last executing test programs:

9m51.009974442s ago: executing program 32 (id=204):
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001})
epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000)

8m26.973921175s ago: executing program 33 (id=438):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x11)
read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/178, 0xb2)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)

7m55.609076657s ago: executing program 34 (id=507):
open$dir(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
creat(0x0, 0x50)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x2, 0x3d, 0x0, 0x0, @random="48164953c468"}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x80003, 0x0)
write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
dup2(r5, r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f0000000600), &(0x7f0000000600), 0x80, r7, 0x0, 0x7}, 0x38)

7m33.748105346s ago: executing program 35 (id=554):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000440)={0x4, {0x1}})
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

7m11.754322618s ago: executing program 36 (id=590):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r0)

6m50.347571869s ago: executing program 37 (id=639):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000001480))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1)
kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000, 0x1000000}], 0x160000)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='erspan0\x00')
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0x2)

6m44.36260348s ago: executing program 6 (id=684):
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00')
ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000180)={'\x00', 0x400, 0x1, 0xfff, 0x8000, 0x7, r0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)

6m43.458004038s ago: executing program 6 (id=686):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x8000, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r5 = socket(0x10, 0x2, 0x0)
fdatasync(0xffffffffffffffff)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

6m42.535116428s ago: executing program 6 (id=687):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000001480))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='erspan0\x00')
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

6m41.001252909s ago: executing program 6 (id=692):
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300050000000000000000000700d1d1", @ANYRES32, @ANYBLOB="00000000000000001c001a8018000580140007800800010000000000080002"], 0x3c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x30, 0x2b, 0x0, @private1, @local, {[@hopopts={0x87}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet_sctp(0x2, 0x1, 0x84)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x1000007f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8c}, 0x20)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m40.598546342s ago: executing program 6 (id=693):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

6m39.971555285s ago: executing program 6 (id=695):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x8c6, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x2b1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"})
r7 = dup(r6)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xff)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_skbmod={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x4, @random}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xf7, 0x73, 0x20000000, 0x1, 0x7}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000)
r9 = dup2(r8, r8)
readv(r9, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1)

6m37.751350001s ago: executing program 5 (id=703):
openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140640101000c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010000000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0006f8000000000014"], 0x48}, 0x1, 0x2}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0xfffffffd, 0x34324152, 0x0, 0x4, [{}, {0x10}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x800000}], 0x0, 0xff, 0x0, 0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8006)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
eventfd(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xb, 0x1, 0x200, &(0x7f0000000cc0)="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"})

6m36.66111434s ago: executing program 5 (id=707):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f00000002c0)=0x10)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x7d, &(0x7f00000001c0)="020000000980ffff", 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000400)={0xfffffff2, 0x4, 0x831, 0x2, 0x2, 0x2})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)

6m35.76574823s ago: executing program 5 (id=710):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666e920db", 0x0, 0xfffffff6, 0x39, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf250800200004000180"], 0x18}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r5, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x80)

6m35.281102742s ago: executing program 5 (id=711):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000440)={0x4, {0x1}})
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

6m24.82240589s ago: executing program 38 (id=695):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x8c6, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x2b1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"})
r7 = dup(r6)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xff)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_skbmod={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x4, @random}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xf7, 0x73, 0x20000000, 0x1, 0x7}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000)
r9 = dup2(r8, r8)
readv(r9, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1)

6m24.33695438s ago: executing program 5 (id=714):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

6m23.541140286s ago: executing program 5 (id=717):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x11)
read$char_usb(r3, &(0x7f0000000100)=""/178, 0xb2)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)

6m17.854738855s ago: executing program 7 (id=727):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000001480))
kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000, 0x1000000}], 0x160000)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='erspan0\x00')
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

6m17.070924366s ago: executing program 7 (id=729):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x11)
read$char_usb(r3, &(0x7f0000000100)=""/178, 0xb2)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)

6m8.531513671s ago: executing program 7 (id=737):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000001480))
kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000, 0x1000000}], 0x160000)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='erspan0\x00')
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

6m8.507934682s ago: executing program 39 (id=717):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x11)
read$char_usb(r3, &(0x7f0000000100)=""/178, 0xb2)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)

6m8.507879894s ago: executing program 7 (id=741):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
io_setup(0xb2, 0x0)
ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getrlimit(0xf, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

6m5.792895022s ago: executing program 7 (id=748):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000440)={0x4, {0x1}})
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

6m4.036373076s ago: executing program 7 (id=750):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1)
kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000, 0x1000000}], 0x160000)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='erspan0\x00')
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

5m48.787710524s ago: executing program 40 (id=750):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1)
kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000, 0x1000000}], 0x160000)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='erspan0\x00')
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2m45.329120103s ago: executing program 9 (id=1200):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
kexec_load(0x0, 0x0, 0x0, 0x2a0001)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x9c3c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x5)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000003bc0)="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", 0x410)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mlock(&(0x7f0000002000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020)

2m43.135207426s ago: executing program 9 (id=1211):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x7}}}}}}}, 0x0)
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000000080)=""/79, 0x4f, 0x7f)

2m42.158185161s ago: executing program 9 (id=1208):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
kcmp(r1, r1, 0x2, 0xffffffffffffffff, r0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
timer_create(0x3, &(0x7f0000000300)={0x0, 0x1a, 0x4}, &(0x7f0000000380))
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000004c0)={0x0, @l2tp={0x2, 0x0, @local}, @l2tp={0x2, 0x0, @dev}, @can, 0x47})

2m41.187717209s ago: executing program 9 (id=1212):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x11)
read$char_usb(r4, &(0x7f0000000100)=""/178, 0xb2)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)

2m38.649125842s ago: executing program 9 (id=1219):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000440)={0x4, {0x1}})
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

2m37.244516633s ago: executing program 9 (id=1223):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)

2m26.067893356s ago: executing program 0 (id=1250):
socket(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, &(0x7f0000000200))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000200)='./bus\x00', 0x6000000b)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2m22.054425574s ago: executing program 41 (id=1223):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)

2m22.052461117s ago: executing program 0 (id=1259):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x7, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
io_setup(0x6, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(r4, &(0x7f0000001b80)=""/4084, 0xff4, 0x0)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)=r2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
rt_sigpending(0x0, 0x1000000)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000240)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0], [], [0x0, 0x3f], [0x0, 0x0, 0x5]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r10})
close_range(r3, 0xffffffffffffffff, 0x0)

2m20.688321735s ago: executing program 0 (id=1262):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2df0, 0x9b50, 0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x1, 0x84)
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
bind$inet6(r2, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d3, &(0x7f0000000100))
sched_setaffinity(0x0, 0x8, &(0x7f0000000080))
syz_emit_ethernet(0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb00048042dfcca37b2a7a4d1d5307008f78b7fb2fc8fd2088b711cef34097b36e4e39cdf135456913f1d99eb377aee5e465fa7eb28f198748cdfef72736289d7983263c8cb044ba760c0a2bf243fca3e8b387ee55abc136b89bc103c22733e47b56c3ee3b520e8a18388526a3aedb4d5009fe2b28b721691b94e05550414a1293d316f21d52089b43ece92dcffd9d48592bcd20"], 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
sendto$inet6(r2, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @mcast2}, 0x1c)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f00000190c0)='f2fs\x00', 0x0, 0x0)

2m19.739285464s ago: executing program 0 (id=1266):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x4)
getrlimit(0x7, &(0x7f0000000380))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2044085}, 0x4004010)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket(0x2, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0)

2m18.7222911s ago: executing program 0 (id=1256):
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000440)={0x4, {0x1}})
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

2m16.068879979s ago: executing program 0 (id=1277):
r0 = socket(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
keyctl$join(0x1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)

2m1.025384752s ago: executing program 42 (id=1277):
r0 = socket(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
keyctl$join(0x1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)

1m48.175311557s ago: executing program 4 (id=1363):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f00003e8000/0x1000)=nil, 0x4000)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r5, &(0x7f00000000c0), 0x12)

1m47.118719631s ago: executing program 4 (id=1365):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0xc0d, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0)
chdir(0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

1m46.142568812s ago: executing program 4 (id=1367):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
shutdown(r5, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r6, 0x5)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)

1m45.358677725s ago: executing program 4 (id=1381):
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
iopl(0x3)
r1 = socket(0x840000000002, 0x3, 0x100)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x8000000, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28)
setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire], 0x0, 0x0, 0x0})
iopl(0x5)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)

1m42.595004229s ago: executing program 4 (id=1384):
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

1m41.928660281s ago: executing program 4 (id=1386):
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB="6cff7f000000000000d9d7b3ffc6fd6a88ea07730b41758de6fa73a26c932a33014ec236243bb86fc347cb6be604792621ed0732c9c474bd5e21054cc4ada1c9f3ec294ac8553f508515cadb9f146efe692216677df2780c52852045a6477108123745d69de44f2793fca328ff4936217beb78e257fcdfd917467fbfc8ed5a2b469dab5700000000000000daf611792e3ea501d6637da50d4cff7e9dc5aefb6b150241be8b080c145ec5637cef67bb3a890a9d"], 0x3c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1m26.499481267s ago: executing program 43 (id=1386):
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB="6cff7f000000000000d9d7b3ffc6fd6a88ea07730b41758de6fa73a26c932a33014ec236243bb86fc347cb6be604792621ed0732c9c474bd5e21054cc4ada1c9f3ec294ac8553f508515cadb9f146efe692216677df2780c52852045a6477108123745d69de44f2793fca328ff4936217beb78e257fcdfd917467fbfc8ed5a2b469dab5700000000000000daf611792e3ea501d6637da50d4cff7e9dc5aefb6b150241be8b080c145ec5637cef67bb3a890a9d"], 0x3c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

