string descriptor 0 read error: -22
[  852.859960][ T9925] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  852.869419][ T9925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.880334][ T9925] usb 7-1: config 0 descriptor??
[  852.886522][T19128] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[  852.896480][ T9925] hub 7-1:0.0: bad descriptor, ignoring hub
[  852.908837][ T9925] hub 7-1:0.0: probe with driver hub failed with error -5
[  852.909415][ T7070] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  852.922156][ T9925] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input46
[  853.003134][    C0] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -1
[  853.148568][ T7070] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  853.174935][T19124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  853.186303][T19139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  853.207459][T19124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  853.225224][ T7084] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71
[  853.245010][ T7084] usb 5-1: USB disconnect, device number 79
[  853.302247][ T9925] usb 7-1: USB disconnect, device number 28
[  853.917927][ T7084] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  854.184676][ T7084] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  854.226758][ T7084] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  854.274625][ T7084] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  854.309062][ T7084] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  854.323150][ T7084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.337986][ T7084] usb 5-1: config 0 descriptor??
[  854.864540][ T7084] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  854.877074][T19161] vivid-000: disconnect
[  854.886139][ T7084] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving
[  854.923411][ T9925] usb 2-1: USB disconnect, device number 73
[  854.934057][ T9925] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  854.946540][ T7084] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  854.967142][ T9925] ftdi_sio 2-1:0.0: device disconnected
[  854.995501][T19155] vivid-000: reconnect
[  855.349282][T19171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.352338][T19175] JFS: discard option not supported on device
[  855.365970][T19175] syz.5.3800: attempt to access beyond end of device
[  855.365970][T19175] loop5: rw=0, sector=64, nr_sectors = 8 limit=0
[  855.381389][T19175] syz.5.3800: attempt to access beyond end of device
[  855.381389][T19175] loop5: rw=0, sector=120, nr_sectors = 8 limit=0
[  855.397469][T19175] Mount JFS Failure: -5
[  855.402590][T19175] jfs_mount failed w/return code = -5
[  855.498620][T19171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  856.207845][ T9953] usb 5-1: reset high-speed USB device number 80 using dummy_hcd
[  856.373974][T19188] Process accounting resumed
[  856.790520][T19203] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  856.790520][T19203] The task syz.4.3807 (19203) triggered the difference, watch for misbehavior.
[  857.069742][T19212] overlayfs: failed to resolve './bus/file0': -2
[  857.674119][ T7070] usb 5-1: USB disconnect, device number 80
[  857.947902][ T9958] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  858.080180][T19226] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  858.653250][T19228] ptrace attach of ""[19229] was attempted by "./syz-executor exec"[19228]
[  858.697975][ T9958] usb 7-1: device descriptor read/64, error -71
[  858.948071][ T9958] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  859.087790][ T9958] usb 7-1: device descriptor read/64, error -71
[  859.216371][ T9958] usb usb7-port1: attempt power cycle
[  859.407201][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3818'.
[  859.588361][ T9958] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  859.657168][ T9958] usb 7-1: device descriptor read/8, error -71
[  859.937967][ T9958] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  860.022544][ T9958] usb 7-1: device descriptor read/8, error -71
[  860.179884][ T9958] usb usb7-port1: unable to enumerate USB device
[  861.537747][ T9925] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  861.698406][ T9925] usb 5-1: Using ep0 maxpacket: 8
[  861.730957][ T9925] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  861.748001][ T9925] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[  861.777857][ T9925] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  861.818537][ T9925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.840203][T19272] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  864.082223][T19299] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3838'.
[  864.197421][ T9925] usb 5-1: string descriptor 0 read error: -71
[  864.206018][ T9925] hub 5-1:32.0: USB hub found
[  865.438934][ T9925] hub 5-1:32.0: config failed, can't read hub descriptor (err -22)
[  866.729345][ T9925] usb 5-1: USB disconnect, device number 81
[  870.386359][T19355] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3854'.
[  870.400801][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  870.408919][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  872.313162][T19380] dccp_invalid_packet: pskb_may_pull failed
[  872.741681][ T7070] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  873.149164][ T7070] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  873.160608][ T7070] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  873.175511][ T7070] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  873.200261][ T7070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.243414][T19387] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  873.255396][ T7070] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  873.475512][ T7070] usb 5-1: USB disconnect, device number 82
[  873.697787][ T9925] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  873.897821][ T9952] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  873.908127][ T9925] usb 7-1: Using ep0 maxpacket: 32
[  873.941145][ T9925] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  873.954093][ T9925] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  874.068082][ T9952] usb 6-1: Using ep0 maxpacket: 8
[  874.086549][ T9925] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  874.087160][ T9952] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  874.122586][ T9952] usb 6-1: unable to read config index 0 descriptor/start: -61
[  874.130738][ T9952] usb 6-1: can't read configurations, error -61
[  874.218470][ T9925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.246400][ T9925] usb 7-1: Product: syz
[  874.257770][ T9925] usb 7-1: Manufacturer: syz
[  874.263062][ T9925] usb 7-1: SerialNumber: syz
[  874.278476][ T9952] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  874.422765][T19430] IPv6: sit1: Disabled Multicast RS
[  874.437805][ T9952] usb 6-1: Using ep0 maxpacket: 8
[  874.445932][ T9952] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  874.466574][ T9952] usb 6-1: unable to read config index 0 descriptor/start: -61
[  874.486390][ T9952] usb 6-1: can't read configurations, error -61
[  874.497235][T19402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.515204][T19402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  874.536294][ T9925] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  874.550744][ T9925] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  874.574868][ T9952] usb usb6-port1: attempt power cycle
[  874.599342][ T9925] usb 7-1: USB disconnect, device number 33
[  874.709023][T19434] fuse: Bad value for 'group_id'
[  874.714453][T19434] fuse: Bad value for 'group_id'
[  875.183274][T19440] netlink: 'syz.1.3884': attribute type 12 has an invalid length.
