last executing test programs:

15.576862097s ago: executing program 0 (id=335):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)

13.301980626s ago: executing program 3 (id=341):
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000a00004000000003ff020000000000000000000000000001f300"/69], 0x8c)
bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4}, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000010}, 0x1)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x38c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e0c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x131}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x43}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xade}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xb, @private0, 0xfffff000}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc186}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc1d4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6f, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x35, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [], "fafb17c133"}}}}}}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x74, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4810}, 0x0)

12.789134183s ago: executing program 3 (id=343):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x0)
close(0x3) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r0, 0x20, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/61, 0x3d}}, 0x10) (async)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000924060500", @ANYBLOB="a1"], 0x0)

11.456558094s ago: executing program 0 (id=347):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@verity_on}]})
r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x1, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
r2 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4b3141085d274847})
io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f00000001c0)='./file1\x00', 0x400, 0x100)
close_range(r0, 0xffffffffffffffff, 0x0)

9.65967515s ago: executing program 0 (id=350):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40004)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)={[&(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xef\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\x04!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x01C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000001c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xef\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\x04!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x01C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
syz_emit_ethernet(0x4a, &(0x7f0000000800)={@empty, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2f, 0x3c, 0x65, 0x0, 0x49, 0x6, 0x0, @empty, @broadcast}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4e20, 0x4e22, 0x4, 0x2}}}}}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a50c0000e4ff00006111600000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0)
ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x525200, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102389, 0x18ff5)
gettid()
socket$can_j1939(0x1d, 0x2, 0x7)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
timerfd_create(0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3})
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
splice(r3, 0x0, r3, 0x0, 0xa, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.658971135s ago: executing program 3 (id=351):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
getdents(r0, &(0x7f0000000000)=""/32, 0x20)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x80, 0x200, 0x10001, 0x7fe, 0x8, 0x40009, 0x6, 0x4, 0x2c, 0x1})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r6)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_GET_DIRTY_LOG(r11, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000fa3000/0x4000)=nil})
recvmmsg(r9, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xca, 0x20, 0x5c, 0x40, 0x525, 0xa4a0, 0xc866, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x8a, 0x0, 0x0, 0xc2, 0x88, 0x2b}}]}}]}}, 0x0)

9.626066716s ago: executing program 4 (id=355):
sendmsg$inet(0xffffffffffffffff, 0x0, 0xc810)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x800)
syz_open_dev$sndmidi(0x0, 0x61f, 0x600000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4044080)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@empty, 0x4e20, 0x6, 0x4e22, 0x5, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x32}, 0xa, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]})
socket$packet(0x11, 0x2, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket(0x1e, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='nilfs2_mdt_insert_new_block\x00', r3, 0x0, 0x3ff}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x40040830)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

9.62459705s ago: executing program 1 (id=356):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = socket$tipc(0x1e, 0x4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_submit(0x0, 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
accept4$rose(r6, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a800008100000088a800000e7be770c1686ff333523efa78516ff715bb3dd31227151323b7a30e378ae800000000000000005cad5dfac0b884a3f0072074c90bc820f4166179377f69ab6fd3428001376dc133"], 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

8.964755781s ago: executing program 1 (id=357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)

8.929920523s ago: executing program 4 (id=359):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040), 0x6) (async)
ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080))
ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={<r5=>0x0, 0x5, 0x8000000000000000, 0x1})
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000001c40)={0x118, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x92}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "126d3f163cd14032c4b26b6dcfce62f5ca4c127e7785c341dfed8655ed1a02ba1a64a1d6330f34d20d21eba21d53ee2aed6b2c2ed2e717d775c4b3bceafef89e7e9502ba49f57ba7ef2bbc077d33e281ece0c7ea4244427fd3b7f42c907580498b01d2867d7b9706ed363039310d012c7b8de8c2442826cfbc2e6bf94156648b20723d12be99e39f13"}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x801}, 0x10) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000980)={{r2}, r4, 0x4, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x5, 0xc18, {0x8, 0x6, 0xc, 0xfffffffffffffa4b, 0x7fff}, [0x3214]}}, @devid=r5}) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000880)={{}, r4, 0x14, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x8, {0x3d, 0x6, 0x4, 0x400, 0x7}, [0x6, 0x9]}}, @name="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"}) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000c40)={{r0}, r4, 0x0, @inherit={0x60, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x8af, {0x6, 0x1ff, 0x4, 0x1, 0x4212}, [0x7fffffffffffffff, 0xffffffffffff6d8b, 0xfffffffffffffff7]}}, @subvolid=0x3}) (async)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f0000000040)=0x44, 0x4) (async)
setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x34, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000008f04000000000000fbffff"]) (async)
r11 = socket$kcm(0x29, 0x5, 0x0)
sendmsg(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="07d98d396058a855921d034d0fb8034a5317ce586c382c8d41f8212309f82dd261e5f9263338a10244d7b49f8608f304ee79d951cd4ca8c44b84d8b2da6feb009a0d53224f69c7a037105aa12b36d0f2fa926dad5b4a129773ae0025ee2dccc42c4cc23ddd896f77e5b427f7950212eaeb0dd9c789f8def4d9fbf6274bbf72f31c5a548464395d9a68564fc12ef2196d7eac2b93ba137c89c360011aa0c15d2a0db9dfc760b6e069968685b051123d404ba4e94ccfdfebeaa7a30c8de388e00edff56b0c6968ec98e00ad8decf9dec77295a37e60510e906474b55034f7f6594c92e49dd422bb4346631b852e64add94f0ee30da8e199a89d8969df24601639c324ea084f8b00dbb3322aa7b1759fde71e4279841257c589725c12070d0cd41423d566d8b73b2936119519e31f4c8243e9207e688e77550867081b9b685d277a4800", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000480), 0x4)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)

8.607033427s ago: executing program 4 (id=360):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
epoll_create1(0x80000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x47f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x80400)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f00000000c0)={0x6, 0x6, 0x4, 0xffffffff, 'syz1\x00', 0x4})

7.752316921s ago: executing program 0 (id=361):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=<r2=>0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa0000080005", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000080))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000600)={0x0, "126ebf7d9fdf9aec84c0fe4cb734f282d46938152a71b9399c8d590c79cfaf41", 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000})
r7 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
preadv(r7, &(0x7f00000006c0)=[{&(0x7f0000002380)=""/169, 0xfe36}, {&(0x7f0000000500)=""/152, 0x98}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000000480)=""/27, 0x1b}], 0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000200)={<r8=>0x41424344}, 0x1, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r9, 0x0, 0x4}, 0x18)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r10, 0x0, 0x4}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
syz_emit_ethernet(0x6a, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, r8, 0x0, 0x6, 0x12, 0x4, 0x2, 0x0, 0x932, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x200, 0xb}, @exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x16, @broadcast, 0x1}, @sack={0x5, 0x16, [0x5, 0x9, 0x7f, 0x7723, 0x1]}]}}}}}}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x480}}}}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x5c}}, 0x0)

7.750905839s ago: executing program 2 (id=362):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
syz_usb_connect(0x6, 0x244, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x40, 0xd8, 0x5b, 0xc7, 0x13b1, 0x11, 0x5c34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x232, 0x3, 0x4, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x88, 0x4, 0x9, 0xf7, 0xf9, 0x8a, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d2cf"}, {0x5, 0x24, 0x0, 0x621c}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x2}}], [{{0x9, 0x5, 0x9, 0x4, 0x20, 0x1, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4a, 0xa91}, @generic={0x14, 0x1, "f50510c401aaa61fd1a25de655743dd9c64a"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x0, 0x1, 0xe}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0xa, 0x0, 0x6}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0xf4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x2}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x0, 0xaf, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e, 0x7ff}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x24, 0x8, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x7, 0x2, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x7f, 0xf6, 0x7}}, {{0x9, 0x5, 0x80, 0x3, 0x1c4aa9c632bf544, 0xdf, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x3, 0x53, 0xee, 0x97, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xaf9}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0xa, 0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x2, 0x2, 0x8}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x7, "", 'b<\n'}]}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x9, 0xc, [@generic={0xe8, 0x1, "04d5abb282c498eee79f09b457e4eb03957388a53a5c574e0d2a0367adc6eed3f8095563f68203dedc1d85075d9471e9f79e24b0cacc555124830dc45118f9298acb4b7bcb0f35151b48ed03cadbe732eca34d4619f4ac0a4685095d23926437e712f3d666ae08a116645d7d017d3af0cbe03150f04ed5c04d461a08315d4b5ac0f4c7e6672544168b344e4d92767f3a382ae2e6495880cefc1c75ed501d262da981d341ef27c54a07325088a55a2d21bde5ec9401992fa6cc4b0bd58534ef3211ea1d6d115a2608e80654ed291197d746403e53be28649bfa0c0c0ec571d3ff8374db2515d3"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x6, 0x9, 0xfe}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x7, 0xe}}]}}, {{0x9, 0x4, 0x51, 0xa, 0x1, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xb30, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x3, 0x2, 0x4}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x3}]}, @uac_as], [{{0x9, 0x5, 0x9, 0xc, 0x10, 0x6, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}, @generic={0x22, 0x21, "3534b186851fc43cd1e61f3f18d36db088978c7f992b26ef3bbac46ba3223c89"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prlimit64(r1, 0x7, 0x0, 0x0)
ptrace$peekuser(0x3, r0, 0x10001)
socket(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
r8 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
write$P9_RSTATu(r8, 0x0, 0x5a)
sched_setaffinity(0x0, 0x0, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCSETS(r9, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0xc9f, 0x59, "88bd91aa90758062b5fffd9272e301aa98af75"})

7.507415941s ago: executing program 4 (id=363):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
r2 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
ioctl$VT_DISALLOCATE(r3, 0x5608)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000080)=[0x1106b6ae, 0x100], 0x2)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)=ANY=[@ANYBLOB="120100000000a91479004618000000000001090224000100000000090400000103000000092100000001220b00090581030000008000"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0)
write(r5, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000303ff", 0x24)
syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="20154e9a"], 0x0, 0x0, 0x0, 0x0}, 0x0)

5.951491297s ago: executing program 1 (id=364):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r0], 0xcc}, 0x1, 0x0, 0x0, 0x40058}, 0x20050800)
r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003c00)=ANY=[@ANYBLOB="e00000001000090500c63703b60000000000d00008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d08000000337c000400bf852c8986626691b01b5f44e4ce28715f285f"], 0xe0}], 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001"], 0x88}}, 0x0)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r2, r4})
socket(0x1, 0x5, 0x6)

5.756468845s ago: executing program 4 (id=365):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r3=>0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000200)="0f096766c7442400001000006766c74424020b8000006766c744240600000000670f0114240fae8c00600f0966b97d0300000f3266b871c7ffff0f23c80f21f86635000030000f23f8dbc00f3066b90b06000066b81000008066ba000000000f30660f01f6", 0x65}], 0x1, 0x23, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c00e500110000001300000008000500", @ANYRES32=r3, @ANYRES32=r3], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r9, 0x1269, &(0x7f0000000440)={0x2, 0x0, 0x98, &(0x7f0000000380)={0x6, 0x100, 0x5}})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
munlockall()