12.462832971s ago: executing program 3 (id=1583):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
r3 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r3, &(0x7f0000000300)='reno\x00', 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r5, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r3, &(0x7f0000000480)='westwood\x00', 0x9)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="eabb8ec635ba57f4"])
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x80000001, 0x2, 0x2, 0x100, r1, 0x3, '\x00', r2, r1, 0x0, 0x5, 0x5, 0x2, @void, @value, @void, @value}, 0x50)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)
pipe2$watch_queue(&(0x7f0000002240), 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x2, 0xffffff43, 0x54, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7, 0x1, 0x5755}})
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
syslog(0x3, &(0x7f0000000380)=""/231, 0xe7)

11.627650799s ago: executing program 3 (id=1585):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}})
r9 = mq_open(&(0x7f0000000a00)='trans=fd,', 0x40, 0x0, 0x0)
syncfs(r9)
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r10 = socket$kcm(0x2, 0x5, 0x84)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1}, 0x0)
recvmsg$kcm(r10, 0x0, 0x40000002)
sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000400)="745a3b87dc1cc2588a388f2791a0e371cf1c1225f85d2f048a87ceaef76f89d3cda12462117d722d3ac0d90a4fedc2d3d62fdd7defcac1d36d565183df7bca968485e96e44ca6744a397e22a61b45f693cee10a132b5c29346bb94460db26a4c1354076c2ed0e1a6387a3a72673e3c3785da101b80737786382dac047e308fdb171ffd0ea5a2ba69fb1945579b0981b7edcdec233d820f885a68d278f1a755d7bfc5616e081fdc0ebac67145ecbb6f4a2d810be50699576f1730ac3bfe7ab1cda85d46ae0fb3e61c82c154ad2c453389564cbe91e72ed72d1892f9348b80587e1932585413034f4c038c0f2090", 0xed}], 0x1, &(0x7f00000006c0)=[@ip_retopts={{0x78, 0x0, 0x7, {[@noop, @generic={0x88, 0x9, "58ea5a0753e2a0"}, @noop, @generic={0x83, 0x2}, @lsrr={0x83, 0x13, 0xb4, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x18, 0xd8, 0x0, 0x0, [0x2, 0xa, 0x500000, 0x7, 0x9]}, @ssrr={0x89, 0xf, 0xa4, [@multicast1, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0x73, [@rand_addr, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x6, 0x0, 0x9, [0x2, 0x1, 0x129, 0x9, 0x8]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x25, 0x3, [{0x7, 0x2}, {0x2, 0xd, "1cc7585c687bf47ecff633"}, {0x7, 0x6, 'x\f\v\''}, {0x2, 0x8, "58efc2eeb678"}, {0x5, 0x2}]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x10, "032c508f4c91f087c10620eb24bc"}, {0x0, 0xe, "09f0ed505a1b04eced4dfd10"}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x42820000}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xdef}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x8}, {@empty, 0x9}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0x1, [{0x0, 0x7, "2f04ba04fc"}, {0x7, 0x11, "e89f6444dc16c06f51e2f154bd05b6"}, {0x7, 0xc, "9223602a31b800cbd391"}, {0x7, 0x2}, {0x0, 0xa, "6665f361c93d2c4f"}, {0x1, 0x5, "cdf2bd"}, {0x6, 0xd, "d27c6d4815e9537e2a553e"}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4e}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x9, 0x0, 0x0, [0x5, 0x763, 0x9]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x1c, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6f}, {@remote, 0x1a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1}, {@loopback, 0x1}, {@empty, 0x3ff}]}, @timestamp={0x44, 0x24, 0x52, 0x0, 0x4, [0x9, 0x8a0, 0x0, 0x9, 0x4, 0xfffffff9, 0x392f, 0x7bd]}, @rr={0x7, 0x3, 0x41}, @rr={0x7, 0x17, 0x8f, [@remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x75, [@dev={0xac, 0x14, 0x14, 0x17}, @remote, @private=0xa010100, @local, @remote, @remote]}, @noop, @rr={0x7, 0x7, 0x93, [@dev={0xac, 0x14, 0x14, 0xc}]}, @cipso={0x86, 0x3c, 0x2, [{0x7, 0x5, "7fac34"}, {0x7, 0xb, "d0240c976044183666"}, {0x1, 0x10, "acaf76b3f358bf1cbdc191d64cc6"}, {0x5, 0x5, 'A7c'}, {0x2, 0x11, "08ef7db37169f3db1cd4cd8d29ef2d"}]}]}}}], 0x27c}, 0x20040000)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

11.221845887s ago: executing program 3 (id=1587):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0))
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0))
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0xfffffffd)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1})

11.053464368s ago: executing program 3 (id=1589):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket(0xa, 0x3, 0x87)
sendmmsg$unix(r0, 0x0, 0x0, 0x814)

11.053356008s ago: executing program 3 (id=1590):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000440)={0x4, {0x1}})
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

9.867725629s ago: executing program 3 (id=1594):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x7}}}}}}}, 0x0)
r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000000080)=""/79, 0x4f, 0x7f)

6.420769578s ago: executing program 2 (id=1603):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x11)
read$char_usb(r4, &(0x7f0000000100)=""/178, 0xb2)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)

6.336760138s ago: executing program 1 (id=1605):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, 0x0})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x800, 0x34324152, 0x2, 0xb, [{}, {}, {0xfffffffd}, {0xfffffffd}, {}, {0x0, 0x1000000}]}})
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
recvmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x1}], 0x1, 0x2020, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB='2\x00\x00\x00\x00x\x00'], 0x10)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0)

5.754315713s ago: executing program 8 (id=1607):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x7, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000140)={0x2})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
close_range(r9, 0xffffffffffffffff, 0x0)

5.671724575s ago: executing program 1 (id=1608):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0)
ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "1ec4618f6538ecc26693065a2dcc26d92bb4f1030cd2c1011cdbf894a0839dc2"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = socket$alg(0x26, 0x5, 0x0)
shutdown(0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa}}, 0xffff}, 0x90)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00210f00000000fc1c0000000000000300"], 0x1c}}, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = dup(0xffffffffffffffff)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0)

3.837416699s ago: executing program 1 (id=1609):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x11)
read$char_usb(r4, &(0x7f0000000100)=""/178, 0xb2)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)

3.77779241s ago: executing program 8 (id=1610):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket(0xa, 0x3, 0x87)
sendmmsg$unix(r0, &(0x7f0000004380), 0x0, 0x814)

3.777455803s ago: executing program 8 (id=1611):
write$bt_hci(0xffffffffffffffff, 0x0, 0x8)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0))
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0))
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0xfffffffd)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)

3.647498164s ago: executing program 2 (id=1612):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
kexec_load(0x0, 0x0, 0x0, 0x2a0001)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x9c3c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x5)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r4, &(0x7f0000003bc0)="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", 0x410)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mlock(&(0x7f0000002000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020)

3.298287928s ago: executing program 2 (id=1613):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8)
fcntl$dupfd(r0, 0x0, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
cachestat(r2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x121b01)
socket(0x10, 0x3, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000040)={0x1})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat2(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x80, 0x154, 0x4}, 0x18)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x5c, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{@in=@rand_addr=0x64010101, 0x3}, @in=@local}, [@replay_esn_val={0x1c}]}, 0x5c}}, 0x4008004)
r8 = syz_pidfd_open(0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0xb, &(0x7f00000010c0)=ANY=[], 0x0)

3.298130463s ago: executing program 8 (id=1614):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(0x0, 0x2, 0x40000)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000440)={0x4, {0x1}})
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

1.982179721s ago: executing program 2 (id=1615):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x2, 0x0, 0x0, 0x7ff, 0x1951, 0x51d5, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x404, 0x1006, 0x8, 0xfffa, 0x0, 0x1, 0x7, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x40, 0xfd7d, 0x80, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x0, 0x1, 0x9, 0x6, 0x7, 0x10, 0x0, 0x2, 0x5], 0x80000000}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000007, 0x2172, r0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
userfaultfd(0x80001)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
syz_emit_ethernet(0x3a, 0x0, 0x0)

1.237567792s ago: executing program 1 (id=1616):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
kexec_load(0x0, 0x0, 0x0, 0x2a0001)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x9c3c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x5)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r4, &(0x7f0000003bc0)="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", 0x410)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mlock(&(0x7f0000002000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020)

961.703207ms ago: executing program 2 (id=1617):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000040))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018130000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0xc0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x5}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x1}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x6}, @TCA_FLOWER_KEY_MPLS_OPTS={0x28, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xffff9}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xc0}}, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

912.231603ms ago: executing program 8 (id=1618):
r0 = io_uring_setup(0x30d5, &(0x7f00000001c0))
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = epoll_create1(0x80000)
epoll_wait(r1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x4, 0x306, 0x0, r3}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0})
io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, <r10=>0x0})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={<r11=>0x0}, &(0x7f0000000400)=0xc)
kcmp(r10, r11, 0x6, r0, r9)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0xdac)
close_range(r0, 0xffffffffffffffff, 0x0)

911.62005ms ago: executing program 1 (id=1619):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)

204.302088ms ago: executing program 1 (id=1620):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x11)
read$char_usb(r4, &(0x7f0000000100)=""/178, 0xb2)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)

76.632618ms ago: executing program 2 (id=1621):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffcc1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
cachestat(r1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r5, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
r6 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x20, 0x961c0)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0xb0601)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

0s ago: executing program 8 (id=1622):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x7}}}}}}}, 0x0)
r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000000080)=""/79, 0x4f, 0x7f)

kernel console output (not intermixed with test programs):