[  875.378138][T18640] udevd[18640]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  875.418429][ T9952] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  875.467309][ T9952] usb 6-1: Using ep0 maxpacket: 8
[  875.481356][ T9952] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  875.494619][ T9952] usb 6-1: unable to read config index 0 descriptor/start: -61
[  875.510669][ T9952] usb 6-1: can't read configurations, error -61
[  875.791503][T19454] libceph: resolve 'c' (ret=-3): failed
[  875.922081][ T9952] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  875.949298][ T9952] usb 6-1: Using ep0 maxpacket: 8
[  875.955277][ T9952] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  875.971329][ T9952] usb 6-1: unable to read config index 0 descriptor/start: -61
[  875.986855][ T9952] usb 6-1: can't read configurations, error -61
[  876.022317][ T9952] usb usb6-port1: unable to enumerate USB device
[  877.367794][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  877.367819][   T29] audit: type=1326 audit(2000000215.470:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19485 comm="syz.4.3896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c90585d29 code=0x0
[  878.047952][ T9952] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  878.419585][ T9952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  878.433989][ T9952] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d
[  878.444743][ T9952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.472818][ T9952] usb 5-1: config 0 descriptor??
[  878.484654][ T9952] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  878.492325][ T9952] command write [95] error -22
[  878.572305][T19522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  878.947617][T19526] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3906'.
[  879.404742][T19535] vxcan3: entered promiscuous mode
[  879.431525][T19535] vxcan3: entered allmulticast mode
[  879.897244][ T5966] usb 5-1: USB disconnect, device number 83
[  879.977750][ T9925] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  880.018338][T19572] netlink: 'syz.5.3918': attribute type 1 has an invalid length.
[  880.127782][ T9925] usb 2-1: Using ep0 maxpacket: 16
[  880.187501][ T9925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  880.210705][ T9925] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  880.229875][T19580] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3920'.
[  880.251258][ T9925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.288479][ T9925] usb 2-1: config 0 descriptor??
[  880.333392][ T9925] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47
[  880.621808][ T5181] bcm5974 2-1:0.0: could not read from device
[  880.651608][ T5181] bcm5974 2-1:0.0: could not read from device
[  880.661899][ T5181] bcm5974 2-1:0.0: could not read from device
[  880.670883][ T9925] usb 2-1: USB disconnect, device number 74
[  880.690867][ T5181] bcm5974 2-1:0.0: could not read from device
[  880.736428][T18984] bcm5974 2-1:0.0: could not read from device
[  880.752781][T19608] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3927'.
[  880.762502][ T9952] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  880.928380][ T9952] usb 5-1: Using ep0 maxpacket: 32
[  880.944887][ T9952] usb 5-1: config 0 has an invalid interface number: 9 but max is 0
[  880.955605][ T9952] usb 5-1: config 0 has no interface number 0
[  880.969469][ T9952] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  880.992716][ T9952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.030390][ T9952] usb 5-1: Product: syz
[  881.049400][ T9952] usb 5-1: Manufacturer: syz
[  881.056220][ T9952] usb 5-1: SerialNumber: syz
[  881.108487][ T9952] usb 5-1: config 0 descriptor??
[  881.187807][ T5966] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  881.230121][ T9952] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  881.353098][ T5966] usb 6-1: New USB device found, idVendor=07ca, idProduct=a835, bcdDevice=21.fa
[  881.366662][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.588125][ T5966] usb 6-1: config 0 descriptor??
[  881.598675][ T7070] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  881.752650][ T5966] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  881.805903][ T5966] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  881.812248][ T7070] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  882.021600][ T7070] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  882.329359][ T7070] usb 7-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f
[  882.347550][ T7070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.367318][ T7070] usb 7-1: Product: syz
[  882.371792][ T7070] usb 7-1: Manufacturer: syz
[  882.377216][ T7070] usb 7-1: SerialNumber: syz
[  882.397525][ T7070] usb 7-1: config 0 descriptor??
[  882.748662][ T9952] gspca_topro: reg_w err -110
[  882.779893][ T9952] gspca_topro: Sensor soi763a
[  882.933235][T19624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.948590][T19624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  883.019717][ T9925] usb 5-1: USB disconnect, device number 84
[  883.663625][T19655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3934'.
[  883.731258][T19658] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3935'.
[  883.789967][ T9952] usb 6-1: USB disconnect, device number 32
[  884.226269][T19673] dccp_invalid_packet: pskb_may_pull failed
[  884.279333][T19675] netlink: 'syz.4.3941': attribute type 25 has an invalid length.
[  884.287446][T19675] netlink: 'syz.4.3941': attribute type 1 has an invalid length.
[  884.298114][T19675] bridge0: port 1(bridge_slave_0) entered learning state
[  884.392825][ T7070] usb 7-1: USB disconnect, device number 34
[  884.602555][T18640] udevd[18640]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  885.286494][T19697] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3949'.
[  885.315340][T19698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3948'.
[  885.694643][T19701] Bluetooth: MGMT ver 1.23
[  885.817895][ T5822] Bluetooth: hci6: command 0x0405 tx timeout
[  885.933421][T19702] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  886.361630][T19725] netlink: 832 bytes leftover after parsing attributes in process `syz.1.3954'.
[  886.450020][T19725] infiniband syz2: set active
[  886.455238][T19725] infiniband syz2: added team_slave_1
[  886.501204][T19725] RDS/IB: syz2: added
[  886.505328][T19725] smc: adding ib device syz2 with port count 1
[  886.511852][T19725] smc:    ib device syz2 port 1 has pnetid 
[  887.078230][T19733] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  887.694696][T19749] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3961'.
[  888.138813][T19747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  888.255976][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3962'.
[  889.083935][T19787] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3972'.
[  889.591319][T19792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  889.599260][T19792] IPv6: NLM_F_CREATE should be set when creating new route
[  889.607360][T19792] IPv6: NLM_F_CREATE should be set when creating new route
[  889.632266][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3975'.
[  889.857278][T19803] ptrace attach of "./syz-executor exec"[16664] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[  890.397722][ T5966] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  890.653840][T19813] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3979'.
[  890.814855][ T5966] usb 6-1: Using ep0 maxpacket: 16
[  890.821926][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  890.834513][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  890.848638][ T5966] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  890.866287][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.880891][ T5966] usb 6-1: config 0 descriptor??
[  891.301036][ T5966] elan 0003:04F3:0755.001A: unknown main item tag 0x1
[  891.312157][ T5966] elan 0003:04F3:0755.001A: failed to start in urb: -90
[  891.331705][ T5966] elan 0003:04F3:0755.001A: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  891.500504][ T5966] usb 6-1: USB disconnect, device number 33
[  891.593945][T19819] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3981'.