5.629014585s ago: executing program 1 (id=366):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xfff0}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x324, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x310, 0x1, [@m_simple={0xc8, 0x14, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ':\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x7fff, 0x8, 0x1, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x1, 0x5, 0x0, 0x9}}, @TCA_DEF_DATA={0x6, 0x3, '[\x00'}]}, {0x59, 0x6, "2142fd3b7739e2df1ce11a6cb358923efde1e857b5f4b6f98b557df785dd171fde9589b89159b81ee8cae94d2e9fa3057e2ef1dcb1a91c625616b378bf4efa552a73c8d7f1dcf6bda7d96971955d93d98a6c82b565"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x214, 0x12, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80007, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x736fe187decc650e, 0x101, 0x30000}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x5af3, 0x8, 0x9, 0xcd}, @private=0xa010100, @multicast1, 0xff}}]}, {0xd1, 0x6, "00dbe2375389f4c61bb80b5c04766adf4c4041ab3363ca93e40c5281d6bb7035fa3fb2838101ae15e668e34175f78ce7df4b1c48d956acfb10ab481c7729eedfcdef8b67015dd90447d814cbb37713b8e2a37054e99152bbb3f0c77e56a1f6ab9da61c7f00958a0aa5108d67f277272c411cba11ef13007927c9c52984e903960081484a463aa2d388d77984fa7968102f600b0936201c9964cff6e228e131439b5dd84f37bb377965a4af38c2020711a2fad2ba4e11f442caf2f22b704bf9fa89dbd5667b8e65de106000f9f4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

4.613962805s ago: executing program 2 (id=367):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./bus\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x68, 0xfa00, {0x0, {0x3, 0x16, "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", 0x80, 0x9, 0xef, 0x6, 0xe9, 0x10, 0x6, 0x1}}}, 0x128)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_rdma(0x0, 0x0, 0x0, 0x1000800, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffff3b, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

3.896333863s ago: executing program 2 (id=368):
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x2, 0xfffffffffffffa5d, 0xca, &(0x7f0000000080)=""/202})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000400000000000000000000002e522bf3c804603be88aa67ec32b0f4f0f050200ac779384a129a91046d1873cb993c619ae15fb4c98ff283ce0000df968b140b9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]})
r9 = memfd_secret(0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x48)
r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r10, r9, 0x2e, 0x4608, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r11, 0x4)
close_range(r8, 0xffffffffffffffff, 0x0)
splice(r6, 0x0, r7, 0x0, 0xf3c, 0x8)
tee(0xffffffffffffffff, r7, 0x8f5, 0x100000000000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000180000007b2a", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r13 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r12}, 0x8)
close(r13)

2.929716918s ago: executing program 2 (id=369):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7fffffffffffffff, &(0x7f0000000280)=0x1ff)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = io_uring_setup(0x7c41, &(0x7f0000000300)={0x0, 0x5065, 0x800, 0x0, 0x99})
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000001780), 0xa)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.452077487s ago: executing program 2 (id=370):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000002c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x1, 0x7, 0x8, 0x2008, 0x9, 0x1, 0x2, 0x4, 0x9}}, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x90)
syz_usb_control_io(r0, 0x0, 0x0)

1.828172069s ago: executing program 3 (id=371):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x3, 0x0, 0x0, @time, {0x0, 0x1f}, {}, @control={0x0, 0x8000, 0x4ee8}}], 0x8c)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}})
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000018c0))
r3 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4)
ftruncate(r3, 0x7000000)
r4 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40))
inotify_init1(0x800)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfefff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r5 = dup(r3)
read$FUSE(r5, &(0x7f0000000080)={0x2020, 0x0, 0x0, <r6=>0x0}, 0xffffffce)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x519, 0x1, [@m_police={0x838, 0x1c, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0)
quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, r6, &(0x7f00000020c0)={0x4, 0x8})

1.827196596s ago: executing program 1 (id=372):
socket$inet_sctp(0x2, 0x400000000001, 0x84)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)=<r3=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0xfffffffc, 0xfffffffc}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0)
r5 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7})
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)

1.808488857s ago: executing program 0 (id=373):
io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x10, 0x1, 0x2b0})
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000004c0)="caef858ca50f08bcfeca32501cef77290049d36992e6f5c1d2b9d6", 0x1b}, {0x0}], 0x3) (async)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000004c0)="caef858ca50f08bcfeca32501cef77290049d36992e6f5c1d2b9d6", 0x1b}, {0x0}], 0x3)
close(0xffffffffffffffff)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
write$6lowpan_control(r5, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 2', 0xffffff68) (async)
write$6lowpan_control(r5, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 2', 0xffffff68)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$6lowpan_control(r6, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) (async)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)

1.408462752s ago: executing program 4 (id=374):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)

756.513169ms ago: executing program 1 (id=375):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
close(0xffffffffffffffff)
msgsnd(0x0, 0x0, 0x0, 0xe00)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
pipe2(&(0x7f0000000580), 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

289.707ms ago: executing program 3 (id=376):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async)
setresuid(0xee01, 0xee00, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000418e00000004fcff", 0x58}], 0x1) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
shutdown(r1, 0x0)

151.419604ms ago: executing program 2 (id=377):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x2c)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2009040000004a5feb"], 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect$cdc_ecm(0x0, 0x13e, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12c, 0x1, 0x1, 0x5, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x16, {{0xb, 0x24, 0x6, 0x0, 0x0, "6faa810cabed"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x1, 0xd, 0xf}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x1, 0x40, 0x2}, @ncm={0x6, 0x24, 0x1a, 0xb, 0x20}, @mdlm={0x15}, @obex={0x5, 0x24, 0x15, 0xfffb}, @mdlm_detail={0xab, 0x24, 0x13, 0x1, "d37cbb9ef6a407b19f18ec97cd2cc7bf1d9ad300ed54de4e26c3498495e46241e8b5035afd55a90c41ca6e78ac02707823d56f2aef196f3c224d6b557a90e785f06e9f8198be399d9a442b4474b0c2e8698c4011fba4fdb0764be028b0d47a4365f263bc8ab9db3de3ae9ee10122e6ccca73f6f137e8fd0320a831cae6ea3a8168a4c75d6c7ebf1d8467cf5cfd9be5064dd6aea0ad81e481f5ff1b20165aa0e6a4043a58b84c11"}, @country_functional={0x10, 0x24, 0x7, 0x1, 0xbab0, [0x8, 0xfff, 0x9, 0x53cd, 0x4]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x5, 0xf1}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x70, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0x0, 0xe9}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x2, 0x26, 0x9, 0x8, 0xa}, 0x17, &(0x7f0000000100)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2c, 0xf, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x5, 0x2, 0x8, 0x2}]}, 0x4, [{0xec, &(0x7f0000000500)=@string={0xec, 0x3, "a39495350f1bd69c57b9b92bdcd61e4b37795d0c52b6ba198e79265d183f1862a2c5765ec91766749969885e12416f9ec0d46ab745a6210de950ad43e0f1fa31d8d8d7732786fc48e87d7944a46ac8b9745cb4a4f1f3bf3d1e265aba74a8cbb950e27f74d199bacb2ebffde675b39d7b124cdb35820de5f96553639cd43bf4f2c63675346e5bfd4dd8a46dd3378e1769658c49120856daec1686b53b694be5b6f3cb515d284e2c0d79bab2f22d93dbdf4213e21adc12a7ec2bfc538df9ef1cec829af739daa6bdc34f3d5690b79d07604c44edf28dadd3effa74851aa64ba7c7cf9b16305919321265f1"}}, {0xa2, &(0x7f0000000400)=@string={0xa2, 0x3, "ed4a7e6d3966edbd3ffef4717be1297f9c64d7eb832cd1c12cd2dc6006ee14d2566c2aa5040e58e58a008c7128f54d2a4274c6c860e2fcc1553cb14db2c3f75c6a5cd752875fc75658786f3d6738d55e22984e954ead1d3709de98a32bea278e90dc32fabfa33e9b7dee80d07a7c644c9b92a05f96350d95bb1daa9ce6783edb7828b6ecc885c2a7485b79afa47edb75cebe916cedc2d986483db1b16504e096"}}, {0x15, &(0x7f0000000140)=@string={0x15, 0x3, "5778e94c730ecb5505592d69e18818ea5df00c"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41e}}]})
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000800)={0x14, &(0x7f0000000700)={0x40, 0x7, 0xb8, {0xb8, 0x31, "ad886c2b02af9eef2550697012b65fb49d9bef19aec760e38ca672b64375771e7751029472b7d9b58d79f597f520cd76f54f0c0ffdcf6bac274b5300f9c0647e79965a49145fcf9d7e9a2a1047ee8d11338523d526554715c7bb97da815c0c35cd5252d95f8ec9a28ee6a89722f825998de2b13e3eda4efe597030a29b1b3528c4ab0dacce7e22aacac55d75160341238bb59f29b9387d5ad69615133b7a7633d11c0b3370c82fcfbf1538d4a839fc56538398d30bfd"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000840)={0x40, 0x30, 0x2, "ed2d"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xfa}})
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)

56.642914ms ago: executing program 3 (id=378):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=0x0], &(0x7f0000000c40)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0xfa2b97ae29578096, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xb9, &(0x7f00000002c0)=""/185, 0x0, 0x8}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000d00000000010000", @ANYRES32, @ANYBLOB="0900000000000000000000000000000300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x2, 0x3, 0x8000000000000001, 0x3, 0x4, 0xffffffff7fffffff, 0xfff, 0x3, 0x9b9, 0xfff, 0xe, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x20106})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009e02"])
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x9, 0x200000001, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x100000000, 0x5, 0x7, 0x2], 0xffff3000, 0x8340})
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x198, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098ee68886dd", 0x0, 0x99e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