160][ T9453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.890242][ T9453] usb 6-1: config 0 descriptor??
[  523.894511][ T9453] ldusb 6-1:0.0: Interrupt in endpoint not found
[  523.896719][ T9453] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  524.020962][ T5999] usb 14-1: new high-speed USB device number 26 using dummy_hcd
[  524.170863][ T5999] usb 14-1: Using ep0 maxpacket: 8
[  524.174554][ T5999] usb 14-1: config 0 has no interfaces?
[  524.178156][ T5999] usb 14-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  524.180866][ T5999] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.183471][ T5999] usb 14-1: Product: syz
[  524.184914][ T5999] usb 14-1: Manufacturer: syz
[  524.186364][ T5999] usb 14-1: SerialNumber: syz
[  524.188925][ T5999] usb 14-1: config 0 descriptor??
[  524.358259][   T30] usb 6-1: USB disconnect, device number 18
[  524.403226][ T5999] usb 14-1: USB disconnect, device number 26
[  524.520965][ T5951] Bluetooth: hci1: command 0x040f tx timeout
[  525.059361][   T30] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  525.248184][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  525.269453][   T30] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  525.300816][   T30] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  525.306625][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.312581][   T30] usb 5-1: config 0 descriptor??
[  525.318115][   T30] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  525.521141][ T9453] usb 5-1: USB disconnect, device number 39
[  525.787924][T13319] syz.1.1145: attempt to access beyond end of device
[  525.787924][T13319] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0
[  525.793375][T13319] syz.1.1145: attempt to access beyond end of device
[  525.793375][T13319] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0
[  525.973663][ T9453] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  526.160834][ T9453] usb 5-1: Using ep0 maxpacket: 32
[  526.163659][ T9453] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.166567][ T9453] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  526.170246][ T9453] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  526.176430][ T9453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.183323][ T9453] usb 5-1: config 0 descriptor??
[  526.187185][ T9453] ldusb 5-1:0.0: Interrupt in endpoint not found
[  526.189408][ T9453] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  526.198454][T13327] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  526.201177][T13327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  526.204567][T13327] vhci_hcd vhci_hcd.0: Device attached
[  526.511055][    T8] vhci_hcd: vhci_device speed not set
[  526.571222][    T8] usb 55-1: new full-speed USB device number 2 using vhci_hcd
[  526.682017][  T834] usb 5-1: USB disconnect, device number 40
[  526.899254][T13339] syzkaller0: entered promiscuous mode
[  526.901605][T13339] syzkaller0: entered allmulticast mode
[  526.983120][T13341] overlayfs: missing 'lowerdir'
[  527.288208][T13333] vhci_hcd: connection reset by peer
[  527.295762][ T1142] vhci_hcd: stop threads
[  527.297525][ T1142] vhci_hcd: release socket
[  527.298951][ T1142] vhci_hcd: disconnect device
[  529.271012][  T144] usb 14-1: new high-speed USB device number 27 using dummy_hcd
[  529.420885][  T144] usb 14-1: Using ep0 maxpacket: 8
[  529.425928][  T144] usb 14-1: config 0 has no interfaces?
[  529.431105][  T144] usb 14-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  529.434268][  T144] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.436656][  T144] usb 14-1: Product: syz
[  529.437889][  T144] usb 14-1: Manufacturer: syz
[  529.439444][  T144] usb 14-1: SerialNumber: syz
[  529.447908][  T144] usb 14-1: config 0 descriptor??
[  529.695461][ T5999] usb 14-1: USB disconnect, device number 27
[  530.741596][T13392] syz.0.1160: attempt to access beyond end of device
[  530.741596][T13392] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0
[  530.745302][T13392] syz.0.1160: attempt to access beyond end of device
[  530.745302][T13392] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0
[  530.840808][ T5951] Bluetooth: hci3: command tx timeout
[  530.963802][T13399] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  530.968478][T13399] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  532.126717][    T8] vhci_hcd: vhci_device speed not set
[  533.276754][T13432] netlink: 'syz.3.1172': attribute type 4 has an invalid length.
[  534.792513][T13457] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1176'.
[  535.110896][   T30] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  535.250860][   T30] usb 6-1: device descriptor read/64, error -71
[  535.490879][   T30] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  535.678194][   T30] usb 6-1: device descriptor read/64, error -71
[  535.723250][T13473] input: syz0 as /devices/virtual/input/input12
[  535.732759][   T39] kauditd_printk_skb: 36 callbacks suppressed
[  535.732774][   T39] audit: type=1326 audit(1736569305.570:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  535.755790][   T39] audit: type=1326 audit(1736569305.570:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  535.770833][   T39] audit: type=1326 audit(1736569305.580:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  535.780143][   T39] audit: type=1326 audit(1736569305.580:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  535.796369][   T39] audit: type=1326 audit(1736569305.580:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  535.806542][   T39] audit: type=1326 audit(1736569305.580:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  535.811473][   T30] usb usb6-port1: attempt power cycle
[  535.812915][   T39] audit: type=1326 audit(1736569305.580:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  535.820445][   T39] audit: type=1326 audit(1736569305.580:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  535.826520][   T39] audit: type=1326 audit(1736569305.580:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  535.832625][   T39] audit: type=1326 audit(1736569305.580:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[  536.200882][   T30] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  536.231716][   T30] usb 6-1: device descriptor read/8, error -71
[  536.480893][   T30] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  536.501407][   T30] usb 6-1: device descriptor read/8, error -71
[  536.621390][   T30] usb usb6-port1: unable to enumerate USB device
[  536.889069][T13487] syz.9.1185: attempt to access beyond end of device
[  536.889069][T13487] nbd9: rw=0, sector=1, nr_sectors = 1 limit=0
[  536.893167][T13487] qnx4: unable to read the superblock
[  538.500996][T13518] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode
[  538.503925][T13512] block nbd9: NBD_DISCONNECT
[  538.503936][T13518] macvtap1: entered promiscuous mode
[  538.506257][T13512] block nbd9: Disconnected due to user request.
[  538.510173][T13512] block nbd9: shutting down sockets
[  538.511410][T13518] macvtap1: entered allmulticast mode
[  538.513305][T13518] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode
[  538.521492][T13518] mac80211_hwsim hwsim26 wlan0: left allmulticast mode
[  538.530971][T13518] mac80211_hwsim hwsim26 wlan0: left promiscuous mode
[  539.564437][T13536] netlink: 'syz.3.1195': attribute type 33 has an invalid length.
[  539.567617][T13536] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1195'.
[  539.870921][ T5980] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  540.042717][ T5980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  540.046826][ T5980] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  540.050538][ T5980] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  540.054353][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.060214][ T5980] usb 6-1: config 0 descriptor??
[  540.267417][ T5980] usb 6-1: USB disconnect, device number 23
[  540.711023][ T5980] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  540.860868][ T5980] usb 6-1: Using ep0 maxpacket: 32
[  540.864454][ T5980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  540.868345][ T5980] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  540.871601][ T5980] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  540.874237][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.877833][ T5980] usb 6-1: config 0 descriptor??
[  541.397651][ T5999] usb 6-1: USB disconnect, device number 24
[  542.100993][   T30] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  542.257759][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  542.270321][   T30] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  542.273457][   T30] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  542.300718][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.306570][   T30] usb 5-1: config 0 descriptor??
[  542.514814][  T144] usb 5-1: USB disconnect, device number 41
[  542.970978][ T5999] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  543.120973][ T5999] usb 5-1: Using ep0 maxpacket: 32
[  543.123835][ T5999] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  543.127618][ T5999] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  543.130675][ T5999] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  543.133516][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.137079][ T5999] usb 5-1: config 0 descriptor??
[  543.637132][ T5999] usb 5-1: USB disconnect, device number 42
[  544.184093][T13571] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  544.186012][T13571] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  544.188224][T13571] vhci_hcd vhci_hcd.0: Device attached
[  544.610800][   T30] vhci_hcd: vhci_device speed not set
[  544.680864][   T30] usb 37-1: new full-speed USB device number 8 using vhci_hcd
[  545.106218][T13589] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1207'.
[  545.492810][T13576] vhci_hcd: connection reset by peer
[  545.495158][   T98] vhci_hcd: stop threads
[  545.501765][   T98] vhci_hcd: release socket
[  545.503264][   T98] vhci_hcd: disconnect device
[  546.350926][    T8] usb 14-1: new high-speed USB device number 28 using dummy_hcd
[  546.506039][    T8] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.509386][    T8] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  546.512269][    T8] usb 14-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  546.516103][    T8] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.523262][    T8] usb 14-1: config 0 descriptor??
[  546.732461][ T6028] usb 14-1: USB disconnect, device number 28
[  546.845351][T13625] syzkaller0: entered promiscuous mode
[  546.846984][T13625] syzkaller0: entered allmulticast mode
[  547.251162][ T6028] usb 14-1: new high-speed USB device number 29 using dummy_hcd
[  547.420832][ T6028] usb 14-1: Using ep0 maxpacket: 32
[  547.423831][ T6028] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  547.426772][ T6028] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  547.429531][ T6028] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  547.440817][ T6028] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.447982][ T6028] usb 14-1: config 0 descriptor??
[  548.048403][ T6028] usb 14-1: USB disconnect, device number 29
[  548.957450][T13627] syz.3.1216: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  548.962872][T13627] CPU: 2 UID: 0 PID: 13627 Comm: syz.3.1216 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  548.965953][T13627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  548.969010][T13627] Call Trace:
[  548.969979][T13627]  <TASK>
[  548.970847][T13627]  dump_stack_lvl+0x16c/0x1f0
[  548.972220][T13627]  warn_alloc+0x24d/0x3a0
[  548.973506][T13627]  ? __pfx_warn_alloc+0x10/0x10
[  548.974922][T13627]  ? __get_vm_area_node+0x1b0/0x2f0
[  548.976467][T13627]  ? __get_vm_area_node+0x1dc/0x2f0
[  548.978010][T13627]  __vmalloc_node_range_noprof+0x1105/0x1530
[  548.979731][T13627]  ? trace_lock_acquire+0x14e/0x1f0
[  548.981206][T13627]  ? xp_create_and_assign_umem+0x1be/0xe20
[  548.982865][T13627]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  548.984896][T13627]  ? rcu_is_watching+0x12/0xc0
[  548.986632][T13627]  ? trace_kmalloc+0x2d/0xd0
[  548.987973][T13627]  ? __kmalloc_node_noprof.cold+0x5a/0x5f
[  548.989622][T13627]  ? xp_create_and_assign_umem+0x1be/0xe20
[  548.991329][T13627]  __kvmalloc_node_noprof+0x14f/0x1a0
[  548.992881][T13627]  ? xp_create_and_assign_umem+0x1be/0xe20
[  548.994607][T13627]  xp_create_and_assign_umem+0x1be/0xe20
[  548.996211][T13627]  ? lock_acquire+0x2f/0xb0
[  548.997520][T13627]  ? dev_get_by_index+0x37/0x380
[  548.998955][T13627]  xsk_bind+0x45a/0x11e0
[  549.000200][T13627]  ? __pfx_aa_sk_perm+0x10/0x10
[  549.001613][T13627]  ? __pfx_xsk_bind+0x10/0x10
[  549.003000][T13627]  __sys_bind+0x213/0x260
[  549.004291][T13627]  ? __pfx___sys_bind+0x10/0x10
[  549.005704][T13627]  ? rcu_is_watching+0x12/0xc0
[  549.007094][T13627]  __ia32_sys_bind+0x71/0xb0
[  549.008457][T13627]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  549.010368][T13627]  __do_fast_syscall_32+0x73/0x120
[  549.011844][T13627]  do_fast_syscall_32+0x32/0x80
[  549.013281][T13627]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  549.015150][T13627] RIP: 0023:0xf7fe7579
[  549.016331][T13627] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  549.021810][T13627] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000169
[  549.024308][T13627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100