[  891.604745][T19819] openvswitch: netlink: Missing key (keys=40, expected=80)
[  894.878828][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3991'.
[  895.041886][T19865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3993'.
[  896.707928][ T7070] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  896.776853][T19906] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4005'.
[  896.894680][ T7070] usb 7-1: config 7 has an invalid interface number: 39 but max is 2
[  896.917995][ T7070] usb 7-1: config 7 has an invalid interface number: 197 but max is 2
[  896.951974][ T7070] usb 7-1: config 7 has an invalid interface number: 163 but max is 2
[  896.977592][ T7070] usb 7-1: config 7 has an invalid interface number: 241 but max is 2
[  897.001221][ T7070] usb 7-1: config 7 has 4 interfaces, different from the descriptor's value: 3
[  897.014467][ T7070] usb 7-1: config 7 has no interface number 0
[  897.126028][ T7070] usb 7-1: config 7 has no interface number 1
[  897.158677][ T7070] usb 7-1: config 7 has no interface number 2
[  897.165208][ T7070] usb 7-1: config 7 has no interface number 3
[  897.191639][ T7070] usb 7-1: config 7 interface 39 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  897.206373][ T7070] usb 7-1: config 7 interface 39 altsetting 1 has an endpoint descriptor with address 0x76, changing to 0x6
[  897.226625][T19919] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4008'.
[  897.288123][ T7070] usb 7-1: config 7 interface 39 altsetting 1 endpoint 0x6 has an invalid bInterval 93, changing to 10
[  897.300297][ T7070] usb 7-1: config 7 interface 39 altsetting 1 endpoint 0x6 has invalid maxpacket 59288, setting to 1024
[  897.313045][ T7070] usb 7-1: config 7 interface 39 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  897.325298][ T7070] usb 7-1: config 7 interface 39 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[  897.338292][ T7070] usb 7-1: config 7 interface 39 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1023
[  897.353070][ T7070] usb 7-1: config 7 interface 39 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  897.367855][ T7070] usb 7-1: config 7 interface 39 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[  897.432036][ T7070] usb 7-1: config 7 interface 39 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  897.512742][ T7070] usb 7-1: config 7 interface 39 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  897.534583][ T7070] usb 7-1: config 7 interface 39 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 12
[  897.548944][ T7070] usb 7-1: config 7 interface 197 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  897.560121][ T7070] usb 7-1: config 7 interface 197 altsetting 7 has a duplicate endpoint with address 0x7, skipping
[  897.572591][ T7070] usb 7-1: config 7 interface 197 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  897.583880][ T7070] usb 7-1: config 7 interface 197 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  897.596109][ T7070] usb 7-1: config 7 interface 163 altsetting 5 has a duplicate endpoint with address 0xA, skipping
[  897.607059][ T7070] usb 7-1: config 7 interface 163 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  897.620251][ T7070] usb 7-1: too many endpoints for config 7 interface 241 altsetting 100: 59, using maximum allowed: 30
[  897.632220][ T7070] usb 7-1: config 7 interface 241 altsetting 100 has a duplicate endpoint with address 0xC, skipping
[  897.644458][ T7070] usb 7-1: config 7 interface 241 altsetting 100 has a duplicate endpoint with address 0x89, skipping
[  897.655780][ T7070] usb 7-1: config 7 interface 241 altsetting 100 bulk endpoint 0x4 has invalid maxpacket 32
[  897.666142][ T7070] usb 7-1: config 7 interface 241 altsetting 100 has a duplicate endpoint with address 0x7, skipping
[  897.677444][ T7070] usb 7-1: config 7 interface 241 altsetting 100 has 5 endpoint descriptors, different from the interface descriptor's value: 59
[  897.691143][ T7070] usb 7-1: config 7 interface 39 has no altsetting 0
[  897.698134][ T7070] usb 7-1: config 7 interface 197 has no altsetting 0
[  897.705237][ T7070] usb 7-1: config 7 interface 163 has no altsetting 0
[  897.712188][ T7070] usb 7-1: config 7 interface 241 has no altsetting 0
[  897.722349][ T7070] usb 7-1: New USB device found, idVendor=1631, idProduct=c019, bcdDevice=6a.40
[  897.735554][ T7070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.744677][ T7070] usb 7-1: Product: syz
[  897.752774][ T7070] usb 7-1: Manufacturer: ㎎媰껴즛进쏭︑䍍庠硨ヅ笡랣㎎㇚髤쬹뤙᾵ఀᚫ࢟㋍ᇎᣐ菞誌몇આꌢꥢ㥂令耽⿆Û㿉渊杋츣↌拂豠ᐟꞹ活댹㡱✐㠶䀹䮋Ἁ얦遑増巠摔㘲郤裚딇赶⸜័ꦴ짩毑
[  897.787856][ T7070] usb 7-1: SerialNumber: syz
[  897.803121][T19885] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  897.811522][T19885] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  897.825247][T19885] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  898.140482][ T7070] usb 7-1: USB disconnect, device number 35
[  898.605321][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'.
[  898.646250][T19937] FAULT_INJECTION: forcing a failure.