0s ago: executing program 0 (id=379):
getpgrp(0x0)
sched_setscheduler(0x0, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f00000002c0)=0x1ff, 0x5)
set_mempolicy(0x2, &(0x7f0000000000)=0x7fff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000044000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000006c00000000000000ac1414420000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000020010000000000000000000000000002000000006c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
open(0x0, 0x442281, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r3, 0x5423, 0x0)
open(0x0, 0x14927e, 0x84)
creat(0x0, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41001, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts.
[   79.973961][ T5823] cgroup: Unknown subsys name 'net'
[   80.142048][ T5823] cgroup: Unknown subsys name 'cpuset'
[   80.151726][ T5823] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.635922][ T5823] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.718071][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.729291][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.749915][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.778251][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.814221][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.823393][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.831459][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.840340][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.858443][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.859822][ T1632] cfg80211: failed to load regulatory.db
[   86.878371][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.886905][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.910077][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.918826][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.927660][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.931654][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.935748][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.950817][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.958632][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.968874][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.976777][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.985809][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.995597][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.004021][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.017731][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.035607][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.616634][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   87.814310][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   87.888776][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   87.975464][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   88.009369][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.017111][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.026040][ T5837] bridge_slave_0: entered allmulticast mode
[   88.034498][ T5837] bridge_slave_0: entered promiscuous mode
[   88.079756][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.087458][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.095455][ T5837] bridge_slave_1: entered allmulticast mode
[   88.104230][ T5837] bridge_slave_1: entered promiscuous mode
[   88.123792][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   88.234257][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.242897][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.251069][ T5844] bridge_slave_0: entered allmulticast mode
[   88.259299][ T5844] bridge_slave_0: entered promiscuous mode
[   88.304232][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.318128][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.327760][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.336077][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.344799][ T5844] bridge_slave_1: entered allmulticast mode
[   88.352710][ T5844] bridge_slave_1: entered promiscuous mode
[   88.395121][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.403059][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.410459][ T5848] bridge_slave_0: entered allmulticast mode
[   88.417657][ T5848] bridge_slave_0: entered promiscuous mode
[   88.481574][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.490028][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.497355][ T5848] bridge_slave_1: entered allmulticast mode
[   88.506391][ T5848] bridge_slave_1: entered promiscuous mode
[   88.517474][ T5837] team0: Port device team_slave_0 added
[   88.527548][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.564243][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.571934][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.579926][ T5852] bridge_slave_0: entered allmulticast mode
[   88.587308][ T5852] bridge_slave_0: entered promiscuous mode
[   88.610875][ T5837] team0: Port device team_slave_1 added
[   88.633071][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.652062][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.661580][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.670382][ T5852] bridge_slave_1: entered allmulticast mode
[   88.679614][ T5852] bridge_slave_1: entered promiscuous mode
[   88.701364][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.715439][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.829117][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.837071][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.845671][ T5853] bridge_slave_0: entered allmulticast mode
[   88.855707][ T5853] bridge_slave_0: entered promiscuous mode
[   88.865906][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.874694][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.882735][ T5853] bridge_slave_1: entered allmulticast mode
[   88.892033][ T5853] bridge_slave_1: entered promiscuous mode
[   88.915555][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.924257][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.929633][   T51] Bluetooth: hci1: command tx timeout
[   88.953139][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.958614][ T5155] Bluetooth: hci0: command tx timeout
[   88.976295][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.983956][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.010660][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.021495][ T5155] Bluetooth: hci2: command tx timeout
[   89.027148][   T51] Bluetooth: hci3: command tx timeout
[   89.027483][ T5848] team0: Port device team_slave_0 added
[   89.042515][ T5848] team0: Port device team_slave_1 added
[   89.051852][ T5844] team0: Port device team_slave_0 added
[   89.077666][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.095491][   T51] Bluetooth: hci4: command tx timeout
[   89.102422][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.126054][ T5844] team0: Port device team_slave_1 added
[   89.161066][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.175914][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.229039][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.236573][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.272890][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.313982][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.321259][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.350162][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.393848][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.401541][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.429127][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.457786][ T5852] team0: Port device team_slave_0 added
[   89.465232][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.472687][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.499989][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.526497][ T5837] hsr_slave_0: entered promiscuous mode
[   89.534207][ T5837] hsr_slave_1: entered promiscuous mode
[   89.555480][ T5853] team0: Port device team_slave_0 added
[   89.564166][ T5852] team0: Port device team_slave_1 added
[   89.603568][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.611334][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.641955][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.668764][ T5853] team0: Port device team_slave_1 added
[   89.722587][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.731486][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.760044][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.841390][ T5848] hsr_slave_0: entered promiscuous mode
[   89.849430][ T5848] hsr_slave_1: entered promiscuous mode
[   89.856367][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.864963][ T5848] Cannot create hsr debugfs directory
[   89.876548][ T5844] hsr_slave_0: entered promiscuous mode
[   89.883071][ T5844] hsr_slave_1: entered promiscuous mode
[   89.891462][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.899928][ T5844] Cannot create hsr debugfs directory
[   89.906467][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.913708][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.940055][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.978950][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.985969][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.012101][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.137316][ T5852] hsr_slave_0: entered promiscuous mode
[   90.144788][ T5852] hsr_slave_1: entered promiscuous mode
[   90.179450][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.187355][ T5852] Cannot create hsr debugfs directory
[   90.317138][ T5853] hsr_slave_0: entered promiscuous mode
[   90.324074][ T5853] hsr_slave_1: entered promiscuous mode
[   90.331714][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.339429][ T5853] Cannot create hsr debugfs directory
[   90.781518][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.805788][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.820682][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.852032][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.950827][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.993652][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.005610][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.012644][   T51] Bluetooth: hci1: command tx timeout
[   91.015541][ T5155] Bluetooth: hci0: command tx timeout
[   91.031536][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.081138][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.101703][ T5155] Bluetooth: hci3: command tx timeout
[   91.108016][   T51] Bluetooth: hci2: command tx timeout
[   91.114335][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.131207][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.144618][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.168408][ T5155] Bluetooth: hci4: command tx timeout
[   91.274881][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.288414][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.333998][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.347658][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.446293][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.484168][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.492840][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.503862][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.520053][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.593748][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.617400][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   91.658596][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.666184][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.696265][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   91.721846][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.729630][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.772832][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.780363][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.815211][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.823046][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.847871][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.947835][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.967748][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   91.990432][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.015648][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.023199][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.100538][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.108167][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.153079][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   92.193020][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.200662][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.254842][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.262519][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.311813][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.469960][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   92.481140][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.514793][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.525155][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.571832][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.579525][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.621566][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.773421][ T5837] veth0_vlan: entered promiscuous mode
[   92.833087][ T5837] veth1_vlan: entered promiscuous mode
[   92.964806][ T5837] veth0_macvtap: entered promiscuous mode
[   93.052583][ T5837] veth1_macvtap: entered promiscuous mode
[   93.091259][ T5155] Bluetooth: hci1: command tx timeout
[   93.091268][   T51] Bluetooth: hci0: command tx timeout
[   93.173220][ T5155] Bluetooth: hci3: command tx timeout
[   93.173279][   T51] Bluetooth: hci2: command tx timeout
[   93.190625][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.210277][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.251634][   T51] Bluetooth: hci4: command tx timeout
[   93.275076][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.317090][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.333746][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.345985][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.358468][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.395224][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.476600][ T5848] veth0_vlan: entered promiscuous mode
[   93.512907][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.580401][ T5848] veth1_vlan: entered promiscuous mode
[   93.617755][ T5844] veth0_vlan: entered promiscuous mode
[   93.624512][ T3997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.640454][ T3997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.697949][ T5844] veth1_vlan: entered promiscuous mode