[  549.026812][T13627] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  549.029114][T13627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  549.031386][T13627] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  549.033650][T13627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  549.035984][T13627]  </TASK>
[  549.038616][T13627] Mem-Info:
[  549.039729][T13627] active_anon:11733 inactive_anon:393 isolated_anon:0
[  549.039729][T13627]  active_file:17163 inactive_file:25251 isolated_file:0
[  549.039729][T13627]  unevictable:1766 dirty:321 writeback:0
[  549.039729][T13627]  slab_reclaimable:7501 slab_unreclaimable:63240
[  549.039729][T13627]  mapped:28029 shmem:5378 pagetables:1156
[  549.039729][T13627]  sec_pagetables:317 bounce:0
[  549.039729][T13627]  kernel_misc_reclaimable:0
[  549.039729][T13627]  free:22668 free_pcp:7743 free_cma:0
[  549.052854][T13627] Node 0 active_anon:5332kB inactive_anon:1572kB active_file:8508kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5168kB dirty:12kB writeback:0kB shmem:6680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9764kB pagetables:1024kB sec_pagetables:1156kB all_unreclaimable? yes
[  549.061956][T13627] Node 1 active_anon:41600kB inactive_anon:0kB active_file:60144kB inactive_file:101004kB unevictable:3528kB isolated(anon):0kB isolated(file):0kB mapped:106948kB dirty:1272kB writeback:0kB shmem:14832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4436kB pagetables:3600kB sec_pagetables:112kB all_unreclaimable? no
[  549.071453][T13627] Node 0 DMA free:2888kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:424kB inactive_anon:120kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:684kB local_pcp:100kB free_cma:0kB
[  549.079382][T13627] lowmem_reserve[]: 0 273 0 0 0
[  549.080933][T13627] Node 0 DMA32 free:17548kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:4908kB inactive_anon:1452kB active_file:8488kB inactive_file:0kB unevictable:3536kB writepending:12kB present:1032196kB managed:306300kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:0kB free_cma:0kB
[  549.090603][T13627] lowmem_reserve[]: 0 0 0 0 0
[  549.092262][T13627] Node 1 DMA32 free:70300kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:41600kB inactive_anon:0kB active_file:60144kB inactive_file:101004kB unevictable:3528kB writepending:1272kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:30108kB local_pcp:8500kB free_cma:0kB
[  549.100906][T13627] lowmem_reserve[]: 0 0 0 0 0
[  549.102310][T13627] Node 0 DMA: 29*4kB (UM) 35*8kB (UM) 36*16kB (UM) 48*32kB (UM) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2892kB
[  549.106686][T13627] Node 0 DMA32: 220*4kB (UMEH) 245*8kB (UMEH) 58*16kB (UMEH) 97*32kB (UMEH) 27*64kB (UME) 22*128kB (UME) 8*256kB (UME) 4*512kB (UME) 0*1024kB 1*2048kB (M) 0*4096kB = 17560kB
[  549.111750][T13627] Node 1 DMA32: 182*4kB (UM) 40*8kB (UME) 290*16kB (UME) 221*32kB (UME) 101*64kB (UME) 29*128kB (UME) 30*256kB (UME) 8*512kB (ME) 11*1024kB (ME) 7*2048kB (UME) 3*4096kB (M) = 72600kB
[  549.116878][T13627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  549.119568][T13627] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  549.122304][T13627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  549.125139][T13627] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  549.127839][T13627] 46417 total pagecache pages
[  549.129263][T13627] 0 pages in swap cache
[  549.130499][T13627] Free swap  = 124112kB
[  549.131917][T13627] Total swap = 124996kB
[  549.133154][T13627] 524155 pages RAM
[  549.134253][T13627] 0 pages HighMem/MovableOnly
[  549.136023][T13627] 206677 pages reserved
[  549.137217][T13627] 0 pages cma reserved
[  549.930878][   T30] vhci_hcd: vhci_device speed not set
[  550.064019][T13660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  550.066554][T13660] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  550.076115][T13660] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  551.370376][T13674] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  551.373026][T13674] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  551.377344][T13674] vhci_hcd vhci_hcd.0: Device attached
[  551.591194][  T144] vhci_hcd: vhci_device speed not set
[  551.660871][  T144] usb 39-1: new full-speed USB device number 6 using vhci_hcd
[  551.828253][T13679] siw: device registration error -23
[  551.830900][ T6031] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[  552.012138][ T6031] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.015184][ T6031] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  552.018808][ T6031] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  552.021574][ T6031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.025420][ T6031] usb 8-1: config 0 descriptor??
[  552.028343][ T6031] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  552.231217][ T6031] usb 8-1: USB disconnect, device number 53
[  552.522312][T13675] vhci_hcd: connection reset by peer
[  552.524037][   T12] vhci_hcd: stop threads
[  552.525283][   T12] vhci_hcd: release socket
[  552.526649][   T12] vhci_hcd: disconnect device
[  552.672511][ T6031] usb 8-1: new high-speed USB device number 54 using dummy_hcd
[  552.821299][ T6031] usb 8-1: Using ep0 maxpacket: 32
[  552.824080][ T6031] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.827156][ T6031] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  552.844044][ T6031] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  552.846692][ T6031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.857003][ T6031] usb 8-1: config 0 descriptor??
[  552.861466][ T6031] ldusb 8-1:0.0: Interrupt in endpoint not found
[  552.863788][ T6031] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  553.340105][ T9453] usb 8-1: USB disconnect, device number 54
[  553.950492][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'.
[  554.532605][T13715] syz.1.1236: attempt to access beyond end of device
[  554.532605][T13715] nbd1: rw=0, sector=8, nr_sectors = 8 limit=0
[  554.536335][T13715] qnx4: unable to read the superblock
[  555.452225][T13726] siw: device registration error -23
[  556.731004][ T6031] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  556.750877][  T144] vhci_hcd: vhci_device speed not set
[  556.870886][ T6031] usb 5-1: device descriptor read/64, error -71
[  557.110852][ T6031] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  557.250877][ T6031] usb 5-1: device descriptor read/64, error -71
[  557.382471][ T6031] usb usb5-port1: attempt power cycle
[  557.896607][ T6031] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  557.911266][ T6031] usb 5-1: device descriptor read/8, error -71
[  558.170926][  T834] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[  558.173714][ T6031] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  558.191280][ T6031] usb 5-1: device descriptor read/8, error -71
[  558.301002][ T6031] usb usb5-port1: unable to enumerate USB device
[  558.343018][  T834] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.346279][  T834] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  558.350019][  T834] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  558.352782][  T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.355903][  T834] usb 8-1: config 0 descriptor??
[  558.359609][  T834] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  558.561284][  T144] usb 8-1: USB disconnect, device number 55
[  558.640911][  T834] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  558.771293][  T834] usb 6-1: device descriptor read/64, error -71
[  559.000891][ T9351] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[  559.010844][  T834] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  559.150919][ T9351] usb 8-1: Using ep0 maxpacket: 32
[  559.154241][ T9351] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.157831][ T9351] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  559.160871][  T834] usb 6-1: device descriptor read/64, error -71
[  559.162484][ T9351] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  559.167971][ T9351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.171742][ T9351] usb 8-1: config 0 descriptor??
[  559.175128][ T9351] ldusb 8-1:0.0: Interrupt in endpoint not found
[  559.177365][ T9351] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  559.281036][  T834] usb usb6-port1: attempt power cycle
[  559.518061][T13758] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1246'.
[  559.648024][ T9351] usb 8-1: USB disconnect, device number 56
[  559.650842][  T834] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  559.682347][  T834] usb 6-1: device descriptor read/8, error -71
[  560.101038][  T834] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  560.123670][  T834] usb 6-1: device descriptor read/8, error -71
[  560.231574][  T834] usb usb6-port1: unable to enumerate USB device
[  560.539567][T13766] syz.3.1247: attempt to access beyond end of device
[  560.539567][T13766] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0
[  560.543956][T13766] qnx4: unable to read the superblock
[  562.292164][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  565.271415][   T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  565.275051][   T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  565.277580][   T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  565.279889][   T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  565.282304][   T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  565.286599][   T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  565.369939][T13782] chnl_net:caif_netlink_parms(): no params data found
[  565.444967][T13782] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.447147][T13782] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.449290][T13782] bridge_slave_0: entered allmulticast mode
[  565.452610][T13782] bridge_slave_0: entered promiscuous mode
[  565.455248][T13782] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.457326][T13782] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.459405][T13782] bridge_slave_1: entered allmulticast mode
[  565.461859][T13782] bridge_slave_1: entered promiscuous mode
[  565.480295][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.484351][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.504278][T13782] team0: Port device team_slave_0 added
[  565.507953][T13782] team0: Port device team_slave_1 added
[  565.525105][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.527112][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.534560][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.538316][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.540306][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.548747][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.572248][T13782] hsr_slave_0: entered promiscuous mode
[  565.574431][T13782] hsr_slave_1: entered promiscuous mode
[  566.048526][T13782] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  566.053245][T13782] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  566.056836][T13782] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  566.059960][T13782] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  566.069231][T13782] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.071354][T13782] bridge0: port 2(bridge_slave_1) entered forwarding state
[  566.073518][T13782] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.075557][T13782] bridge0: port 1(bridge_slave_0) entered forwarding state
[  566.102729][T13782] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.111285][T13782] 8021q: adding VLAN 0 to HW filter on device team0
[  566.114968][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.118431][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.139498][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.142251][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  566.152691][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.155320][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  566.168053][T13782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  566.171325][T13782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  566.235526][T13782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  566.346630][T13782] veth0_vlan: entered promiscuous mode
[  566.350452][T13782] veth1_vlan: entered promiscuous mode
[  566.361083][T13782] veth0_macvtap: entered promiscuous mode
[  566.364432][T13782] veth1_macvtap: entered promiscuous mode
[  566.369873][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.373467][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.376274][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.379222][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.382604][T13782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  566.386943][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.389953][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.393301][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.396299][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.399737][T13782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  566.404773][T13782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  566.407293][T13782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  566.409767][T13782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  566.412670][T13782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.442616][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.444986][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.454625][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.457163][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.761311][T13872] siw: device registration error -23