[  898.646250][T19937] name failslab, interval 1, probability 0, space 0, times 0
[  898.886349][T19937] CPU: 1 UID: 0 PID: 19937 Comm: syz.5.4015 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  898.898239][T19937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  898.908604][T19937] Call Trace:
[  898.911902][T19937]  <TASK>
[  898.914846][T19937]  dump_stack_lvl+0x241/0x360
[  898.919608][T19937]  ? __pfx_dump_stack_lvl+0x10/0x10
[  898.924851][T19937]  ? __pfx__printk+0x10/0x10
[  898.929474][T19937]  ? __pfx___might_resched+0x10/0x10
[  898.934840][T19937]  ? rcu_is_watching+0x15/0xb0
[  898.939732][T19937]  should_fail_ex+0x3b0/0x4e0
[  898.944832][T19937]  should_failslab+0xac/0x100
[  898.949643][T19937]  __kmalloc_node_noprof+0xe1/0x4d0
[  898.954870][T19937]  ? seq_read_iter+0xb4/0xd70
[  898.959785][T19937]  ? __kvmalloc_node_noprof+0x72/0x190
[  898.965737][T19937]  __kvmalloc_node_noprof+0x72/0x190
[  898.971188][T19937]  traverse+0xd6/0x550
[  898.975446][T19937]  seq_read_iter+0xc8c/0xd70
[  898.980373][T19937]  proc_reg_read_iter+0x1c2/0x290
[  898.985646][T19937]  copy_splice_read+0x663/0xb60
[  898.990732][T19937]  ? __pfx_copy_splice_read+0x10/0x10
[  898.996996][T19937]  ? alloc_pipe_info+0x370/0x4d0
[  899.002013][T19937]  ? __pfx_copy_splice_read+0x10/0x10
[  899.007666][T19937]  splice_direct_to_actor+0x4af/0xc80
[  899.013291][T19937]  ? __pfx_direct_splice_actor+0x10/0x10
[  899.019359][T19937]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  899.025353][T19937]  ? __pfx_lock_release+0x10/0x10
[  899.030594][T19937]  ? rcu_is_watching+0x15/0xb0
[  899.035406][T19937]  do_splice_direct+0x289/0x3e0
[  899.040337][T19937]  ? __pfx_do_splice_direct+0x10/0x10
[  899.046298][T19937]  ? __fget_files+0x2a/0x410
[  899.051305][T19937]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  899.057253][T19937]  ? bpf_lsm_file_permission+0x9/0x10
[  899.062842][T19937]  ? security_file_permission+0x74/0x280
[  899.068516][T19937]  ? rw_verify_area+0x1c3/0x6f0
[  899.073495][T19937]  do_sendfile+0x564/0x8a0
[  899.078098][T19937]  ? __pfx_do_sendfile+0x10/0x10
[  899.083059][T19937]  ? __might_fault+0xc6/0x120
[  899.088024][T19937]  __se_sys_sendfile64+0x100/0x1e0
[  899.093339][T19937]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  899.099090][T19937]  ? rcu_is_watching+0x15/0xb0
[  899.103962][T19937]  ? rcu_is_watching+0x15/0xb0
[  899.108744][T19937]  do_syscall_64+0xf3/0x230
[  899.113275][T19937]  ? clear_bhb_loop+0x35/0x90
[  899.117973][T19937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.123976][T19937] RIP: 0033:0x7fdd1b585d29
[  899.128495][T19937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  899.149092][T19937] RSP: 002b:00007fdd1c44f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  899.157731][T19937] RAX: ffffffffffffffda RBX: 00007fdd1b775fa0 RCX: 00007fdd1b585d29
[  899.165805][T19937] RDX: 00000000200000c0 RSI: 0000000000000009 RDI: 000000000000000a
[  899.173919][T19937] RBP: 00007fdd1c44f090 R08: 0000000000000000 R09: 0000000000000000
[  899.182902][T19937] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001
[  899.191074][T19937] R13: 0000000000000000 R14: 00007fdd1b775fa0 R15: 00007ffc3a142bd8
[  899.199182][T19937]  </TASK>
[  902.189793][T19980] overlayfs: failed to resolve './file0': -2
[  902.295085][T19982] FAULT_INJECTION: forcing a failure.
[  902.295085][T19982] name failslab, interval 1, probability 0, space 0, times 0
[  902.363742][T19982] CPU: 1 UID: 0 PID: 19982 Comm: syz.1.4030 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  902.375196][T19982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  902.385626][T19982] Call Trace:
[  902.389347][T19982]  <TASK>
[  902.392378][T19982]  dump_stack_lvl+0x241/0x360
[  902.397759][T19982]  ? __pfx_dump_stack_lvl+0x10/0x10
[  902.403246][T19982]  ? __pfx__printk+0x10/0x10
[  902.408389][T19982]  ? __pfx___might_resched+0x10/0x10
[  902.413855][T19982]  should_fail_ex+0x3b0/0x4e0
[  902.419247][T19982]  should_failslab+0xac/0x100
[  902.424389][T19982]  __kmalloc_cache_noprof+0x70/0x390
[  902.430296][T19982]  ? show_partition_start+0x72/0x180
[  902.436895][T19982]  show_partition_start+0x72/0x180
[  902.442811][T19982]  traverse+0x14f/0x550
[  902.448167][T19982]  seq_read_iter+0xc8c/0xd70
[  902.453640][T19982]  proc_reg_read_iter+0x1c2/0x290
[  902.460128][T19982]  copy_splice_read+0x663/0xb60
[  902.465440][T19982]  ? __pfx_copy_splice_read+0x10/0x10
[  902.471051][T19982]  ? alloc_pipe_info+0x370/0x4d0
[  902.476449][T19982]  ? __pfx_copy_splice_read+0x10/0x10
[  902.482165][T19982]  splice_direct_to_actor+0x4af/0xc80
[  902.487728][T19982]  ? __pfx_direct_splice_actor+0x10/0x10
[  902.493504][T19982]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  902.499832][T19982]  ? __pfx_lock_release+0x10/0x10
[  902.504987][T19982]  ? rcu_is_watching+0x15/0xb0
[  902.509790][T19982]  do_splice_direct+0x289/0x3e0
[  902.514860][T19982]  ? __pfx_do_splice_direct+0x10/0x10
[  902.520352][T19982]  ? __fget_files+0x2a/0x410
[  902.524995][T19982]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  902.531034][T19982]  ? bpf_lsm_file_permission+0x9/0x10
[  902.536449][T19982]  ? security_file_permission+0x74/0x280
[  902.542562][T19982]  ? rw_verify_area+0x1c3/0x6f0
[  902.547623][T19982]  do_sendfile+0x564/0x8a0
[  902.552192][T19982]  ? __pfx_do_sendfile+0x10/0x10
[  902.557255][T19982]  ? __might_fault+0xc6/0x120
[  902.563352][T19982]  __se_sys_sendfile64+0x100/0x1e0
[  902.568725][T19982]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  902.575058][T19982]  ? rcu_is_watching+0x15/0xb0
[  902.580155][T19982]  ? rcu_is_watching+0x15/0xb0
[  902.585143][T19982]  do_syscall_64+0xf3/0x230
[  902.589725][T19982]  ? clear_bhb_loop+0x35/0x90
[  902.594982][T19982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.601443][T19982] RIP: 0033:0x7f3283b85d29
[  902.606581][T19982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  902.630026][T19982] RSP: 002b:00007f3284959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  902.640984][T19982] RAX: ffffffffffffffda RBX: 00007f3283d75fa0 RCX: 00007f3283b85d29
[  902.649596][T19982] RDX: 00000000200000c0 RSI: 0000000000000009 RDI: 000000000000000a
[  902.657992][T19982] RBP: 00007f3284959090 R08: 0000000000000000 R09: 0000000000000000
[  902.669753][T19982] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001
[  902.678944][T19982] R13: 0000000000000000 R14: 00007f3283d75fa0 R15: 00007ffd348ebdc8
[  902.689058][T19982]  </TASK>
[  902.957911][ T9958] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  903.230076][T20002] Bluetooth: MGMT ver 1.23
[  903.910377][ T9958] usb 7-1: device descriptor read/64, error -71
[  904.167759][ T9958] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  904.308333][ T9958] usb 7-1: device descriptor read/64, error -71
[  904.356496][T20018] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4039'.