[   93.726355][ T5852] veth0_vlan: entered promiscuous mode
[   93.743351][ T3997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.752700][ T3997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.772610][ T5852] veth1_vlan: entered promiscuous mode
[   93.850692][ T5853] veth0_vlan: entered promiscuous mode
[   93.880966][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.895364][ T5844] veth0_macvtap: entered promiscuous mode
[   93.921315][ T5853] veth1_vlan: entered promiscuous mode
[   93.936567][ T5848] veth0_macvtap: entered promiscuous mode
[   93.999389][ T5844] veth1_macvtap: entered promiscuous mode
[   94.040275][ T5852] veth0_macvtap: entered promiscuous mode
[   94.057651][ T5848] veth1_macvtap: entered promiscuous mode
[   94.095605][ T5852] veth1_macvtap: entered promiscuous mode
[   94.109434][ T5853] veth0_macvtap: entered promiscuous mode
[   94.143852][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.158361][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.170860][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.190116][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.208211][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.238771][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.332228][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.342805][ T5853] veth1_macvtap: entered promiscuous mode
[   94.362933][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.435114][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.476016][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.498068][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.508578][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.517867][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.547775][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.607031][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.616930][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.633354][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.644972][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.655276][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.665779][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.727093][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.774060][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.803558][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.812305][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.886457][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.903448][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.914005][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.927808][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.151436][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.165724][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.173798][   T51] Bluetooth: hci1: command tx timeout
[   95.178705][   T51] Bluetooth: hci0: command tx timeout
[   95.248356][   T51] Bluetooth: hci3: command tx timeout
[   95.248949][ T5155] Bluetooth: hci2: command tx timeout
[   95.346554][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.346760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.356489][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.428856][ T5155] Bluetooth: hci4: command tx timeout
[   95.772535][ T5962] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   95.809867][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.822279][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.888644][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.906815][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.926067][ T5966] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.046901][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.092868][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.213785][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.253012][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.295528][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.304655][ T5937] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.322228][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.478044][ T5937] usb 2-1: Using ep0 maxpacket: 16
[   96.497204][ T5964] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   96.543825][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   96.579403][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   96.616604][ T5937] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   96.647303][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.686850][ T5937] usb 2-1: Product: syz
[   96.702000][ T5937] usb 2-1: Manufacturer: syz
[   96.712760][ T5964] usb 5-1: Using ep0 maxpacket: 8
[   96.723465][ T5964] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[   96.738904][ T5937] usb 2-1: SerialNumber: syz
[   96.744126][ T5964] usb 5-1: config 0 has no interface number 0
[   96.770298][ T5964] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   96.791598][ T5937] usb 2-1: config 0 descriptor??
[   96.797542][ T5964] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   96.834336][ T5937] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   96.888188][ T5964] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   96.904193][ T5937] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[   96.948156][ T5964] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   97.056412][ T5964] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   97.071183][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.518785][ T5937] em28xx 2-1:0.0: chip ID is em2874
[   97.749850][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.826986][ T5964] usb 5-1: config 0 descriptor??
[   97.830611][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.870080][ T5964] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   97.974933][ T5964] usb 2-1: USB disconnect, device number 2
[   98.013156][ T6002] netlink: 'syz.0.15': attribute type 7 has an invalid length.
[   98.029292][ T5964] em28xx 2-1:0.0: Disconnecting em28xx
[   98.054412][ T5964] em28xx 2-1:0.0: Freeing device
[   98.219442][ T6008] netlink: 'syz.3.16': attribute type 1 has an invalid length.
[   98.269746][ T6008] Zero length message leads to an empty skb
[   98.380533][ T5937] usb 5-1: USB disconnect, device number 2
[   98.747172][ T5937] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  100.205835][ T6046] futex_wake_op: syz.0.27 tries to shift op by -1; fix this program
[  100.223399][ T6048] loop6: detected capacity change from 0 to 1
[  100.264452][ T6048] Dev loop6: unable to read RDB block 1
[  100.284644][ T6048]  loop6: unable to read partition table
[  100.338580][ T6048] loop6: partition table beyond EOD, truncated
[  100.394026][ T6048] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  100.486408][ T6044] No such timeout policy "syz0"
[  100.773999][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  100.876312][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  101.275419][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'.
[  101.400762][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[  101.437421][ T6061] netlink: 'syz.2.29': attribute type 14 has an invalid length.
[  101.464559][ T6061] netlink: 'syz.2.29': attribute type 13 has an invalid length.
[  101.651579][ T6071] syz_tun: entered allmulticast mode
[  101.669131][ T6071] dvmrp1: entered allmulticast mode
[  101.703915][ T6071] overlayfs: failed to resolve './file1': -2
[  101.854553][ T6081] netlink: 'syz.0.35': attribute type 21 has an invalid length.
[  101.863490][ T6081] IPv6: NLM_F_CREATE should be specified when creating new route
[  101.896720][ T6080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.970523][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  102.211194][ T6062] syz_tun: left allmulticast mode
[  102.336839][   T24] usb 2-1: device descriptor read/64, error -71
[  102.588211][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  102.704031][ T6098] netlink: 'syz.2.40': attribute type 1 has an invalid length.
[  102.799049][   T24] usb 2-1: device descriptor read/64, error -71
[  102.979640][   T24] usb usb2-port1: attempt power cycle
[  103.185929][ T6106] loop6: detected capacity change from 0 to 1
[  103.237272][ T6106] Dev loop6: unable to read RDB block 1
[  103.268715][ T6106]  loop6: unable to read partition table
[  103.275398][ T6106] loop6: partition table beyond EOD, truncated
[  103.378047][ T6106] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  103.527871][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'.
[  103.577051][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  103.586467][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.593305][ T6116] overlayfs: failed to resolve './file1': -2
[  103.595548][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.641128][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.716504][   T24] usb 2-1: device descriptor read/8, error -71
[  103.744313][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.788649][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.020578][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  104.214991][   T24] usb 2-1: device descriptor read/8, error -71
[  104.397879][   T24] usb usb2-port1: unable to enumerate USB device
[  104.608426][ T5964] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.943463][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  104.959729][ T5964] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  104.979735][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  104.994099][ T5964] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  105.016283][ T5964] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  105.035151][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.051812][ T5964] usb 4-1: config 0 descriptor??
[  105.068111][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  105.271647][ T6146] netlink: 'syz.2.53': attribute type 1 has an invalid length.
[  105.348768][ T5964] hdpvr 4-1:0.0: firmware version 0x1e dated ��q|RC�@�2���2[�7�B���D�^jvi0�
[  105.348768][ T5964] �����pY
[  105.398906][   T10] usb 5-1: Using ep0 maxpacket: 32
[  105.679792][ T6121] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  105.879158][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  105.902347][   T10] usb 5-1: unable to read config index 0 descriptor/start: -71
[  105.935557][   T10] usb 5-1: can't read configurations, error -71
[  106.595765][ T6157] loop6: detected capacity change from 0 to 1
[  106.617583][ T5993] Dev loop6: unable to read RDB block 1
[  106.630457][ T5993]  loop6: unable to read partition table
[  106.636995][ T5993] loop6: partition table beyond EOD, truncated
[  106.654758][ T6159] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[6159]
[  106.677368][ T6157] Dev loop6: unable to read RDB block 1
[  106.686673][ T6157]  loop6: unable to read partition table
[  106.727760][ T6157] loop6: partition table beyond EOD, truncated
[  106.735107][ T6157] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  106.846930][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.55'.
[  106.884955][ T6162] Driver unsupported XDP return value 0 on prog  (id 73) dev N/A, expect packet loss!
[  107.487193][ T6181] mmap: syz.2.62 (6181) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  108.274499][ T6183] process 'syz.2.62' launched './file0' with NULL argv: empty string added
[  109.878149][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  109.915031][ T5964] hdpvr 4-1:0.0: device init failed
[  109.926957][ T5964] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  109.966021][ T5964] usb 4-1: USB disconnect, device number 2
[  110.058712][   T10] usb 5-1: Using ep0 maxpacket: 16
[  111.043039][ T5155] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  111.052883][ T5155] Bluetooth: hci0: Injecting HCI hardware error event
[  111.063005][ T5155] Bluetooth: hci0: hardware error 0x00
[  111.173293][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  111.202399][ T6206] loop6: detected capacity change from 0 to 1
[  111.260131][   T10] usb 5-1: config 4 has an invalid interface number: 111 but max is 0
[  111.307472][ T6206] Dev loop6: unable to read RDB block 1
[  111.357182][   T10] usb 5-1: config 4 has no interface number 0
[  111.364908][ T6206]  loop6: unable to read partition table
[  111.391747][   T10] usb 5-1: config 4 interface 111 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 8
[  111.397858][ T6206] loop6: partition table beyond EOD, truncated
[  111.438918][   T10] usb 5-1: config 4 interface 111 has no altsetting 0
[  111.448707][ T6206] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  111.499940][   T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99
[  111.538649][ T6210] Bluetooth: MGMT ver 1.23
[  111.543605][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.564857][ T6210] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  111.569623][   T10] usb 5-1: Product: 慄ᡝ銾ꈇ㣇ッᑃ胂㐱뀾淒籂粮Ⲃإ計鯴
[  111.587836][   T10] usb 5-1: Manufacturer: 鰛㰖஍ᦿꥮꞇ꺔鷡䕸◈똉ፖ瑸ࢌ䈉大캼숢反逥筥Ƞ韵䍌묉۔呴쁒枅矺궯䬜ᢀ暰ប摳嘒靁鲯ꛑᒰᲜ됪農跿퍚㋘칺縛ꔧ悫䚓襩쫏누⎽最፳࣐扊ཪኊ䎘蔗蝜쉽퐥ی鋘甼吱ᐅ⵰蓦쫼㺟謞ȑ껁
[  111.618288][    C0] vkms_vblank_simulate: vblank timer overrun
[  111.662645][   T10] usb 5-1: SerialNumber: syz
[  111.718589][ T6190] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  111.873344][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  111.918076][   T10] pvrusb2: **********
[  111.928693][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  112.234151][   T10] pvrusb2: Important functionality might not be entirely working.
[  112.487595][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  112.555087][   T10] pvrusb2: **********
[  112.572092][   T10] usb 5-1: selecting invalid altsetting 0
[  112.602355][   T10] usb 5-1: USB disconnect, device number 5
[  112.603742][ T2343] pvrusb2: control-write URB failure, status=-71
[  112.805804][ T2343] pvrusb2: Device being rendered inoperable
[  112.822267][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  113.528176][ T5155] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  113.606005][ T6227] lo: entered allmulticast mode
[  113.610784][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  114.098228][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  114.260964][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.298435][ T6245] program syz.2.80 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.328164][   T10] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.363723][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  114.373493][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.400595][   T10] usb 5-1: Product: syz
[  114.405083][   T10] usb 5-1: Manufacturer: syz
[  114.418178][   T10] usb 5-1: SerialNumber: syz
[  114.473025][   T10] cdc_ncm 5-1:1.0: skipping garbage
[  114.511649][   T10] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  114.541970][   T10] cdc_ncm 5-1:1.0: bind() failure