[  567.330943][ T5951] Bluetooth: hci0: command tx timeout
[  567.465717][T13908] syzkaller0: entered promiscuous mode
[  567.467366][T13908] syzkaller0: entered allmulticast mode
[  567.554119][T13918] syz.0.1266: attempt to access beyond end of device
[  567.554119][T13918] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0
[  567.558478][T13918] syz.0.1266: attempt to access beyond end of device
[  567.558478][T13918] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0
[  567.562324][T13918] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  567.565548][T13918] syz.0.1266: attempt to access beyond end of device
[  567.565548][T13918] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0
[  567.569337][T13918] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  567.574522][T13918] syz.0.1266: attempt to access beyond end of device
[  567.574522][T13918] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  567.578988][T13918] syz.0.1266: attempt to access beyond end of device
[  567.578988][T13918] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[  567.583383][T13918] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  567.586561][T13918] syz.0.1266: attempt to access beyond end of device
[  567.586561][T13918] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  567.590323][T13918] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  567.594476][T13918] syz.0.1266: attempt to access beyond end of device
[  567.594476][T13918] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[  567.598675][T13918] syz.0.1266: attempt to access beyond end of device
[  567.598675][T13918] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  567.603242][T13918] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  567.608149][T13918] syz.0.1266: attempt to access beyond end of device
[  567.608149][T13918] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[  567.612300][T13918] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  567.617736][T13918] syz.0.1266: attempt to access beyond end of device
[  567.617736][T13918] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  567.623913][T13918] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  567.628146][T13918] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  567.631223][T13918] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  569.400863][ T5951] Bluetooth: hci0: command tx timeout
[  571.491283][ T5951] Bluetooth: hci0: command tx timeout
[  571.608631][T14008] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  571.613629][T14008] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  571.617730][T14008] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  571.621207][T14008] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  571.625037][T14008] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  571.628156][T14008] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  571.631695][T14008] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  571.636022][T14008] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  571.638930][T14008] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  572.218285][T14010] bond3: entered promiscuous mode
[  572.219858][T14010] bond3: entered allmulticast mode
[  572.222398][T14010] 8021q: adding VLAN 0 to HW filter on device bond3
[  572.433003][T14019] 9pnet_virtio: no channels available for device syz
[  573.560869][ T5951] Bluetooth: hci0: command tx timeout
[  574.000804][ T6028] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  574.172832][ T6028] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  574.176040][ T6028] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  574.178886][ T6028] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  574.184079][ T6028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.203327][T14039] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  574.218776][ T6028] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  574.576226][T14034] input: syz0 as /devices/virtual/input/input13
[  574.690199][ T6028] usb 9-1: USB disconnect, device number 31
[  574.810424][T14057] binder: 14055:14057 ioctl ae01 0 returned -22
[  575.668034][T14073] 9pnet_virtio: no channels available for device syz
[  576.714525][T14082] overlayfs: failed to resolve './file1': -2
[  576.835503][ T6031] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0
[  576.837814][ T6031] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0
[  576.846330][ T6031] hid-generic 0000:0003:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  578.388376][T14115] syzkaller0: entered promiscuous mode
[  578.390108][T14115] syzkaller0: entered allmulticast mode
[  578.449658][T14116] 9pnet_virtio: no channels available for device syz
[  579.134710][T14126] overlayfs: failed to resolve './file1': -2
[  579.492653][ T5951] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  579.497313][ T5951] Bluetooth: hci3: Injecting HCI hardware error event
[  579.502953][ T5951] Bluetooth: hci3: hardware error 0x00
[  580.741163][ T6031] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  580.870909][ T6031] usb 6-1: device descriptor read/64, error -71
[  581.280822][ T6031] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  581.410859][ T6031] usb 6-1: device descriptor read/64, error -71
[  581.522320][ T6031] usb usb6-port1: attempt power cycle
[  581.560946][ T5951] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  581.860907][ T6031] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  581.911064][ T6031] usb 6-1: device descriptor read/8, error -71
[  582.163499][ T6031] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  582.181429][ T6031] usb 6-1: device descriptor read/8, error -71
[  582.291212][ T6031] usb usb6-port1: unable to enumerate USB device
[  584.304710][T14162] syzkaller0: entered promiscuous mode
[  584.306347][T14162] syzkaller0: entered allmulticast mode
[  584.374524][T14165] 9pnet_virtio: no channels available for device syz
[  584.662523][T14173] 9pnet_virtio: no channels available for device syz
[  586.245593][   T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  586.249784][   T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  586.256114][   T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  586.260422][   T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  586.264465][   T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  586.267302][   T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  586.386185][T14177] chnl_net:caif_netlink_parms(): no params data found
[  586.467437][T14189] netlink: 'syz.3.1319': attribute type 10 has an invalid length.
[  586.469566][T14189] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1319'.
[  586.486688][T14189] team0: entered promiscuous mode
[  586.516386][T14177] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.519150][T14177] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.523933][T14177] bridge_slave_0: entered allmulticast mode
[  586.526892][T14177] bridge_slave_0: entered promiscuous mode
[  586.530568][T14177] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.535845][T14177] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.537962][T14177] bridge_slave_1: entered allmulticast mode
[  586.540116][T14177] bridge_slave_1: entered promiscuous mode
[  586.879208][T14177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  586.883872][T14177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  586.913926][T14177] team0: Port device team_slave_0 added
[  586.917259][T14177] team0: Port device team_slave_1 added
[  586.941120][T14177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.943479][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.952330][T14177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.957024][T14177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.959292][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.966828][T14177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  586.993699][T14177] hsr_slave_0: entered promiscuous mode
[  587.022908][T14177] hsr_slave_1: entered promiscuous mode
[  587.025319][T14177] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  587.027600][T14177] Cannot create hsr debugfs directory
[  587.130654][T14177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.213480][T14177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.352876][ T6031] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[  587.353108][T14177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.441887][T14177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.507393][ T6031] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.511513][ T6031] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  587.515116][ T6031] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  587.522954][ T6031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.527399][ T6031] usb 8-1: config 0 descriptor??
[  587.547529][T14177] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  587.551217][T14177] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  587.558975][T14177] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  587.570851][  T834] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  587.572173][T14177] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  587.602145][T14177] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.624428][T14177] 8021q: adding VLAN 0 to HW filter on device team0
[  587.631090][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.633429][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.639456][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.641577][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.716347][T14177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.731344][T14177] veth0_vlan: entered promiscuous mode
[  587.732304][  T834] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  587.733498][ T9453] usb 8-1: USB disconnect, device number 57
[  587.735612][T14177] veth1_vlan: entered promiscuous mode
[  587.736499][  T834] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  587.745134][  T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.745218][T14177] veth0_macvtap: entered promiscuous mode
[  587.748599][  T834] usb 6-1: config 0 descriptor??
[  587.750651][T14177] veth1_macvtap: entered promiscuous mode
[  587.752158][  T834] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  587.757557][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.761285][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.764082][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.767040][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.769796][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.773660][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.777515][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.784336][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.787321][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.790287][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.794965][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.798693][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.802915][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.809184][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.814768][T14177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.818134][T14177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.821625][T14177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.824851][T14177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.856511][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.858793][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.869832][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.872350][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.910875][  T144] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  587.954495][ T9260] usb 6-1: USB disconnect, device number 33
[  588.062848][  T144] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.065765][  T144] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  588.068338][  T144] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  588.071189][  T144] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.074597][  T144] usb 9-1: config 0 descriptor??
[  588.149202][T14213] bio_check_eod: 14 callbacks suppressed
[  588.149240][T14213] syz.2.1318: attempt to access beyond end of device
[  588.149240][T14213] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0
[  588.155209][T14213] qnx4: unable to read the superblock
[  588.190965][ T9453] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[  588.286441][  T144] usb 9-1: USB disconnect, device number 32
[  588.341050][ T9453] usb 8-1: Using ep0 maxpacket: 32
[  588.344970][ T9453] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.348142][ T9453] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  588.351753][ T9453] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  588.354591][ T9453] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.358048][ T9453] usb 8-1: config 0 descriptor??
[  588.361068][   T65] Bluetooth: hci1: command tx timeout
[  588.490859][ T9260] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  588.671103][ T9260] usb 6-1: Using ep0 maxpacket: 32
[  588.682549][ T9260] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  588.686467][ T9260] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  588.689767][ T9260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.701437][ T9260] usb 6-1: config 0 descriptor??
[  588.713332][ T9260] ldusb 6-1:0.0: Interrupt in endpoint not found
[  588.716384][ T9260] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  588.721169][ T9351] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  588.871216][ T9351] usb 9-1: Using ep0 maxpacket: 32