[  904.418526][ T9958] usb usb7-port1: attempt power cycle
[  905.078034][T20024] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  905.158415][ T9958] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  905.178020][ T7084] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  905.186955][ T9958] usb 7-1: device descriptor read/8, error -71
[  905.317760][ T7084] usb 6-1: device descriptor read/64, error -71
[  905.480574][ T9958] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  905.557809][ T7084] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  905.708063][ T9958] usb 7-1: device not accepting address 39, error -71
[  905.716036][ T9958] usb usb7-port1: unable to enumerate USB device
[  905.727954][ T7084] usb 6-1: device descriptor read/64, error -71
[  906.647211][ T5841] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  906.655298][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[  906.946131][ T7084] usb usb6-port1: attempt power cycle
[  907.538666][ T7084] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  908.173670][ T7084] usb 6-1: device descriptor read/8, error -71
[  909.200123][T20075] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4056'.
[  909.695877][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'.
[  910.636693][T20080] Process accounting resumed
[  910.658007][ T9958] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  911.498789][T20108] loop9: detected capacity change from 0 to 8
[  911.755442][T20108] Dev loop9: unable to read RDB block 8
[  911.761289][T20108]  loop9: unable to read partition table
[  911.761289][T20082] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  911.773537][T20108] loop9: partition table beyond EOD, truncated
[  911.781559][T20108] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  911.797810][T15358] Bluetooth: hci0: command 0x0406 tx timeout
[  911.887740][ T9958] usb 2-1: Using ep0 maxpacket: 8
[  911.899765][ T9958] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  911.917090][ T9958] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  911.931792][ T9958] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  911.942642][ T9958] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  911.956049][ T9958] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  911.965722][ T9958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.985069][T20118] RDS: rds_bind could not find a transport for fe88::7, load rds_tcp or rds_rdma?
[  912.302528][ T9958] usb 2-1: GET_CAPABILITIES returned 0
[  912.309365][ T9958] usbtmc 2-1:16.0: can't read capabilities
[  912.522583][ T9958] usb 2-1: USB disconnect, device number 75
[  915.823634][T20181] xt_TCPMSS: Only works on TCP SYN packets
[  915.895569][ T7070] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  916.063982][ T7070] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  916.089633][ T7070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.110747][ T7070] usb 2-1: config 0 descriptor??
[  916.123664][ T7070] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  917.167788][ T9925] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  917.328005][ T9925] usb 5-1: Using ep0 maxpacket: 32
[  917.390645][T20177] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1
[  917.493915][ T9925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  917.527726][T20177] ref_ctr increment failed for inode: 0x460 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880671db900
[  917.528613][ T9925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.552472][ T9925] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  917.553582][T20218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  917.580344][T20218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  917.583406][ T9925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.955595][ T9925] usb 5-1: config 0 descriptor??
[  918.088274][ T7070] gspca_stv06xx: I2C: Read error writing address: -71
[  918.096861][ T7070] usb 2-1: USB disconnect, device number 76
[  919.399379][ T9925] usbhid 5-1:0.0: can't add hid device: -71
[  919.406033][ T9925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  919.423017][ T9925] usb 5-1: USB disconnect, device number 85
[  920.500830][T20249] macvlan1: entered promiscuous mode
[  920.604496][T20248] macvlan1: left promiscuous mode
[  922.184992][T20277] fuse: Bad value for 'fd'
[  923.932687][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4129'.
[  923.968807][ T5966] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  924.107869][   T29] audit: type=1326 audit(2000000262.240:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20315 comm="syz.6.4132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feed1385d29 code=0x0
[  924.790735][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  924.803123][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  924.994508][ T5966] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  925.079078][ T5966] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  925.091021][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.106219][ T5966] usb 5-1: Product: syz
[  925.111320][ T5966] usb 5-1: Manufacturer: syz
[  925.117266][ T5966] usb 5-1: SerialNumber: syz
[  925.123732][ T5966] usb 5-1: config 0 descriptor??
[  925.139745][T20327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  925.162427][ T5966] adutux 5-1:0.0: interrupt endpoints not found
[  925.373670][T20302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.395486][T20302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.417456][ T5966] usb 5-1: USB disconnect, device number 86
[  925.514232][T20338] vivid-000: disconnect
[  927.115350][T20338] vivid-000: reconnect
[  927.667700][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4146'.
[  927.919138][ T9952] usb 2-1: new low-speed USB device number 77 using dummy_hcd
[  927.937748][ T9925] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  928.108291][ T9952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  928.129909][ T9952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  928.256225][ T9952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  928.292137][ T9952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  928.323210][ T9952] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  928.338832][ T9952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.421210][ T9952] hub 2-1:1.0: bad descriptor, ignoring hub
[  928.427532][ T9952] hub 2-1:1.0: probe with driver hub failed with error -5
[  928.440878][ T9952] cdc_wdm 2-1:1.0: skipping garbage
[  928.446250][ T9952] cdc_wdm 2-1:1.0: skipping garbage
[  928.548040][ T9952] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  928.607728][ T9952] cdc_wdm 2-1:1.0: Unknown control protocol
[  928.628897][T20358] input: syz0 as /devices/virtual/input/input48
[  928.724054][T20389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4154'.