[  114.592309][   T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  114.632112][   T10] cdc_ncm 5-1:1.1: bind() failure
[  115.684719][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'.
[  115.708204][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'.
[  116.328223][ T6269] xt_l2tp: invalid flags combination: 4
[  116.343020][   T10] usb 5-1: USB disconnect, device number 6
[  118.208805][ T5155] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  118.215874][   T51] Bluetooth: hci5: command 0x1003 tx timeout
[  118.331243][ T6266] mkiss: ax0: crc mode is auto.
[  118.788105][ T1632] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  118.845245][ T6295] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  119.742435][ T1632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.811825][ T1632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.863602][ T1632] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  120.012463][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'.
[  120.090712][ T1632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.230876][ T1632] usb 4-1: config 0 descriptor??
[  120.325355][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.376776][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.539172][ T5937] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  120.651129][ T6334] syzkaller1: entered promiscuous mode
[  120.657246][ T6334] syzkaller1: entered allmulticast mode
[  120.685314][ T1632] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 5/7
[  120.731581][ T5937] usb 2-1: Using ep0 maxpacket: 8
[  120.731785][ T1632] cp2112 0003:10C4:EA90.0001: parse failed
[  120.758184][ T1632] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22
[  120.758501][ T5937] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  120.785260][ T5937] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  120.958785][ T5937] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  120.968968][ T5937] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  120.984506][ T5937] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  121.031197][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.065284][ T1632] usb 4-1: USB disconnect, device number 3
[  121.310523][ T5937] usb 2-1: GET_CAPABILITIES returned 0
[  121.320461][ T5937] usbtmc 2-1:16.0: can't read capabilities
[  121.484499][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'.
[  122.955252][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.993706][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.765375][ T5964] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  123.992988][ T5937] usb 2-1: USB disconnect, device number 7
[  124.045611][ T5964] usb 4-1: config 0 has an invalid interface number: 46 but max is 0
[  124.061061][ T5964] usb 4-1: config 0 has no interface number 0
[  124.067280][ T5964] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  124.124722][ T5964] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  124.152134][ T5964] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  124.165901][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.175400][ T5964] usb 4-1: Product: syz
[  124.183489][ T5964] usb 4-1: Manufacturer: syz
[  124.189597][ T5964] usb 4-1: SerialNumber: syz
[  124.201939][ T5964] usb 4-1: config 0 descriptor??
[  124.210694][ T5964] ums-karma 4-1:0.46: USB Mass Storage device detected
[  125.224263][ T5964] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5
[  126.717083][ T5964] usb 4-1: USB disconnect, device number 4
[  128.395815][ T6400] ip6gre1: entered allmulticast mode
[  128.599669][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  128.878022][   T10] usb 5-1: Using ep0 maxpacket: 32
[  129.049867][   T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  129.601483][   T10] usb 5-1: config 0 has no interface number 0
[  129.704152][   T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  129.886964][   T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  129.919529][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.947584][   T10] usb 5-1: Product: syz
[  129.961303][   T10] usb 5-1: Manufacturer: syz
[  129.985088][   T10] usb 5-1: SerialNumber: syz
[  130.043446][   T10] usb 5-1: config 0 descriptor??
[  130.072663][   T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  130.128824][   T10] em28xx 5-1:0.132: Video interface 132 found:
[  130.188081][ T5841] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  130.398844][   T10] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  130.468054][ T5841] usb 4-1: Using ep0 maxpacket: 8
[  131.078800][ T5841] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  131.129338][ T5841] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  131.249983][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.259726][ T5841] usb 4-1: Product: syz
[  131.264207][ T5841] usb 4-1: Manufacturer: syz
[  131.273420][ T5841] usb 4-1: SerialNumber: syz
[  131.317603][ T5841] usb 4-1: config 0 descriptor??
[  131.386737][ T5841] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  131.413421][ T6429] virtio-fs: tag </dev/md0> not found
[  131.426434][ T6429] syz.2.124 uses obsolete (PF_INET,SOCK_PACKET)
[  131.566365][ T5841] usb 4-1: setting power ON
[  131.581004][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.616636][ T5841] dvb-usb: bulk message failed: -22 (2/0)
[  131.641824][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.660763][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  131.689622][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  131.695685][ T5841] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  131.719581][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.763045][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.782921][ T5841] usb 4-1: media controller created
[  131.789751][   T10] em28xx 5-1:0.132: board has no eeprom
[  131.804383][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.852485][ T6434] netlink: 'syz.4.126': attribute type 9 has an invalid length.
[  131.860398][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'.
[  131.874630][ T6434] hsr0: entered promiscuous mode
[  131.878048][   T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  131.880850][ T6434] macvlan2: entered promiscuous mode
[  131.893654][ T6434] macvlan2: entered allmulticast mode
[  131.898365][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.899272][ T6434] hsr0: entered allmulticast mode
[  131.913114][ T6434] hsr_slave_0: entered allmulticast mode
[  131.919194][ T6434] hsr_slave_1: entered allmulticast mode
[  131.947539][   T10] em28xx 5-1:0.132: analog set to bulk mode.
[  131.959693][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.967816][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  131.991283][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.019205][    T9] em28xx 5-1:0.132: Registering V4L2 extension
[  132.048778][   T10] usb 5-1: USB disconnect, device number 7
[  132.063921][   T10] em28xx 5-1:0.132: Disconnecting em28xx
[  132.083191][ T5841] usb 4-1: selecting invalid altsetting 6
[  132.148060][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.156784][ T5841] usb 4-1: digital interface selection failed (-22)
[  132.177534][ T5841] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  132.196719][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.228253][ T5841] usb 4-1: setting power OFF
[  132.249477][ T5841] dvb-usb: bulk message failed: -22 (2/0)
[  132.263946][ T5841] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  132.318260][ T5841] (NULL device *): no alternate interface
[  132.434000][ T5841] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  132.515373][ T5841] usb 4-1: USB disconnect, device number 5
[  132.646923][    T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  132.678287][    T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  132.706205][    T9] em28xx 5-1:0.132: No AC97 audio processor
[  132.769863][    T9] usb 5-1: Decoder not found
[  132.774641][    T9] em28xx 5-1:0.132: failed to create media graph
[  132.797225][    T9] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  132.818111][    T9] em28xx 5-1:0.132: Remote control support is not available for this card.
[  132.878896][   T10] em28xx 5-1:0.132: Closing input extension
[  132.937032][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  132.944227][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  132.974921][   T10] em28xx 5-1:0.132: Freeing device
[  134.039989][ T6463] netlink: 'syz.3.133': attribute type 1 has an invalid length.
[  134.068673][ T5841] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  134.307363][ T6467] loop6: detected capacity change from 0 to 1
[  134.341268][ T5967] Dev loop6: unable to read RDB block 1
[  134.360267][ T5967]  loop6: unable to read partition table
[  134.376439][ T5967] loop6: partition table beyond EOD, truncated
[  134.397211][ T6467] Dev loop6: unable to read RDB block 1
[  134.397978][ T5841] usb 3-1: Using ep0 maxpacket: 8
[  134.408484][ T6467]  loop6: unable to read partition table
[  134.415799][ T5841] usb 3-1: config 127 has an invalid interface number: 195 but max is 1
[  134.425074][ T6467] loop6: partition table beyond EOD, truncated
[  134.431441][ T5841] usb 3-1: config 127 has an invalid interface number: 242 but max is 1
[  134.440648][ T6467] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  134.452329][ T5841] usb 3-1: config 127 has no interface number 0
[  134.464616][ T5841] usb 3-1: config 127 has no interface number 1
[  134.471244][ T5841] usb 3-1: config 127 interface 242 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  134.488926][ T5841] usb 3-1: config 127 interface 195 has no altsetting 0
[  134.496124][ T5841] usb 3-1: config 127 interface 242 has no altsetting 0
[  134.511123][ T5841] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=3e.d0
[  134.548045][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.556401][ T5841] usb 3-1: Product: syz
[  134.584648][ T5841] usb 3-1: Manufacturer: syz
[  134.606952][ T5841] usb 3-1: SerialNumber: syz
[  134.704452][ T1632] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  134.874842][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'.
[  134.884180][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.136'.
[  134.942714][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.038018][ T1632] usb 5-1: Using ep0 maxpacket: 32
[  135.350257][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.353711][ T1632] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  135.484188][ T1632] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  135.943664][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.968230][ T1632] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  135.986104][ T1632] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  135.997684][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.011031][ T1632] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  136.036913][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.059538][ T1632] usb 5-1: config 0 interface 0 has no altsetting 0
[  136.101141][ T1632] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  136.118458][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.126638][ T1632] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  136.136715][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.154661][ T1632] usb 5-1: Product: syz
[  136.167424][ T1632] usb 5-1: Manufacturer: syz
[  136.174417][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.192677][ T1632] usb 5-1: SerialNumber: syz
[  136.381830][ T6479] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.138'.
[  136.558653][ T1632] usb 5-1: config 0 descriptor??
[  136.566248][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.604938][ T1632] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  136.618554][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.653710][ T1632] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  136.773401][ T6469] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90
[  136.812005][ T5841] usb 3-1: USB disconnect, device number 2
[  137.732044][   T30] audit: type=1800 audit(1755396624.471:2): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.141" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  137.898514][   T10] usb 5-1: USB disconnect, device number 8
[  137.930830][ T6493] netlink: 'syz.3.142': attribute type 1 has an invalid length.
[  138.352541][   T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  138.372881][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.456199][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.457959][   T30] audit: type=1326 audit(1755396625.731:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6126f8ebe9 code=0x7ffc0000
[  140.397970][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  140.407718][   T30] audit: type=1326 audit(1755396625.731:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6126f8ebe9 code=0x7ffc0000
[  140.435212][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'.
[  140.530381][   T30] audit: type=1326 audit(1755396625.731:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6126f8ebe9 code=0x7ffc0000
[  140.552574][   T30] audit: type=1326 audit(1755396625.731:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6126f8ebe9 code=0x7ffc0000
[  140.594898][   T30] audit: type=1326 audit(1755396625.741:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6126f90b07 code=0x7ffc0000
[  140.648042][   T30] audit: type=1326 audit(1755396625.741:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6126f90a7c code=0x7ffc0000
[  140.670342][ T6514] loop6: detected capacity change from 0 to 1
[  140.683338][ T6514] Dev loop6: unable to read RDB block 1
[  140.691718][ T6514]  loop6: unable to read partition table
[  140.693091][   T30] audit: type=1326 audit(1755396625.741:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6126f909b4 code=0x7ffc0000
[  140.708078][ T6514] loop6: partition table beyond EOD, truncated
[  140.753719][   T30] audit: type=1326 audit(1755396625.741:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6126f909b4 code=0x7ffc0000
[  140.754948][ T6514] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  140.802872][   T30] audit: type=1326 audit(1755396625.761:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6126f8d84a code=0x7ffc0000
[  141.038843][ T6519] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.149'.
[  141.209137][ T6525] netlink: 68 bytes leftover after parsing attributes in process `syz.0.150'.
[  141.239315][ T6525] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  142.130706][ T6544] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 6544 comm: syz.3.154)
[  142.409063][ T6546] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 2, id = 0