[  588.876058][ T9351] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.878975][ T9351] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  588.895335][ T6031] usb 8-1: USB disconnect, device number 58
[  588.896285][ T9351] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  588.902057][ T9351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.919092][ T9351] usb 9-1: config 0 descriptor??
[  589.090878][T14219] nbd2: detected capacity change from 0 to 67108884
[  589.116230][T14030] block nbd2: Send control failed (result -89)
[  589.118308][T14030] block nbd2: Request send failed, requeueing
[  589.124055][   T65] block nbd2: Receive control failed (result -32)
[  589.132532][   T51] block nbd2: Dead connection, failed to find a fallback
[  589.135423][   T51] block nbd2: shutting down sockets
[  589.137649][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.140692][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.144075][T14030] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.146879][T14030] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.149523][T14030] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.159781][T14030] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.163148][T14030] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.168353][T14030] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.170789][T14030] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.173568][T14030] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.176261][T14030] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.178857][T14030] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.182020][T14030] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.184608][T14030] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.186871][T14030] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.189449][T14030] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.192109][T14030] ldm_validate_partition_table(): Disk read failed.
[  589.200984][T14030] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.203876][T14030] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.206255][T14030] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  589.209265][T14030] Buffer I/O error on dev nbd2, logical block 0, async page read
[  589.211679][T14030] Dev nbd2: unable to read RDB block 0
[  589.214538][T14030]  nbd2: unable to read partition table
[  589.240713][T14222] ldm_validate_partition_table(): Disk read failed.
[  589.247544][T14222] Dev nbd2: unable to read RDB block 0
[  589.251535][T14222]  nbd2: unable to read partition table
[  589.262830][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  589.267328][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441
[  589.274217][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185
[  589.277806][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440
[  589.281314][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184
[  589.284847][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439
[  589.288297][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183
[  589.291516][T14030] ldm_validate_partition_table(): Disk read failed.
[  589.292970][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291
[  589.297202][T14030] Dev nbd2: unable to read RDB block 0
[  589.297737][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035
[  589.299905][T14030]  nbd2: unable to read partition table
[  589.302674][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289
[  589.307100][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033
[  589.311982][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  589.320914][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  589.324160][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220
[  589.327418][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964
[  589.330424][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219
[  589.334235][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963
[  589.335829][ T6031] usb 9-1: USB disconnect, device number 33
[  589.337129][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218
[  589.343089][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962
[  589.349088][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070
[  589.353918][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814
[  589.357253][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068
[  589.360711][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812
[  589.364344][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  589.368639][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  589.372789][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609
[  589.376635][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353
[  589.381380][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608
[  589.386268][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352
[  589.391677][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607
[  589.395384][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351
[  589.398923][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459
[  589.403148][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203
[  589.406720][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457
[  589.410149][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201
[  589.416211][T14222] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  589.419359][T14222] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  589.761492][ T6031] usb 6-1: USB disconnect, device number 34
[  590.136903][T14243] netlink: 'syz.2.1330': attribute type 10 has an invalid length.
[  590.139513][T14243] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1330'.
[  590.142826][T14243] team0: entered promiscuous mode
[  590.144288][T14243] team_slave_0: entered promiscuous mode
[  590.146135][T14243] team_slave_1: entered promiscuous mode
[  590.147944][T14243] bridge0: port 3(team0) entered blocking state
[  590.149835][T14243] bridge0: port 3(team0) entered disabled state
[  590.151886][T14243] team0: entered allmulticast mode
[  590.153399][T14243] team_slave_0: entered allmulticast mode
[  590.155059][T14243] team_slave_1: entered allmulticast mode
[  590.157677][T14243] bridge0: port 3(team0) entered blocking state
[  590.159531][T14243] bridge0: port 3(team0) entered forwarding state
[  590.450980][   T65] Bluetooth: hci1: command tx timeout
[  592.370970][  T834] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  592.470867][ T6031] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  592.490581][T14293] syzkaller0: entered promiscuous mode
[  592.492390][T14293] syzkaller0: entered allmulticast mode
[  592.522583][  T834] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.526650][  T834] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  592.530273][  T834] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  592.531157][   T65] Bluetooth: hci1: command tx timeout
[  592.534140][  T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.544476][  T834] usb 9-1: config 0 descriptor??
[  592.643035][ T6031] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  592.646062][ T6031] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  592.648740][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.657907][ T6031] usb 7-1: config 0 descriptor??
[  592.661159][ T6031] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  592.754589][ T6031] usb 9-1: USB disconnect, device number 34
[  592.864562][  T834] usb 7-1: USB disconnect, device number 49
[  593.195394][ T6031] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  593.300855][  T834] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  593.340828][ T6031] usb 9-1: Using ep0 maxpacket: 32
[  593.343652][ T6031] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  593.346632][ T6031] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  593.349220][ T6031] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  593.353614][ T6031] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.356736][ T6031] usb 9-1: config 0 descriptor??
[  593.450889][  T834] usb 7-1: Using ep0 maxpacket: 32
[  593.462691][  T834] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  593.465760][  T834] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  593.468435][  T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.473792][  T834] usb 7-1: config 0 descriptor??
[  593.477126][  T834] ldusb 7-1:0.0: Interrupt in endpoint not found
[  593.479432][  T834] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  593.781094][ T9260] usb 9-1: USB disconnect, device number 35
[  593.915269][T14298] netlink: 'syz.1.1341': attribute type 4 has an invalid length.
[  593.971280][ T9453] usb 7-1: USB disconnect, device number 50
[  594.191378][T14306] netlink: 'syz.1.1342': attribute type 10 has an invalid length.
[  594.193701][T14306] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1342'.
[  594.196269][T14306] team0: entered promiscuous mode
[  594.600863][   T65] Bluetooth: hci1: command tx timeout
[  594.970360][T14324] fuse: blksize only supported for fuseblk
[  595.610954][   T39] kauditd_printk_skb: 48 callbacks suppressed
[  595.610967][   T39] audit: type=1804 audit(1736569365.320:144): pid=14331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1348" name="/newroot/7/file0/cgroup.controllers" dev="9p" ino=38535883 res=1 errno=0
[  595.880850][ T6031] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  595.976869][T14344] syzkaller0: entered promiscuous mode
[  595.978600][T14344] syzkaller0: entered allmulticast mode
[  596.034643][ T6031] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  596.037897][ T6031] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  596.040431][T14345] 9pnet_virtio: no channels available for device syz
[  596.042277][ T6031] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  596.046971][ T6031] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.050041][ T6031] usb 9-1: config 0 descriptor??
[  596.058040][ T6031] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  596.264940][ T9260] usb 9-1: USB disconnect, device number 36
[  596.299823][T14348] Bluetooth: MGMT ver 1.23
[  596.307096][T14347] Bluetooth: hci0: Opcode 0x0401 failed: -112
[  596.488020][T14351] input: syz0 as /devices/virtual/input/input14
[  596.741191][ T9260] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  596.890824][ T9260] usb 9-1: Using ep0 maxpacket: 32
[  596.895725][ T9260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  596.898882][ T9260] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  596.902868][ T9260] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  596.905751][ T9260] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.909348][ T9260] usb 9-1: config 0 descriptor??
[  596.913131][ T9260] ldusb 9-1:0.0: Interrupt in endpoint not found
[  596.915462][ T9260] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  596.950950][   T30] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  597.115523][   T30] usb 7-1: Using ep0 maxpacket: 8
[  597.118983][   T30] usb 7-1: config 167 has too many interfaces: 202, using maximum allowed: 32
[  597.122826][   T30] usb 7-1: config 167 has 1 interface, different from the descriptor's value: 202
[  597.134904][   T30] usb 7-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29
[  597.138662][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.142050][   T30] usb 7-1: Product: syz
[  597.143797][   T30] usb 7-1: Manufacturer: syz
[  597.145788][   T30] usb 7-1: SerialNumber: syz
[  597.154587][   T30] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state.
[  597.159465][   T30] dvb-usb: bulk message failed: -22 (3/0)
[  597.222057][   T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  597.228296][   T30] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author)
[  597.240351][   T30] usb 7-1: media controller created
[  597.282016][   T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  597.332191][ T6031] usb 9-1: USB disconnect, device number 37
[  597.346028][   T30] dvb-usb: bulk message failed: -22 (6/0)
[  597.363567][   T30] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author'
[  597.385980][   T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input15
[  597.452198][   T30] dvb-usb: schedule remote query interval to 150 msecs.
[  597.454741][   T30] dvb-usb: bulk message failed: -22 (3/0)
[  597.480856][   T30] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected.
[  597.614576][   T30] dvb-usb: bulk message failed: -22 (1/0)
[  597.616467][   T30] dvb-usb: error while querying for an remote control event.
[  597.780843][   T30] dvb-usb: bulk message failed: -22 (1/0)
[  597.782941][   T30] dvb-usb: error while querying for an remote control event.
[  597.841870][ T9351] usb 7-1: USB disconnect, device number 51
[  597.892009][ T9351] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected.
[  598.280836][ T5951] Bluetooth: hci0: command 0x0401 tx timeout
[  598.284586][   T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  598.660901][  T144] usb 7-1: new full-speed USB device number 52 using dummy_hcd
[  598.824162][  T144] usb 7-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  598.828386][  T144] usb 7-1: config 1 interface 0 has no altsetting 0
[  598.833500][  T144] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  598.838280][  T144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.840943][  T144] usb 7-1: Product: syz
[  598.842399][  T144] usb 7-1: Manufacturer: syz
[  598.844266][  T144] usb 7-1: SerialNumber: syz