[  929.240386][ T9952] usb 2-1: USB disconnect, device number 77
[  929.367705][ T7070] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  929.518772][ T7070] usb 7-1: Using ep0 maxpacket: 16
[  929.525465][ T7070] usb 7-1: config 3 has an invalid interface number: 114 but max is 0
[  929.540179][ T7070] usb 7-1: config 3 has no interface number 0
[  929.547854][ T7070] usb 7-1: config 3 interface 114 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 64
[  929.558064][ T7070] usb 7-1: config 3 interface 114 has no altsetting 0
[  929.564923][ T7070] usb 7-1: New USB device found, idVendor=19d2, idProduct=186b, bcdDevice=2a.43
[  929.574091][ T7070] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  929.602681][T20382] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  929.831460][ T7070] usb 7-1: string descriptor 0 read error: -71
[  929.840631][ T7070] rndis_host 7-1:3.114: skipping garbage
[  929.846336][ T7070] usb 7-1: bad CDC descriptors
[  929.875711][ T7070] usb 7-1: USB disconnect, device number 40
[  930.113257][T20424] overlay: filesystem on ./bus not supported as upperdir
[  930.205358][T20430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  930.377738][ T7070] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  931.228246][ T7070] usb 5-1: Using ep0 maxpacket: 16
[  931.243767][ T7070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  931.269397][ T7070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  931.281912][ T7070] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  931.293132][ T7070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.403938][ T7070] usb 5-1: config 0 descriptor??
[  932.354488][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  933.455902][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  937.090477][ T7070] usbhid 5-1:0.0: can't add hid device: -71
[  937.133468][ T7070] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  937.208011][ T7070] usb 5-1: USB disconnect, device number 88
[  938.494180][T20469] can0: slcan on ttyS3.
[  938.504923][T20472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  938.637275][T20477] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4182'.
[  938.699905][T20469] can0 (unregistered): slcan off ttyS3.
[  938.923013][T20465] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4179'.
[  940.754278][T20494] random: crng reseeded on system resumption
[  941.377541][ T5966] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  941.887556][ T5966] usb 5-1: Using ep0 maxpacket: 8
[  942.108479][ T5966] usb 5-1: config 63 has too many interfaces: 254, using maximum allowed: 32
[  942.117327][ T5966] usb 5-1: config 63 has 1 interface, different from the descriptor's value: 254
[  942.167725][ T5966] usb 5-1: config 63 has no interface number 0
[  942.187695][ T5966] usb 5-1: config 63 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  942.199637][ T5966] usb 5-1: config 63 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  942.210153][ T5966] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  942.219283][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.306655][ T5966] usb 5-1: probing VID:PID(2201:012C)   
[  942.343592][ T5966] usb 5-1: vub300 testing BULK OUT EndPoint(0) 02
[  942.360742][T20523] ip6gretap0: entered promiscuous mode
[  942.368870][ T5966] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  942.382506][T20523] batadv_slave_0: entered promiscuous mode
[  942.403630][ T5966] vub300 5-1:63.19: probe with driver vub300 failed with error -22
[  942.423482][T20539] netlink: 512 bytes leftover after parsing attributes in process `syz.5.4196'.
[  942.447280][T20523] ip6gretap0: left promiscuous mode
[  942.453514][T20523] batadv_slave_0: left promiscuous mode
[  942.509556][T20499] xt_hashlimit: size too large, truncated to 1048576
[  942.547316][T20539] No control pipe specified
[  943.247711][ T5966] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  943.532747][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  943.616376][ T5966] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  943.640842][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  943.671177][ T5966] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  943.686405][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.696928][ T5966] usb 2-1: config 0 descriptor??
[  943.705165][ T5966] hdpvr 2-1:0.0: Could not find bulk-in endpoint
[  943.713993][ T5966] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  944.095624][ T9952] usb 2-1: USB disconnect, device number 78
[  945.564093][T20583] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4206'.
[  946.744437][   T29] audit: type=1326 audit(2000000284.910:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  946.787068][   T29] audit: type=1326 audit(2000000284.910:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  946.847739][   T29] audit: type=1326 audit(2000000284.910:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  946.902551][   T29] audit: type=1326 audit(2000000284.910:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  946.953989][   T29] audit: type=1326 audit(2000000284.910:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  947.001968][   T29] audit: type=1326 audit(2000000284.910:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  947.063448][   T29] audit: type=1326 audit(2000000284.910:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  947.137556][   T29] audit: type=1326 audit(2000000284.910:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  947.202881][   T29] audit: type=1326 audit(2000000284.910:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  947.296017][   T29] audit: type=1326 audit(2000000284.910:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20607 comm="syz.6.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed1385d29 code=0x7ffc0000
[  947.456910][ T9952] usb 5-1: USB disconnect, device number 89
[  949.138860][T20639] dccp_invalid_packet: pskb_may_pull failed
[  949.809538][T20652] netlink: 'syz.6.4226': attribute type 11 has an invalid length.
[  949.817501][T20652] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4226'.
[  949.917216][T20656] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4228'.
[  954.214158][T20722] FAULT_INJECTION: forcing a failure.