[  142.750576][ T6540] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  142.848271][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  142.848291][   T30] audit: type=1800 audit(1755396629.691:69): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.154" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=9883 res=0 errno=0
[  142.930374][ T6550] fuseblk: Unknown parameter 'grnup_id'
[  143.327980][ T6570] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  144.550261][ T5841] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[  144.568287][ T6574] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.163'.
[  144.682984][ T6577] loop6: detected capacity change from 0 to 1
[  144.710013][ T6577] Dev loop6: unable to read RDB block 1
[  144.716048][ T6577]  loop6: unable to read partition table
[  144.741788][ T6577] loop6: partition table beyond EOD, truncated
[  144.760269][ T5841] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  144.771050][ T5841] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  144.788003][ T5841] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  144.800218][ T5841] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  144.818103][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  144.826168][ T6577] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  144.837544][ T5841] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  144.860007][ T5841] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  144.867642][ T5841] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  144.897563][ T5841] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  144.941666][ T5841] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  144.978604][ T5841] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  145.165234][    T9] usb 5-1: Using ep0 maxpacket: 16
[  145.171760][ T5841] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  145.181632][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.207590][    T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  145.217780][ T5841] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  145.217814][ T5841] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  145.217839][ T5841] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  145.222451][ T5841] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  145.248842][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.291417][ T5841] usb 3-1: string descriptor 0 read error: -22
[  145.297992][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  145.314313][    T9] usb 5-1: config 0 descriptor??
[  145.316331][ T5841] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  145.360368][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.381978][ T5841] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  145.479736][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  145.495941][   T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  145.506293][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  145.515688][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.529528][ T6581] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  145.548939][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  145.581224][ T5841] usb 3-1: USB disconnect, device number 3
[  145.915982][ T5904] usb 4-1: USB disconnect, device number 6
[  146.140345][ T6573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.290140][ T6573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.537715][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  147.560692][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  147.580803][    T9] usb 5-1: USB disconnect, device number 10
[  147.838427][ T6609] netlink: 64 bytes leftover after parsing attributes in process `syz.1.173'.
[  148.324959][ T5841] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  148.848112][ T5841] usb 5-1: Using ep0 maxpacket: 32
[  149.019675][ T5841] usb 5-1: config 8 has an invalid interface number: 203 but max is 0
[  149.048012][ T5841] usb 5-1: config 8 has no interface number 0
[  149.054215][ T5841] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[  149.102173][ T5841] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[  149.328779][ T5841] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023
[  149.357958][ T5841] usb 5-1: config 8 interface 203 has no altsetting 0
[  149.367447][ T5841] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  149.386499][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.426995][ T5841] usb 5-1: Product: syz
[  149.805083][ T6638] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[  149.867480][   T24] IPVS: starting estimator thread 0...
[  149.998094][ T5841] usb 5-1: Manufacturer: syz
[  150.002968][ T5841] usb 5-1: SerialNumber: syz
[  150.040964][ T6640] IPVS: using max 24 ests per chain, 57600 per kthread
[  150.249527][ T6611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.270016][ T6611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.379303][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'.
[  150.421359][ T6647] Cannot find del_set index 0 as target
[  151.050998][ T6655] FAULT_INJECTION: forcing a failure.
[  151.050998][ T6655] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  151.128256][ T6655] CPU: 1 UID: 0 PID: 6655 Comm: syz.0.184 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  151.128284][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  151.128304][ T6655] Call Trace:
[  151.128315][ T6655]  <TASK>
[  151.128324][ T6655]  dump_stack_lvl+0x189/0x250
[  151.128359][ T6655]  ? __pfx____ratelimit+0x10/0x10
[  151.128380][ T6655]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.128401][ T6655]  ? __pfx__printk+0x10/0x10
[  151.128428][ T6655]  ? fs_reclaim_acquire+0x7d/0x100
[  151.128460][ T6655]  should_fail_ex+0x414/0x560
[  151.128486][ T6655]  prepare_alloc_pages+0x213/0x610
[  151.128516][ T6655]  __alloc_frozen_pages_noprof+0x123/0x370
[  151.128545][ T6655]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  151.128578][ T6655]  ? policy_nodemask+0x27c/0x720
[  151.128604][ T6655]  alloc_pages_mpol+0x232/0x4a0
[  151.128630][ T6655]  folio_alloc_mpol_noprof+0x39/0x70
[  151.128653][ T6655]  shmem_alloc_and_add_folio+0x447/0xf60
[  151.128676][ T6655]  ? filemap_get_entry+0xad/0x2f0
[  151.128704][ T6655]  ? filemap_get_entry+0xad/0x2f0
[  151.128729][ T6655]  ? filemap_get_entry+0xad/0x2f0
[  151.128760][ T6655]  ? shmem_huge_global_enabled+0x174/0x3a0
[  151.128787][ T6655]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  151.128810][ T6655]  ? shmem_allowable_huge_orders+0x414/0x420
[  151.128844][ T6655]  shmem_get_folio_gfp+0x59d/0x1660
[  151.128892][ T6655]  shmem_fault+0x179/0x390
[  151.128920][ T6655]  __do_fault+0x138/0x390
[  151.128945][ T6655]  __handle_mm_fault+0x198b/0x5620
[  151.128995][ T6655]  ? __pfx___handle_mm_fault+0x10/0x10
[  151.129046][ T6655]  ? find_vma+0xe7/0x160
[  151.129063][ T6655]  ? __pfx_find_vma+0x10/0x10
[  151.129083][ T6655]  handle_mm_fault+0x2d5/0x7f0
[  151.129123][ T6655]  do_user_addr_fault+0x764/0x1390
[  151.129169][ T6655]  exc_page_fault+0x76/0xf0
[  151.129192][ T6655]  asm_exc_page_fault+0x26/0x30
[  151.129210][ T6655] RIP: 0010:rep_stos_alternative+0x40/0x80
[  151.129235][ T6655] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
[  151.129257][ T6655] RSP: 0018:ffffc900051f7a98 EFLAGS: 00050202
[  151.129275][ T6655] RAX: 0000000000000000 RBX: 00007ffffffff001 RCX: 00000000001fe080
[  151.129288][ T6655] RDX: 0000000000000000 RSI: ffffffff8db6fcc6 RDI: 0000200000002000
[  151.129301][ T6655] RBP: ffffc900051f7be8 R08: 0000000000000000 R09: ffffffff8208a560
[  151.129314][ T6655] R10: 0000000000000005 R11: 0000000000000000 R12: 0000200000000080
[  151.129325][ T6655] R13: 0000200000200080 R14: 1ffff92000a3efaf R15: 0000000000200000
[  151.129346][ T6655]  ? __might_fault+0xb0/0x130
[  151.129374][ T6655]  iov_iter_zero+0x1ba/0x1690
[  151.129398][ T6655]  ? __pfx_filemap_get_entry+0x10/0x10
[  151.129436][ T6655]  ? __pfx_iov_iter_zero+0x10/0x10
[  151.129464][ T6655]  ? __filemap_get_folio+0x9a6/0xaf0
[  151.129500][ T6655]  hugetlbfs_read_iter+0x3ca/0x7f0
[  151.129544][ T6655]  vfs_read+0x4d0/0x980
[  151.129582][ T6655]  ? __pfx_vfs_read+0x10/0x10
[  151.129621][ T6655]  ? __fget_files+0x2a/0x420
[  151.129652][ T6655]  ksys_read+0x145/0x250
[  151.129673][ T6655]  ? __pfx_ksys_read+0x10/0x10
[  151.129687][ T6655]  ? rcu_is_watching+0x15/0xb0
[  151.129711][ T6655]  ? do_syscall_64+0xbe/0x3b0
[  151.129734][ T6655]  do_syscall_64+0xfa/0x3b0
[  151.129752][ T6655]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.129770][ T6655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.129789][ T6655]  ? clear_bhb_loop+0x60/0xb0
[  151.129812][ T6655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.129830][ T6655] RIP: 0033:0x7f406c98ebe9
[  151.129852][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.129868][ T6655] RSP: 002b:00007f406d828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  151.129886][ T6655] RAX: ffffffffffffffda RBX: 00007f406cbb5fa0 RCX: 00007f406c98ebe9
[  151.129900][ T6655] RDX: 00000000ffffffce RSI: 0000200000000080 RDI: 0000000000000004
[  151.129912][ T6655] RBP: 00007f406d828090 R08: 0000000000000000 R09: 0000000000000000
[  151.129924][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.129935][ T6655] R13: 00007f406cbb6038 R14: 00007f406cbb5fa0 R15: 00007ffe119533e8
[  151.129968][ T6655]  </TASK>
[  153.750879][ T6675] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  153.860222][ T6673] overlayfs: conflicting lowerdir path
[  154.557499][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'.
[  154.650145][ T6686] tipc: Started in network mode
[  154.655428][ T6686] tipc: Node identity 7, cluster identity 5
[  154.698527][ T6686] tipc: Node number set to 7
[  154.756710][ T6686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.192'.
[  155.694966][    C1] port100 5-1:8.203: NFC: Urb failure (status -71)
[  155.702511][    C1] port100 5-1:8.203: NFC: Urb failure (status -71)
[  155.718646][ T5841] port100 5-1:8.203: NFC: Could not get supported command types
[  156.099388][   T10] usb 5-1: USB disconnect, device number 11
[  157.921824][ T6718] sctp: [Deprecated]: syz.4.200 (pid 6718) Use of struct sctp_assoc_value in delayed_ack socket option.
[  157.921824][ T6718] Use struct sctp_sack_info instead
[  159.670945][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'.
[  159.723720][ T6748] overlay: Unknown parameter 'fscontext'
[  159.823404][ T6749] kvm: MWAIT instruction emulated as NOP!
[  159.947498][ T1632] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  160.314677][ T1632] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.402108][ T1632] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  160.412998][ T1632] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  160.985788][ T1632] usb 3-1: Product: syz
[  160.993659][ T1632] usb 3-1: Manufacturer: syz
[  161.010716][ T1632] usb 3-1: SerialNumber: syz
[  161.493400][ T1632] usb 3-1: config 0 descriptor??
[  161.556595][ T1632] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  161.575402][ T6763] capability: warning: `syz.4.211' uses deprecated v2 capabilities in a way that may be insecure
[  162.148989][    C1] vcan0: j1939_tp_rxtimer: 0xffff888034500000: rx timeout, send abort
[  162.649915][    C1] vcan0: j1939_tp_rxtimer: 0xffff888034502000: rx timeout, send abort
[  162.658337][    C1] vcan0: j1939_tp_rxtimer: 0xffff888034500000: abort rx timeout. Force session deactivation
[  163.158053][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  163.158202][    C1] vcan0: j1939_tp_rxtimer: 0xffff888034502000: abort rx timeout. Force session deactivation
[  163.265098][ T5841] usb 3-1: USB disconnect, device number 4
[  163.463838][ T6781] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.409129][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  164.568035][    T9] usb 2-1: Using ep0 maxpacket: 16
[  164.583439][    T9] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config
[  164.598078][ T5964] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  164.646540][    T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  164.668764][    T9] usb 2-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4
[  164.681001][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.692332][    T9] usb 2-1: Product: syz
[  164.696641][    T9] usb 2-1: Manufacturer: syz
[  164.701600][    T9] usb 2-1: SerialNumber: syz
[  164.764665][   T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  164.767664][ T6799] netlink: 64 bytes leftover after parsing attributes in process `syz.3.219'.
[  164.818055][ T5964] usb 5-1: Using ep0 maxpacket: 32
[  164.829807][ T5964] usb 5-1: config 0 has an invalid interface number: 226 but max is 0
[  164.848224][ T5964] usb 5-1: config 0 has no interface number 0
[  164.854440][ T5964] usb 5-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.888480][ T5964] usb 5-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.913231][ T5964] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00
[  164.933375][   T24] usb 3-1: config 0 has an invalid interface number: 138 but max is 0
[  164.943352][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.957195][ T5964] usb 5-1: config 0 descriptor??
[  165.013717][    T9] usb 2-1: USB disconnect, device number 9
[  165.015409][   T24] usb 3-1: config 0 has no interface number 0
[  165.035317][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66
[  165.044986][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.065407][   T24] usb 3-1: config 0 descriptor??
[  165.290820][   T24] usb 3-1: string descriptor 0 read error: -71
[  165.299390][   T24] usbtest 3-1:0.138: couldn't get endpoints, -22
[  165.306032][   T24] usbtest 3-1:0.138: probe with driver usbtest failed with error -22
[  165.317518][   T24] usb 3-1: USB disconnect, device number 5
[  166.648409][ T5964] usbhid 5-1:0.226: can't add hid device: -71
[  166.654661][ T5964] usbhid 5-1:0.226: probe with driver usbhid failed with error -71
[  166.734282][ T5964] usb 5-1: USB disconnect, device number 12
[  166.740147][ T6811] netlink: 'syz.2.223': attribute type 10 has an invalid length.
[  166.855228][ T6811] 8021q: adding VLAN 0 to HW filter on device team0
[  166.860927][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'.
[  166.960467][ T6811] bond0: (slave team0): Enslaving as an active interface with an up link
[  167.141231][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  167.288800][ T6811] syz.2.223 (6811) used greatest stack depth: 19536 bytes left
[  167.350556][   T24] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  167.364650][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'.
[  167.381813][   T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  167.416298][   T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  167.457989][   T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  167.485073][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.507223][ T6815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  167.775224][ T6833] netlink: 'syz.2.227': attribute type 6 has an invalid length.