[  599.576031][  T144] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  599.741040][T14391] nbd1: detected capacity change from 0 to 67108884
[  599.745553][T14030] block nbd1: Send control failed (result -89)
[  599.748051][T14030] block nbd1: Request send failed, requeueing
[  599.752214][ T5951] block nbd1: Receive control failed (result -32)
[  599.752328][T12567] block nbd1: Dead connection, failed to find a fallback
[  599.757798][T12567] block nbd1: shutting down sockets
[  599.759365][T12567] blk_print_req_error: 130 callbacks suppressed
[  599.759376][T12567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.765196][T12567] buffer_io_error: 90 callbacks suppressed
[  599.765208][T12567] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.771885][T14030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.775285][T14030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.778298][T14030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.782032][T14030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.785012][T14030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.788482][T14030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.791696][T14030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.795125][T14030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.797389][T14030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.799971][T14030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.804163][T14030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.806779][T14030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.809063][T14030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.811728][T14030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.814208][T14030] ldm_validate_partition_table(): Disk read failed.
[  599.816709][T14030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.820204][T14030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.823269][T14030] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  599.826527][T14030] Buffer I/O error on dev nbd1, logical block 0, async page read
[  599.828878][T14030] Dev nbd1: unable to read RDB block 0
[  599.831188][T14030]  nbd1: unable to read partition table
[  599.835394][T14030] ldm_validate_partition_table(): Disk read failed.
[  599.838180][T14030] Dev nbd1: unable to read RDB block 0
[  599.840585][T14030]  nbd1: unable to read partition table
[  600.370931][ T5951] Bluetooth: hci0: command 0x0401 tx timeout
[  601.109122][T14413] input: syz0 as /devices/virtual/input/input16
[  601.337088][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'.
[  601.414132][ T5951] Bluetooth: hci4: unexpected event for opcode 0x2002
[  601.425727][ T9260] usb 7-1: USB disconnect, device number 52
[  601.439298][ T9260] usblp0: removed
[  601.606729][T14424] 9pnet_virtio: no channels available for device syz
[  604.590085][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'.
[  605.502553][ T5951] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  605.505530][ T5951] Bluetooth: hci4: Injecting HCI hardware error event
[  605.509279][   T65] Bluetooth: hci4: hardware error 0x00
[  607.587279][T14514] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1400'.
[  607.590104][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1400'.
[  607.593090][T14514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1400'.
[  607.595738][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1400'.
[  607.720873][   T65] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  608.504646][T14524] 9pnet_virtio: no channels available for device syz
[  608.690922][   T65] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  608.695822][   T65] Bluetooth: hci1: Injecting HCI hardware error event
[  608.700464][   T65] Bluetooth: hci1: hardware error 0x00
[  609.222701][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1396'.
[  609.812043][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'.
[  610.234121][T14563] xt_HMARK: spi-set and port-set can't be combined
[  610.580904][ T9351] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  610.754068][ T9351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.761271][   T65] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  610.769808][ T9351] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  610.783379][ T9351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.814339][ T9351] usb 6-1: config 0 descriptor??
[  611.011129][T14573] nbd3: detected capacity change from 0 to 67108884
[  611.029248][T14049] block nbd3: Send control failed (result -89)
[  611.031258][T14049] block nbd3: Request send failed, requeueing
[  611.033133][T12567] block nbd3: Dead connection, failed to find a fallback
[  611.033157][   T65] block nbd3: Receive control failed (result -32)
[  611.035149][T12567] block nbd3: shutting down sockets
[  611.035172][T12567] blk_print_req_error: 24 callbacks suppressed
[  611.035179][T12567] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.035199][T12567] buffer_io_error: 23 callbacks suppressed
[  611.035204][T12567] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.035348][T14049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.050455][T14049] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.052878][T14049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.055480][T14049] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.057749][T14049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.060314][T14049] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.062954][T14049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.065549][T14049] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.067809][T14049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.070404][T14049] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.072514][ T9351] usbhid 6-1:0.0: can't add hid device: -71
[  611.072742][T14049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.074927][ T9351] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  611.077049][T14049] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.081747][T14049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.084350][T14049] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.087177][T14049] ldm_validate_partition_table(): Disk read failed.
[  611.089096][T14049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.093226][T14049] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.095504][T14049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  611.097119][ T9351] usb 6-1: USB disconnect, device number 35
[  611.098211][T14049] Buffer I/O error on dev nbd3, logical block 0, async page read
[  611.102323][T14049] Dev nbd3: unable to read RDB block 0
[  611.104094][T14049]  nbd3: unable to read partition table
[  611.113659][T14574] ldm_validate_partition_table(): Disk read failed.
[  611.121284][T14574] Dev nbd3: unable to read RDB block 0
[  611.137356][T14574]  nbd3: unable to read partition table
[  611.144201][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  611.144863][T14049] ldm_validate_partition_table(): Disk read failed.
[  611.147418][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554441, location=33554441
[  611.151939][T14049] Dev nbd3: unable to read RDB block 0
[  611.152466][T14049]  nbd3: unable to read partition table
[  611.155400][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554185, location=33554185
[  611.159135][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554440, location=33554440
[  611.162836][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554184, location=33554184
[  611.166991][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554439, location=33554439
[  611.171078][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554183, location=33554183
[  611.174913][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554291, location=33554291
[  611.180098][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554035, location=33554035
[  611.183678][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554289, location=33554289
[  611.186848][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554033, location=33554033
[  611.189910][T14576] 9pnet_virtio: no channels available for device syz
[  611.192860][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  611.204494][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  611.208090][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777220, location=16777220
[  611.221908][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776964, location=16776964
[  611.225925][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777219, location=16777219
[  611.229302][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776963, location=16776963
[  611.233931][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777218, location=16777218
[  611.237186][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776962, location=16776962
[  611.242135][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777070, location=16777070
[  611.246608][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776814, location=16776814
[  611.250550][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777068, location=16777068
[  611.254718][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776812, location=16776812
[  611.259181][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  611.268186][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  611.275466][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388609, location=8388609
[  611.281736][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388353, location=8388353
[  611.285071][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388608, location=8388608
[  611.288582][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388352, location=8388352
[  611.292141][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388607, location=8388607
[  611.295548][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388351, location=8388351
[  611.298763][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388459, location=8388459
[  611.302189][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388203, location=8388203
[  611.305597][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388457, location=8388457
[  611.309016][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388201, location=8388201
[  611.313050][T14574] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  611.315861][T14574] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  611.905062][T14587] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  611.907538][T14587] UDF-fs: Scanning with blocksize 2048 failed
[  611.911341][T14587] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  611.913532][T14587] UDF-fs: Scanning with blocksize 4096 failed
[  620.798827][T14531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  620.811916][T14531] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  620.818294][T14531] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  620.823010][T14531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  620.826434][T14531] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  620.829486][T14531] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  620.872991][ T5980] libceph: connect (1)[c::]:6789 error -101
[  620.881326][ T5980] libceph: mon0 (1)[c::]:6789 connect error
[  620.948120][T14608] siw: device registration error -23
[  621.032271][T14598] ceph: No mds server is up or the cluster is laggy
[  621.072824][T14600] chnl_net:caif_netlink_parms(): no params data found
[  621.184262][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.222058][T14600] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.224418][T14600] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.226672][T14600] bridge_slave_0: entered allmulticast mode
[  621.229201][T14600] bridge_slave_0: entered promiscuous mode
[  621.235094][T14600] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.237431][T14600] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.239716][T14600] bridge_slave_1: entered allmulticast mode
[  621.242603][T14600] bridge_slave_1: entered promiscuous mode
[  621.271445][T14600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.289376][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.295798][T14600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.324559][T14600] team0: Port device team_slave_0 added
[  621.327993][T14600] team0: Port device team_slave_1 added
[  621.347508][T14600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.349625][T14600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  621.357098][T14600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  621.379044][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.384374][T14600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  621.386403][T14600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  621.394888][T14600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.423176][T14600] hsr_slave_0: entered promiscuous mode
[  621.425815][T14600] hsr_slave_1: entered promiscuous mode
[  621.429407][T14600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  621.432850][T14600] Cannot create hsr debugfs directory
[  621.446465][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.690278][ T1138] bridge_slave_1: left allmulticast mode
[  621.693988][ T1138] bridge_slave_1: left promiscuous mode
[  621.695993][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.699879][ T1138] bridge_slave_0: left allmulticast mode
[  621.702257][ T1138] bridge_slave_0: left promiscuous mode