[  954.214158][T20722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  954.256999][T20722] CPU: 0 UID: 0 PID: 20722 Comm: syz.1.4247 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  954.267933][T20722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  954.278470][T20722] Call Trace:
[  954.281790][T20722]  <TASK>
[  954.284778][T20722]  dump_stack_lvl+0x241/0x360
[  954.290009][T20722]  ? __pfx_dump_stack_lvl+0x10/0x10
[  954.296952][T20722]  ? __pfx__printk+0x10/0x10
[  954.301624][T20722]  ? trace_contention_end+0x3c/0x120
[  954.307718][T20722]  ? __pfx_lock_release+0x10/0x10
[  954.313249][T20722]  ? sb_end_write+0xe9/0x1c0
[  954.317903][T20722]  should_fail_ex+0x3b0/0x4e0
[  954.323534][T20722]  _copy_from_user+0x2f/0xc0
[  954.328365][T20722]  __sys_bpf+0x1a4/0x810
[  954.333320][T20722]  ? __pfx___sys_bpf+0x10/0x10
[  954.338666][T20722]  ? ksys_write+0x251/0x2b0
[  954.344398][T20722]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  954.351144][T20722]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  954.359253][T20722]  ? rcu_is_watching+0x15/0xb0
[  954.364654][T20722]  __x64_sys_bpf+0x7c/0x90
[  954.369117][T20722]  do_syscall_64+0xf3/0x230
[  954.373638][T20722]  ? clear_bhb_loop+0x35/0x90
[  954.378514][T20722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.384426][T20722] RIP: 0033:0x7f3283b85d29
[  954.388931][T20722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  954.408910][T20722] RSP: 002b:00007f3284959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  954.417660][T20722] RAX: ffffffffffffffda RBX: 00007f3283d75fa0 RCX: 00007f3283b85d29
[  954.425702][T20722] RDX: 000000000000003c RSI: 00000000200012c0 RDI: 000000000000001c
[  954.433800][T20722] RBP: 00007f3284959090 R08: 0000000000000000 R09: 0000000000000000
[  954.443020][T20722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  954.451443][T20722] R13: 0000000000000000 R14: 00007f3283d75fa0 R15: 00007ffd348ebdc8
[  954.460391][T20722]  </TASK>
[  955.130890][ T5966] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[  955.377970][ T5966] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  955.407752][ T5966] usb 6-1: config 0 has no interface number 0
[  955.498916][ T5966] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  955.644292][ T5966] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  955.657074][ T5966] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  955.668712][ T5966] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  955.679652][ T5966] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  955.844543][ T5966] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  955.854104][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.068226][ T5966] usb 6-1: config 0 descriptor??
[  956.145527][ T5966] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  956.746461][T20769] netlink: 'syz.1.4263': attribute type 3 has an invalid length.
[  956.888228][T20769] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4263'.
[  957.022463][T20772] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4250'.
[  957.055492][T20772] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[  957.491310][ T5966] usb 6-1: USB disconnect, device number 38
[  957.497520][T20784] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  957.505730][ T5966] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  957.569089][T20786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4269'.
[  957.614405][T20786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4269'.
[  957.634623][T20786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4269'.
[  957.781382][T20786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4269'.
[  958.058463][    C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI
[  958.071916][    C1] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  958.080931][    C1] CPU: 1 UID: 0 PID: 20792 Comm: syz.7.4271 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  958.093843][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  958.105011][    C1] RIP: 0010:put_page+0x23/0x260
[  958.110014][    C1] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 58 0f 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 ff eb 7d f8 48 8b 1b 48 89 de 48 83
[  958.129832][    C1] RSP: 0018:ffffc90000a17d50 EFLAGS: 00010202
[  958.136561][    C1] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88802e655a00
[  958.144974][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  958.154305][    C1] RBP: dffffc0000000000 R08: ffffffff8984f7ad R09: 1ffff110051e20ec
[  958.162308][    C1] R10: dffffc0000000000 R11: ffffed10051e20ed R12: 0000000000000007
[  958.170314][    C1] R13: ffff888028f10742 R14: 0000000000000000 R15: 0000000000000000
[  958.179263][    C1] FS:  00007efee9dc56c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  958.188229][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  958.194940][    C1] CR2: 000000002002a000 CR3: 0000000052fc4000 CR4: 00000000003526f0
[  958.203654][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  958.211757][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  958.219853][    C1] Call Trace:
[  958.225609][    C1]  <IRQ>
[  958.230655][    C1]  ? __die_body+0x5f/0xb0
[  958.235647][    C1]  ? die_addr+0xb0/0xe0
[  958.240823][    C1]  ? exc_general_protection+0x3dd/0x5d0
[  958.247034][    C1]  ? asm_exc_general_protection+0x26/0x30
[  958.253788][    C1]  ? skb_release_data+0x46d/0x8a0
[  958.258938][    C1]  ? put_page+0x23/0x260
[  958.266076][    C1]  skb_release_data+0x483/0x8a0
[  958.271785][    C1]  __kfree_skb+0x55/0x70
[  958.276341][    C1]  tcp_ack+0x2442/0x6bc0
[  958.281520][    C1]  ? __pfx_tcp_ack+0x10/0x10
[  958.286951][    C1]  ? read_tsc+0x9/0x20
[  958.291504][    C1]  tcp_rcv_state_process+0x8eb/0x44e0
[  958.297857][    C1]  ? lock_acquire+0xe3/0x550
[  958.302535][    C1]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  958.308557][    C1]  ? sk_filter_trim_cap+0x5bf/0xa80
[  958.314518][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  958.319888][    C1]  ? __pfx_tcp_inbound_hash+0x10/0x10
[  958.325953][    C1]  tcp_v4_do_rcv+0x77d/0xc70
[  958.330959][    C1]  tcp_v4_rcv+0x2dc0/0x37f0
[  958.336020][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  958.340922][    C1]  ? lock_release+0xbf/0xa30
[  958.345731][    C1]  ? __pfx_ipt_do_table+0x10/0x10
[  958.350971][    C1]  ? nf_nat_ipv4_local_in+0x2c0/0x770
[  958.357566][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  958.363412][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  958.369181][    C1]  ip_protocol_deliver_rcu+0x22e/0x440
[  958.375069][    C1]  ? ip_local_deliver_finish+0x230/0x5f0
[  958.381585][    C1]  ip_local_deliver_finish+0x341/0x5f0