[  167.783513][ T6833] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.227'.
[  168.048006][   T24] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  168.079525][   T24] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6
[  168.166282][   T24] usb 2-1: USB disconnect, device number 10
[  168.172571][    C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  168.579818][ T6855] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  169.750497][ T6871] netlink: 64 bytes leftover after parsing attributes in process `syz.1.233'.
[  171.158959][ T1632] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  171.307735][ T6881] netlink: 'syz.3.238': attribute type 6 has an invalid length.
[  171.318813][ T6881] netlink: 'syz.3.238': attribute type 6 has an invalid length.
[  171.578797][ T1632] usb 5-1: config 0 has an invalid interface number: 84 but max is 0
[  171.587310][ T1632] usb 5-1: config 0 has no interface number 0
[  171.602531][ T1632] usb 5-1: config 0 interface 84 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  171.658011][ T1632] usb 5-1: New USB device found, idVendor=2013, idProduct=0258, bcdDevice=dc.e5
[  171.688114][ T1632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.705781][ T1632] usb 5-1: config 0 descriptor??
[  171.918141][ T1632] usb 5-1: string descriptor 0 read error: -71
[  171.940219][ T1632] usb 5-1: USB disconnect, device number 13
[  172.368038][   T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  172.613660][   T24] usb 4-1: device descriptor read/64, error -71
[  174.058084][   T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  174.218218][   T24] usb 4-1: device descriptor read/64, error -71
[  174.496148][   T24] usb usb4-port1: attempt power cycle
[  175.170244][   T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  176.257576][   T24] usb 4-1: device descriptor read/8, error -71
[  177.419240][ T6939] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  177.897498][ T6939] syz.2.255 (6939) used greatest stack depth: 18656 bytes left
[  178.159468][ T6956] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  178.168435][ T6956] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  179.540322][ T6976] overlay: Unknown parameter 'euid>00000000000000049663'
[  180.221846][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[  180.249559][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'.
[  180.274598][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'.
[  180.411987][ T6995] netlink: 'syz.4.270': attribute type 21 has an invalid length.
[  180.428227][ T6995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.270'.
[  180.474764][ T6995] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.270'.
[  180.618180][   T49] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  180.838623][   T49] usb 2-1: device descriptor read/64, error -71
[  181.107980][   T49] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  181.852523][ T7007] 9pnet_fd: Insufficient options for proto=fd
[  181.928095][ T5841] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  181.937308][   T49] usb 2-1: device descriptor read/64, error -71
[  182.068876][   T49] usb usb2-port1: attempt power cycle
[  182.128323][ T5841] usb 3-1: Using ep0 maxpacket: 8
[  182.162762][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.210593][ T5841] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  182.251631][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.327524][ T5841] usb 3-1: config 0 descriptor??
[  182.714535][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.874202][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.101628][   T49] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  183.201362][   T49] usb 2-1: device descriptor read/8, error -71
[  183.333537][ T5841] lenovo 0003:17EF:6062.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0
[  183.527780][ T5841] usb 3-1: USB disconnect, device number 6
[  183.806913][ T7032] dlm: no local IP address has been set
[  183.813226][ T7032] dlm: cannot start dlm midcomms -107
[  185.800287][ T7054] netlink: 64 bytes leftover after parsing attributes in process `syz.3.285'.
[  186.685210][ T7053] FAULT_INJECTION: forcing a failure.
[  186.685210][ T7053] name failslab, interval 1, probability 0, space 0, times 1
[  187.061901][ T7053] CPU: 1 UID: 0 PID: 7053 Comm: syz.3.285 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  187.061919][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  187.061926][ T7053] Call Trace:
[  187.061932][ T7053]  <TASK>
[  187.061938][ T7053]  dump_stack_lvl+0x189/0x250
[  187.061970][ T7053]  ? __pfx____ratelimit+0x10/0x10
[  187.061981][ T7053]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.061993][ T7053]  ? __pfx__printk+0x10/0x10
[  187.062008][ T7053]  ? __pfx___might_resched+0x10/0x10
[  187.062020][ T7053]  ? fs_reclaim_acquire+0x7d/0x100
[  187.062036][ T7053]  should_fail_ex+0x414/0x560
[  187.062050][ T7053]  ? __pfx_proc_alloc_inode+0x10/0x10
[  187.062064][ T7053]  should_failslab+0xa8/0x100
[  187.062076][ T7053]  ? __pfx_proc_alloc_inode+0x10/0x10
[  187.062087][ T7053]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  187.062097][ T7053]  ? proc_alloc_inode+0x2a/0xc0
[  187.062112][ T7053]  ? __pfx_proc_alloc_inode+0x10/0x10
[  187.062124][ T7053]  proc_alloc_inode+0x2a/0xc0
[  187.062137][ T7053]  alloc_inode+0x67/0x1b0
[  187.062149][ T7053]  new_inode+0x22/0x170
[  187.062163][ T7053]  proc_pid_make_inode+0x21/0x130
[  187.062179][ T7053]  proc_pident_instantiate+0x6d/0x2b0
[  187.062198][ T7053]  proc_pident_lookup+0x1b3/0x290
[  187.062213][ T7053]  __lookup_slow+0x297/0x3d0
[  187.062229][ T7053]  ? __pfx___lookup_slow+0x10/0x10
[  187.062248][ T7053]  ? generic_permission+0x2db/0x690
[  187.062263][ T7053]  ? down_read+0x1ad/0x2e0
[  187.062277][ T7053]  lookup_slow+0x53/0x70
[  187.062291][ T7053]  link_path_walk+0x935/0xea0
[  187.062314][ T7053]  path_openat+0x28c/0x3830
[  187.062327][ T7053]  ? arch_stack_walk+0xfc/0x150
[  187.062359][ T7053]  ? __pfx_path_openat+0x10/0x10
[  187.062372][ T7053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.062394][ T7053]  do_filp_open+0x1fa/0x410
[  187.062407][ T7053]  ? __lock_acquire+0xab9/0xd20
[  187.062419][ T7053]  ? __pfx_do_filp_open+0x10/0x10
[  187.062440][ T7053]  ? __pfx_kfree_link+0x10/0x10
[  187.062456][ T7053]  ? _raw_spin_unlock+0x28/0x50
[  187.062470][ T7053]  ? alloc_fd+0x64c/0x6c0
[  187.062487][ T7053]  do_sys_openat2+0x121/0x1c0
[  187.062503][ T7053]  ? __pfx_do_sys_openat2+0x10/0x10
[  187.062517][ T7053]  ? ksys_write+0x22a/0x250
[  187.062528][ T7053]  ? __pfx_ksys_write+0x10/0x10
[  187.062536][ T7053]  ? rcu_is_watching+0x15/0xb0
[  187.062549][ T7053]  __x64_sys_openat+0x138/0x170
[  187.062566][ T7053]  do_syscall_64+0xfa/0x3b0
[  187.062577][ T7053]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.062588][ T7053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.062597][ T7053]  ? clear_bhb_loop+0x60/0xb0
[  187.062610][ T7053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.062619][ T7053] RIP: 0033:0x7ff6c638d550
[  187.062633][ T7053] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  187.062642][ T7053] RSP: 002b:00007ff6c7250f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  187.062659][ T7053] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff6c638d550
[  187.062666][ T7053] RDX: 0000000000000000 RSI: 00007ff6c6411f06 RDI: 00000000ffffff9c
[  187.062673][ T7053] RBP: 00007ff6c6411f06 R08: 0000000000000000 R09: 0000000000000000
[  187.062679][ T7053] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  187.062684][ T7053] R13: 00007ff6c65b6128 R14: 00007ff6c65b6090 R15: 00007ffe2f09eef8
[  187.062701][ T7053]  </TASK>
[  189.017309][ T7071] loop9: detected capacity change from 0 to 8
[  189.121084][ T7071] Dev loop9: unable to read RDB block 8
[  189.126827][ T7071]  loop9: unable to read partition table
[  189.133582][ T7071] loop9: partition table beyond EOD, truncated
[  189.152414][ T7071] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  189.161720][ T7080] fuse: Unknown parameter ' �z�;y^����MP���'
[  189.767607][ T7082] bridge0: entered allmulticast mode
[  189.834961][ T7082] bridge0: left allmulticast mode
[  190.565476][ T7098] netlink: 'syz.1.297': attribute type 1 has an invalid length.
[  190.657243][ T7098] netlink: 184 bytes leftover after parsing attributes in process `syz.1.297'.
[  190.671201][ T7098] netlink: 'syz.1.297': attribute type 1 has an invalid length.
[  191.495910][ T7102] evm: overlay not supported
[  193.820341][ T7125] NILFS (nbd4): device size too small
[  194.428856][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.847963][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  195.276700][ T7142] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.307'.
[  195.464517][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.309'.
[  195.678775][   T30] audit: type=1326 audit(1755396682.931:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6c638ebe9 code=0x0
[  195.708909][ T5964] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  196.213762][ T7162] binder: Unknown parameter 'seclabel'
[  196.609440][ T5964] usb 2-1: Using ep0 maxpacket: 16
[  196.640718][ T5964] usb 2-1: config 0 has an invalid interface number: 15 but max is 0
[  196.664617][ T5964] usb 2-1: config 0 has no interface number 0
[  196.674990][ T5964] usb 2-1: New USB device found, idVendor=05ac, idProduct=e7da, bcdDevice=4b.a9
[  196.695616][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.703840][ T5964] usb 2-1: Product: syz
[  196.713798][ T5964] usb 2-1: Manufacturer: syz
[  196.918118][   T49] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  196.921885][ T5964] usb 2-1: SerialNumber: syz
[  196.971060][ T5964] usb 2-1: config 0 descriptor??
[  197.111256][   T49] usb 4-1: no configurations
[  197.117189][   T49] usb 4-1: can't read configurations, error -22
[  197.183608][ T5964] ipheth 2-1:0.15: Unable to find alternate settings interface
[  197.210897][ T5964] usb 2-1: USB disconnect, device number 15
[  197.278177][   T49] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  197.469075][   T49] usb 4-1: no configurations
[  197.474161][   T49] usb 4-1: can't read configurations, error -22
[  197.496312][   T49] usb usb4-port1: attempt power cycle
[  197.862117][   T49] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  197.903171][   T49] usb 4-1: no configurations
[  197.907945][   T49] usb 4-1: can't read configurations, error -22
[  198.038138][   T49] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  198.112694][   T49] usb 4-1: no configurations
[  198.123119][   T49] usb 4-1: can't read configurations, error -22
[  198.720314][   T49] usb usb4-port1: unable to enumerate USB device
[  198.999074][ T7194] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.321'.
[  199.121625][ T7203] netlink: 96 bytes leftover after parsing attributes in process `syz.2.324'.
[  199.130301][ T5964] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  199.352515][ T5964] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  199.414303][ T5911] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  199.552107][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.573867][ T5964] usb 5-1: config 0 descriptor??
[  200.269959][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.289659][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  200.309561][ T5911] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  200.322854][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  200.331777][ T5911] usb 3-1: SerialNumber: syz
[  200.377585][ T7213] netlink: 'syz.3.328': attribute type 3 has an invalid length.
[  200.833152][ T7211] Invalid logical block size (8210)
[  200.875825][ T5911] usb 3-1: 0:2 : does not exist
[  200.928944][ T5911] usb 3-1: USB disconnect, device number 7
[  200.938336][ T7219] usb usb8: usbfs: process 7219 (syz.3.328) did not claim interface 0 before use
[  201.244991][ T5964] usb 5-1: Cannot set autoneg
[  201.262370][ T5964] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  202.315850][ T5964] usb 5-1: USB disconnect, device number 14
[  202.596896][ T7231] netlink: 'syz.4.333': attribute type 2 has an invalid length.
[  202.631142][ T7231] netlink: 'syz.4.333': attribute type 8 has an invalid length.
[  202.763664][ T7231] netlink: 132 bytes leftover after parsing attributes in process `syz.4.333'.
[  203.396997][ T5964] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  203.689410][ T5964] usb 2-1: Using ep0 maxpacket: 8
[  203.706960][ T5964] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  203.728730][ T5964] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  203.966515][ T5964] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  204.731410][ T5964] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 166, changing to 11
[  204.762454][ T5964] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  204.823850][ T7249] overlay: Unknown parameter '/'
[  205.159240][ T5964] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  205.166712][ T5964] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  205.249122][ T5964] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  205.311197][ T5964] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 166, changing to 11
[  205.380424][ T5964] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  205.543765][ T5964] usb 2-1: unable to read config index 2 descriptor/start: -71
[  205.591058][ T5964] usb 2-1: can't read configurations, error -71
[  205.755484][ T7269] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.340'.
[  205.822199][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.342'.
[  205.907679][ T7265] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.341'.
[  206.377989][ T5841] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  206.537980][ T5841] usb 4-1: Using ep0 maxpacket: 16
[  206.552323][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.566972][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  206.589595][ T5841] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  206.632447][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.662330][ T5841] usb 4-1: Product: syz
[  206.666568][ T5841] usb 4-1: Manufacturer: syz
[  206.697080][ T5841] usb 4-1: SerialNumber: syz
[  206.717936][ T5964] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  207.034727][ T5841] usb 4-1: 0:2 : does not exist
[  207.362306][ T5841] usb 4-1: USB disconnect, device number 16
[  207.457948][ T5964] usb 2-1: Using ep0 maxpacket: 8
[  207.469656][ T5964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.488007][ T5964] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  207.501266][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.509933][ T5964] usb 2-1: Product: syz