[  958.388226][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  958.394250][    C1]  NF_HOOK+0x3a4/0x450
[  958.398350][    C1]  ? NF_HOOK+0x9a/0x450
[  958.402989][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  958.407602][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  958.413679][    C1]  ? ip_rcv_finish+0x406/0x560
[  958.418483][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  958.424323][    C1]  NF_HOOK+0x3a4/0x450
[  958.428453][    C1]  ? NF_HOOK+0x9a/0x450
[  958.432773][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  958.437425][    C1]  ? ip_rcv_core+0x801/0xd10
[  958.442048][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  958.447222][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  958.451779][    C1]  __netif_receive_skb+0x2bf/0x650
[  958.456943][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  958.462355][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  958.468036][    C1]  ? __pfx_lock_release+0x10/0x10
[  958.473452][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  958.481525][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  958.486854][    C1]  ? rcu_is_watching+0x15/0xb0
[  958.491712][    C1]  ? process_backlog+0x33b/0x15b0
[  958.496889][    C1]  process_backlog+0x662/0x15b0
[  958.501797][    C1]  ? process_backlog+0x33b/0x15b0
[  958.507054][    C1]  ? __pfx_process_backlog+0x10/0x10
[  958.512401][    C1]  ? rcu_is_watching+0x15/0xb0
[  958.517226][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  958.523808][    C1]  __napi_poll+0xcb/0x490
[  958.528202][    C1]  net_rx_action+0x89b/0x1240
[  958.533042][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  958.538922][    C1]  ? sched_balance_domains+0x91b/0xa90
[  958.545143][    C1]  ? sched_balance_domains+0x1b2/0xa90
[  958.550805][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  958.557236][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  958.563832][    C1]  handle_softirqs+0x2d4/0x9b0
[  958.569339][    C1]  ? __irq_exit_rcu+0xf7/0x220
[  958.574766][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  958.580917][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  958.586646][    C1]  __irq_exit_rcu+0xf7/0x220
[  958.592412][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  958.598027][    C1]  irq_exit_rcu+0x9/0x30
[  958.602393][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  958.608164][    C1]  </IRQ>
[  958.611289][    C1]  <TASK>
[  958.614417][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  958.620441][    C1] RIP: 0010:llist_add_batch+0x10/0x270
[  958.626016][    C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 48 83 e4 e0 48 81 ec 80 00 00 00 49 89 d6 48 89 74 24 08 48 89
[  958.647071][    C1] RSP: 0018:ffffc900045b7900 EFLAGS: 00000282
[  958.654149][    C1] RAX: 1ffffffff1c5a16a RBX: ffffc900045b7ac0 RCX: 0000000000080000
[  958.662319][    C1] RDX: ffff8880b863f980 RSI: ffffc900045b7ac0 RDI: ffffc900045b7ac0
[  958.670506][    C1] RBP: ffffc900045b7920 R08: ffffffff8193445b R09: 1ffffffff2030a66
[  958.678682][    C1] R10: dffffc0000000000 R11: fffffbfff2030a67 R12: dffffc0000000000
[  958.687561][    C1] R13: 1ffff920008b6f01 R14: 0000000000000000 R15: 0000000000000000
[  958.695749][    C1]  ? __smp_call_single_queue+0x3b/0x3a0
[  958.701424][    C1]  __smp_call_single_queue+0x7e/0x3a0
[  958.707702][    C1]  generic_exec_single+0x251/0x980
[  958.713036][    C1]  ? __pfx_generic_exec_single+0x10/0x10
[  958.719526][    C1]  smp_call_function_single_async+0x83/0x110
[  958.726001][    C1]  rdmsr_safe_on_cpu+0x146/0x310
[  958.731338][    C1]  ? __pfx_rdmsr_safe_on_cpu+0x10/0x10
[  958.738771][    C1]  ? __pfx___rdmsr_safe_on_cpu+0x10/0x10
[  958.745082][    C1]  ? __pfx_lock_release+0x10/0x10
[  958.750602][    C1]  ? __might_fault+0xaa/0x120
[  958.756125][    C1]  ? __might_fault+0xc6/0x120
[  958.761362][    C1]  msr_read+0x15d/0x260
[  958.765658][    C1]  ? __pfx_msr_read+0x10/0x10
[  958.770422][    C1]  ? rcu_is_watching+0x15/0xb0
[  958.775226][    C1]  ? rw_verify_area+0x568/0x6f0
[  958.780102][    C1]  ? __pfx_msr_read+0x10/0x10
[  958.785867][    C1]  vfs_read+0x1fc/0xb70
[  958.790167][    C1]  ? __pfx_vfs_read+0x10/0x10
[  958.795237][    C1]  ? __fget_files+0x2a/0x410
[  958.800041][    C1]  ? __fget_files+0x395/0x410
[  958.805279][    C1]  ? __fget_files+0x2a/0x410
[  958.809907][    C1]  ksys_read+0x18f/0x2b0
[  958.814268][    C1]  ? __pfx_ksys_read+0x10/0x10
[  958.819049][    C1]  ? rcu_is_watching+0x15/0xb0
[  958.823952][    C1]  ? rcu_is_watching+0x15/0xb0
[  958.829975][    C1]  do_syscall_64+0xf3/0x230
[  958.834719][    C1]  ? clear_bhb_loop+0x35/0x90
[  958.839696][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  958.845826][    C1] RIP: 0033:0x7efee8f85d29
[  958.850390][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  958.870944][    C1] RSP: 002b:00007efee9dc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  958.879408][    C1] RAX: ffffffffffffffda RBX: 00007efee9175fa0 RCX: 00007efee8f85d29
[  958.887522][    C1] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000006
[  958.895524][    C1] RBP: 00007efee9001b08 R08: 0000000000000000 R09: 0000000000000000
[  958.903526][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  958.912756][    C1] R13: 0000000000000000 R14: 00007efee9175fa0 R15: 00007ffff8583e58
[  958.921396][    C1]  </TASK>
[  958.924910][    C1] Modules linked in:
[  958.928982][    C1] ---[ end trace 0000000000000000 ]---
[  958.934683][    C1] RIP: 0010:put_page+0x23/0x260
[  958.939720][    C1] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 58 0f 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 ff eb 7d f8 48 8b 1b 48 89 de 48 83
[  958.962020][    C1] RSP: 0018:ffffc90000a17d50 EFLAGS: 00010202
[  958.968405][    C1] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88802e655a00
[  958.976701][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  958.986349][    C1] RBP: dffffc0000000000 R08: ffffffff8984f7ad R09: 1ffff110051e20ec
[  958.994956][    C1] R10: dffffc0000000000 R11: ffffed10051e20ed R12: 0000000000000007
[  959.003801][    C1] R13: ffff888028f10742 R14: 0000000000000000 R15: 0000000000000000
[  959.011883][    C1] FS:  00007efee9dc56c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  959.020995][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  959.028564][    C1] CR2: 000000002002a000 CR3: 0000000052fc4000 CR4: 00000000003526f0
[  959.037024][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  959.045342][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  959.053800][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  959.061344][    C1] Kernel Offset: disabled
[  959.066738][    C1] Rebooting in 86400 seconds..