[  207.514594][ T5964] usb 2-1: Manufacturer: syz
[  207.519475][ T5964] usb 2-1: SerialNumber: syz
[  207.530636][ T5964] usb 2-1: config 0 descriptor??
[  207.540576][ T5964] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22
[  207.572108][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.348'.
[  207.738371][   T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  207.746860][ T5911] usb 2-1: USB disconnect, device number 17
[  207.847830][ T7299] syzkaller0: entered promiscuous mode
[  207.855444][ T7299] syzkaller0: entered allmulticast mode
[  207.899959][   T24] usb 3-1: config 150 has an invalid interface number: 204 but max is 1
[  207.917933][   T24] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  208.048357][   T24] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 2
[  208.057577][   T24] usb 3-1: config 150 has no interface number 0
[  208.067937][   T24] usb 3-1: config 150 interface 204 has no altsetting 0
[  208.080363][   T24] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  208.090386][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.107949][   T24] usb 3-1: Product: syz
[  208.112412][   T24] usb 3-1: Manufacturer: syz
[  208.117033][   T24] usb 3-1: SerialNumber: syz
[  208.198027][ T5964] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  208.330541][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.346675][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.418370][ T5964] usb 4-1: config 0 has an invalid interface number: 138 but max is 0
[  208.426907][ T5964] usb 4-1: config 0 has no interface number 0
[  208.447362][ T5964] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66
[  208.476055][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.521262][ T5964] usb 4-1: config 0 descriptor??
[  208.575714][   T24] xr_serial 3-1:150.204: skipping garbage
[  208.586011][ T7308] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.354'.
[  208.598352][   T24] usb 3-1: USB disconnect, device number 8
[  209.954125][ T7321] netlink: 'syz.2.358': attribute type 1 has an invalid length.
[  210.968099][ T5964] usb 4-1: string descriptor 0 read error: -71
[  211.031182][ T5964] usbtest 4-1:0.138: couldn't get endpoints, -22
[  211.051087][ T5964] usbtest 4-1:0.138: probe with driver usbtest failed with error -22
[  211.067047][ T5964] usb 4-1: USB disconnect, device number 17
[  211.887965][ T7317] Bluetooth: hci1: command 0x0406 tx timeout
[  211.902223][ T5843] Bluetooth: hci4: command 0x0406 tx timeout
[  211.908697][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  211.915063][ T7317] Bluetooth: hci3: command 0x0406 tx timeout
[  213.050247][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'.
[  213.333949][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.365'.
[  214.346671][ T7369] overlayfs: missing 'lowerdir'
[  216.292322][   T30] audit: type=1800 audit(1755396703.511:71): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.369" name="nullb0" dev="devtmpfs" ino=2871 res=0 errno=0
[  216.678171][ T5911] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  216.850113][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  216.884150][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  216.895923][ T5911] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  216.907013][ T5911] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  216.934053][ T7363] vlan2: entered promiscuous mode
[  216.948805][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  216.958232][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.972487][ T5911] usb 3-1: Product: syz
[  216.976718][ T5911] usb 3-1: Manufacturer: syz
[  216.987934][ T7363] macvtap0: entered promiscuous mode
[  217.013766][ T5911] usb 3-1: SerialNumber: syz
[  217.033850][ T7380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  217.050425][ T5911] cdc_mbim 3-1:1.0: skipping garbage
[  217.145325][ T7387] netlink: 800 bytes leftover after parsing attributes in process `syz.3.371'.
[  217.244313][ T7380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  217.256245][ T7380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  217.294802][ T7387] netlink: 1301 bytes leftover after parsing attributes in process `syz.3.371'.
[  217.895149][ T7380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  217.913569][ T7380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  217.944069][ T5911] cdc_mbim 3-1:1.0: setting tx_max = 60
[  217.965557][ T5911] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  218.001296][ T5911] wwan wwan0: port wwan0mbim0 attached
[  218.085280][ T5911] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, d2:49:e5:71:32:81
[  218.144852][ T5964] usb 3-1: USB disconnect, device number 9
[  218.158375][ T5964] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  218.263036][ T5964] wwan wwan0: port wwan0mbim0 disconnected
[  218.285738][ T7395] netlink: 76 bytes leftover after parsing attributes in process `syz.1.375'.
[  218.886866][ T7407] ------------[ cut here ]------------
[  218.892767][ T7407] WARNING: CPU: 0 PID: 7407 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310
[  218.902597][ T7407] Modules linked in:
[  218.906651][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.3.378 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  218.916527][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.926630][ T7407] RIP: 0010:folio_memcg+0x1a8/0x310
[  218.932031][ T7407] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  218.952944][ T7407] RSP: 0018:ffffc900038ff250 EFLAGS: 00010283
[  218.959527][ T7407] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  218.967621][ T7407] RDX: ffffc9000c7eb000 RSI: 00000000000019fa RDI: 00000000000019fb
[  218.975687][ T7407] RBP: 0000000000000000 R08: ffffea0001f714c7 R09: 1ffffd40003ee298
[  218.983753][ T7407] R10: dffffc0000000000 R11: fffff940003ee299 R12: ffffea0001f714f0
[  218.991964][ T7407] R13: dffffc0000000000 R14: ffff8880321b5000 R15: 0000000000000002
[  219.000030][ T7407] FS:  00007ff6c72726c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
[  219.009035][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  219.017000][ T7407] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  219.023694][ T7407] CR2: 0000000000000000 CR3: 000000002445e000 CR4: 00000000003526f0
[  219.031751][ T7407] Call Trace:
[  219.035057][ T7407]  <TASK>
[  219.038045][ T7407]  workingset_activation+0x5f/0x4a0
[  219.043383][ T7407]  ? folio_mark_accessed+0x361/0x4a0
[  219.049686][ T7407]  folio_mark_accessed+0x3b5/0x4a0
[  219.054862][ T7407]  kvm_release_page_clean+0x9a/0xe0
[  219.060683][ T7407]  kvm_tdp_page_fault+0x2dd/0x370
[  219.065778][ T7407]  kvm_mmu_do_page_fault+0x2c5/0x640
[  219.071163][ T7407]  ? vmx_vcpu_run+0xd8b/0x25d0
[  219.075966][ T7407]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  219.081910][ T7407]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  219.087503][ T7407]  kvm_mmu_page_fault+0x22f/0xb70
[  219.092641][ T7407]  ? __pfx_handle_ept_violation+0x10/0x10
[  219.098440][ T7407]  vmx_handle_exit+0x1090/0x18a0
[  219.103430][ T7407]  ? vcpu_run+0x361c/0x6f70
[  219.108048][ T7407]  ? rcu_is_watching+0x15/0xb0
[  219.112855][ T7407]  vcpu_run+0x432e/0x6f70
[  219.117543][ T7407]  ? vcpu_run+0x361c/0x6f70
[  219.122359][ T7407]  ? __pfx_vcpu_run+0x10/0x10
[  219.127082][ T7407]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  219.132977][ T7407]  ? rcu_is_watching+0x15/0xb0
[  219.137779][ T7407]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  219.143427][ T7407]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  219.150177][ T7407]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  219.156893][ T7407]  ? rcu_is_watching+0x15/0xb0
[  219.158015][   T24] usb 3-1: Using ep0 maxpacket: 32
[  219.161830][ T7407]  ? look_up_lock_class+0x74/0x170
[  219.172182][ T7407]  ? register_lock_class+0x51/0x320
[  219.177438][ T7407]  ? __lock_acquire+0xab9/0xd20
[  219.182504][ T7407]  kvm_vcpu_ioctl+0x95c/0xe90
[  219.187248][ T7407]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  219.192726][ T7407]  ? __lock_acquire+0xab9/0xd20
[  219.193335][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.197633][ T7407]  ? __asan_memset+0x22/0x50
[  219.197668][ T7407]  ? smack_file_ioctl+0x302/0x340
[  219.197690][ T7407]  ? __pfx_smack_file_ioctl+0x10/0x10
[  219.197719][ T7407]  ? __fget_files+0x2a/0x420
[  219.228475][ T7407]  ? __fget_files+0x3a0/0x420
[  219.233193][ T7407]  ? __fget_files+0x2a/0x420
[  219.237894][ T7407]  ? bpf_lsm_file_ioctl+0x9/0x20
[  219.240794][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.242856][ T7407]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  219.259426][ T7407]  __se_sys_ioctl+0xfc/0x170
[  219.264159][ T7407]  do_syscall_64+0xfa/0x3b0
[  219.268736][ T7407]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.271612][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  219.273969][ T7407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.273997][ T7407]  ? clear_bhb_loop+0x60/0xb0
[  219.274021][ T7407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.291342][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.293895][ T7407] RIP: 0033:0x7ff6c638ebe9
[  219.293920][ T7407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.293937][ T7407] RSP: 002b:00007ff6c7272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  219.341182][ T7407] RAX: ffffffffffffffda RBX: 00007ff6c65b5fa0 RCX: 00007ff6c638ebe9
[  219.349217][ T7407] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d
[  219.358053][ T7407] RBP: 00007ff6c6411e19 R08: 0000000000000000 R09: 0000000000000000
[  219.363870][   T24] usb 3-1: config 0 descriptor??
[  219.366042][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.366063][ T7407] R13: 00007ff6c65b6038 R14: 00007ff6c65b5fa0 R15: 00007ffe2f09eef8
[  219.366097][ T7407]  </TASK>
[  219.390777][ T7407] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  219.398087][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.3.378 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  219.407901][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  219.417963][ T7407] Call Trace:
[  219.421255][ T7407]  <TASK>
[  219.424238][ T7407]  dump_stack_lvl+0x99/0x250
[  219.428861][ T7407]  ? __asan_memcpy+0x40/0x70
[  219.433474][ T7407]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.438763][ T7407]  ? __pfx__printk+0x10/0x10
[  219.443368][ T7407]  panic+0x2db/0x790
[  219.447282][ T7407]  ? __pfx_panic+0x10/0x10
[  219.451726][ T7407]  __warn+0x31b/0x4b0
[  219.455717][ T7407]  ? folio_memcg+0x1a8/0x310
[  219.460319][ T7407]  ? folio_memcg+0x1a8/0x310
[  219.464919][ T7407]  report_bug+0x2be/0x4f0
[  219.469263][ T7407]  ? folio_memcg+0x1a8/0x310
[  219.473861][ T7407]  ? folio_memcg+0x1a8/0x310
[  219.478543][ T7407]  ? folio_memcg+0x1aa/0x310
[  219.483142][ T7407]  handle_bug+0x84/0x160
[  219.487415][ T7407]  exc_invalid_op+0x1a/0x50
[  219.491947][ T7407]  asm_exc_invalid_op+0x1a/0x20
[  219.496876][ T7407] RIP: 0010:folio_memcg+0x1a8/0x310
[  219.502108][ T7407] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  219.521854][ T7407] RSP: 0018:ffffc900038ff250 EFLAGS: 00010283
[  219.527941][ T7407] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  219.535919][ T7407] RDX: ffffc9000c7eb000 RSI: 00000000000019fa RDI: 00000000000019fb
[  219.543910][ T7407] RBP: 0000000000000000 R08: ffffea0001f714c7 R09: 1ffffd40003ee298
[  219.551897][ T7407] R10: dffffc0000000000 R11: fffff940003ee299 R12: ffffea0001f714f0
[  219.559965][ T7407] R13: dffffc0000000000 R14: ffff8880321b5000 R15: 0000000000000002
[  219.568045][ T7407]  ? folio_memcg+0x1a7/0x310
[  219.572673][ T7407]  workingset_activation+0x5f/0x4a0
[  219.577886][ T7407]  ? folio_mark_accessed+0x361/0x4a0
[  219.583187][ T7407]  folio_mark_accessed+0x3b5/0x4a0
[  219.588331][ T7407]  kvm_release_page_clean+0x9a/0xe0
[  219.593550][ T7407]  kvm_tdp_page_fault+0x2dd/0x370
[  219.598591][ T7407]  kvm_mmu_do_page_fault+0x2c5/0x640
[  219.603891][ T7407]  ? vmx_vcpu_run+0xd8b/0x25d0
[  219.608661][ T7407]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  219.614486][ T7407]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  219.620046][ T7407]  kvm_mmu_page_fault+0x22f/0xb70
[  219.625084][ T7407]  ? __pfx_handle_ept_violation+0x10/0x10
[  219.630808][ T7407]  vmx_handle_exit+0x1090/0x18a0
[  219.635755][ T7407]  ? vcpu_run+0x361c/0x6f70
[  219.640264][ T7407]  ? rcu_is_watching+0x15/0xb0
[  219.645036][ T7407]  vcpu_run+0x432e/0x6f70
[  219.649389][ T7407]  ? vcpu_run+0x361c/0x6f70
[  219.653938][ T7407]  ? __pfx_vcpu_run+0x10/0x10
[  219.658626][ T7407]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  219.664361][ T7407]  ? rcu_is_watching+0x15/0xb0
[  219.669135][ T7407]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  219.674699][ T7407]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  219.680452][ T7407]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  219.686477][ T7407]  ? rcu_is_watching+0x15/0xb0
[  219.691262][ T7407]  ? look_up_lock_class+0x74/0x170
[  219.696475][ T7407]  ? register_lock_class+0x51/0x320
[  219.701919][ T7407]  ? __lock_acquire+0xab9/0xd20
[  219.706831][ T7407]  kvm_vcpu_ioctl+0x95c/0xe90
[  219.711540][ T7407]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  219.716749][ T7407]  ? __lock_acquire+0xab9/0xd20
[  219.721901][ T7407]  ? __asan_memset+0x22/0x50
[  219.726671][ T7407]  ? smack_file_ioctl+0x302/0x340
[  219.731734][ T7407]  ? __pfx_smack_file_ioctl+0x10/0x10
[  219.737150][ T7407]  ? __fget_files+0x2a/0x420
[  219.741936][ T7407]  ? __fget_files+0x3a0/0x420
[  219.746712][ T7407]  ? __fget_files+0x2a/0x420
[  219.751425][ T7407]  ? bpf_lsm_file_ioctl+0x9/0x20
[  219.756385][ T7407]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  219.761589][ T7407]  __se_sys_ioctl+0xfc/0x170
[  219.766278][ T7407]  do_syscall_64+0xfa/0x3b0
[  219.770838][ T7407]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.776042][ T7407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.782148][ T7407]  ? clear_bhb_loop+0x60/0xb0
[  219.786835][ T7407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.792762][ T7407] RIP: 0033:0x7ff6c638ebe9
[  219.797193][ T7407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.816815][ T7407] RSP: 002b:00007ff6c7272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  219.825265][ T7407] RAX: ffffffffffffffda RBX: 00007ff6c65b5fa0 RCX: 00007ff6c638ebe9
[  219.833389][ T7407] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d
[  219.841378][ T7407] RBP: 00007ff6c6411e19 R08: 0000000000000000 R09: 0000000000000000
[  219.849355][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.857367][ T7407] R13: 00007ff6c65b6038 R14: 00007ff6c65b5fa0 R15: 00007ffe2f09eef8
[  219.865467][ T7407]  </TASK>
[  219.868868][ T7407] Kernel Offset: disabled
[  219.873203][ T7407] Rebooting in 86400 seconds..