[  621.704897][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.011459][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  622.015283][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  622.018697][ T1138] bond0 (unregistering): Released all slaves
[  622.334642][ T1138] hsr_slave_0: left promiscuous mode
[  622.337115][ T1138] hsr_slave_1: left promiscuous mode
[  622.339530][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  622.344328][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  622.347310][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  622.349648][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  622.375879][ T1138] veth1_macvtap: left promiscuous mode
[  622.377453][ T1138] veth0_macvtap: left promiscuous mode
[  622.379013][ T1138] veth1_vlan: left promiscuous mode
[  622.380536][ T1138] veth0_vlan: left promiscuous mode
[  622.921008][   T65] Bluetooth: hci2: command tx timeout
[  623.124334][ T1138] team0 (unregistering): Port device team_slave_1 removed
[  623.211685][ T1138] team0 (unregistering): Port device team_slave_0 removed
[  623.722647][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  624.478689][T14600] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  624.483352][T14600] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  624.487064][T14600] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  624.491844][T14600] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  624.524816][T14600] 8021q: adding VLAN 0 to HW filter on device bond0
[  624.532753][T14600] 8021q: adding VLAN 0 to HW filter on device team0
[  624.537389][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.539448][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  624.544866][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.547539][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  624.626151][T14600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  624.712059][T14600] veth0_vlan: entered promiscuous mode
[  624.715737][T14600] veth1_vlan: entered promiscuous mode
[  624.727651][T14600] veth0_macvtap: entered promiscuous mode
[  624.730926][T14600] veth1_macvtap: entered promiscuous mode
[  624.736562][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.739551][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.743543][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.746499][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.749258][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.752855][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.756224][T14600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  624.764929][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.767903][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.770701][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.773987][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.776853][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.779876][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.784723][T14600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  624.788790][T14600] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.791548][T14600] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.794071][T14600] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.796561][T14600] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.832494][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.835031][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.845289][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.847569][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.000935][   T65] Bluetooth: hci2: command tx timeout
[  625.118981][T14747] netlink: 'syz.8.1409': attribute type 10 has an invalid length.
[  625.123373][T14747] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1409'.
[  625.126969][T14747] team0: entered promiscuous mode
[  625.128500][T14747] team_slave_0: entered promiscuous mode
[  625.130418][T14747] team_slave_1: entered promiscuous mode
[  625.135055][T14747] bridge0: port 3(team0) entered blocking state
[  625.140363][T14747] bridge0: port 3(team0) entered disabled state
[  625.142720][T14747] team0: entered allmulticast mode
[  625.144258][T14747] team_slave_0: entered allmulticast mode
[  625.145915][T14747] team_slave_1: entered allmulticast mode
[  625.162816][T14747] bridge0: port 3(team0) entered blocking state
[  625.164826][T14747] bridge0: port 3(team0) entered forwarding state
[  625.982117][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1411'.
[  626.312013][T14805] syz.1.1414: attempt to access beyond end of device
[  626.312013][T14805] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0
[  626.321170][T14805] XFS (nbd1): SB validate failed with error -5.
[  626.813875][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1415'.
[  627.607858][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1425'.
[  627.775904][T14866] netlink: 'syz.1.1426': attribute type 10 has an invalid length.
[  627.778207][T14866] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1426'.
[  628.203826][   T35] libceph: connect (1)[c::]:6789 error -101
[  628.217381][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  628.380941][T14880] ceph: No mds server is up or the cluster is laggy
[  628.644888][T14897] siw: device registration error -23
[  629.523516][   T39] audit: type=1804 audit(1736569399.330:145): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1429" name="/newroot/170/file0/cgroup.controllers" dev="9p" ino=38535883 res=1 errno=0
[  630.050852][   T65] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  630.054280][   T65] Bluetooth: hci2: Injecting HCI hardware error event
[  630.059478][T14531] Bluetooth: hci2: hardware error 0x00
[  630.266557][ T6028] libceph: connect (1)[c::]:6789 error -101
[  630.268380][ T6028] libceph: mon0 (1)[c::]:6789 connect error
[  630.427598][T14939] ceph: No mds server is up or the cluster is laggy
[  631.445937][T14959] syzkaller0: entered promiscuous mode
[  631.447579][T14959] syzkaller0: entered allmulticast mode
[  632.124272][T14531] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  632.575342][T14980] input: syz0 as /devices/virtual/input/input20
[  632.577271][T14980] input: failed to attach handler leds to device input20, error: -6
[  635.100908][    T9] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  635.268104][    T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  635.274130][    T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  635.279390][    T9] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  635.284394][    T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.356472][    T9] usb 13-1: config 0 descriptor??
[  635.579383][    T9] usbhid 13-1:0.0: can't add hid device: -71
[  635.593988][    T9] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  635.601082][    T9] usb 13-1: USB disconnect, device number 2
[  636.130839][ T9083] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  636.281011][ T9083] usb 13-1: Using ep0 maxpacket: 32
[  636.284891][ T9083] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  636.288101][ T9083] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  636.291167][ T9083] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  636.293776][ T9083] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.297031][ T9083] usb 13-1: config 0 descriptor??
[  636.301197][ T9083] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  636.304494][ T9083] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  636.558676][T15043] syzkaller0: entered promiscuous mode
[  636.560367][T15043] syzkaller0: entered allmulticast mode
[  636.567699][T15006] ldusb 13-1:0.0: Couldn't submit interrupt_in_urb -90
[  636.717615][   T25] usb 13-1: USB disconnect, device number 3
[  636.726318][   T25] ldusb 13-1:0.0: LD USB Device #0 now disconnected
[  637.470874][T15055] nbd8: detected capacity change from 0 to 67108884
[  637.494434][T14603] block nbd8: Send control failed (result -89)
[  637.496700][T14603] block nbd8: Request send failed, requeueing
[  637.498978][T14531] block nbd8: Receive control failed (result -32)
[  637.526600][T12567] block nbd8: Dead connection, failed to find a fallback
[  637.532223][T12567] block nbd8: shutting down sockets
[  637.535073][T12567] blk_print_req_error: 130 callbacks suppressed
[  637.535086][T12567] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.545033][T12567] buffer_io_error: 90 callbacks suppressed
[  637.545094][T12567] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.550505][T14603] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.559723][T14603] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.563553][T14603] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.566857][T14603] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.574110][T14603] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.577421][T14603] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.580602][T14603] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.584467][T14603] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.586970][T14603] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.589609][T14603] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.592324][T14603] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.594988][T14603] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.597296][T14603] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.600382][T14603] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.603001][T14603] ldm_validate_partition_table(): Disk read failed.
[  637.604951][T14603] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.607923][T14603] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.610857][T14603] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  637.614339][T14603] Buffer I/O error on dev nbd8, logical block 0, async page read
[  637.617480][T14603] Dev nbd8: unable to read RDB block 0
[  637.620222][T14603]  nbd8: unable to read partition table
[  637.885072][T14603] ldm_validate_partition_table(): Disk read failed.
[  637.892799][T14603] Dev nbd8: unable to read RDB block 0
[  637.898267][T14603]  nbd8: unable to read partition table
[  637.905694][T15057] ldm_validate_partition_table(): Disk read failed.
[  637.917503][T15057] Dev nbd8: unable to read RDB block 0
[  637.929763][T15057]  nbd8: unable to read partition table
[  637.939446][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  637.947006][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554441, location=33554441
[  637.947908][T15063] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1466'.
[  637.956145][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554185, location=33554185
[  637.959319][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554440, location=33554440
[  637.962850][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554184, location=33554184
[  637.966972][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554439, location=33554439
[  637.971723][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554183, location=33554183
[  637.976085][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554291, location=33554291
[  637.981852][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554035, location=33554035
[  637.986186][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554289, location=33554289
[  637.991650][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554033, location=33554033
[  637.995308][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  638.001300][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  638.004589][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777220, location=16777220
[  638.007759][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776964, location=16776964
[  638.012623][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777219, location=16777219
[  638.016587][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776963, location=16776963
[  638.020677][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777218, location=16777218
[  638.025246][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776962, location=16776962
[  638.028809][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777070, location=16777070
[  638.033510][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776814, location=16776814
[  638.037930][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777068, location=16777068
[  638.042919][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776812, location=16776812
[  638.046383][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  638.050713][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  638.063072][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388609, location=8388609
[  638.067299][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388353, location=8388353
[  638.074932][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388608, location=8388608
[  638.079029][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388352, location=8388352
[  638.084784][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388607, location=8388607
[  638.088832][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388351, location=8388351
[  638.093320][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388459, location=8388459
[  638.097532][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388203, location=8388203
[  638.101920][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388457, location=8388457
[  638.104605][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388201, location=8388201
[  638.107734][T15057] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  638.110155][T15057] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1)
[  639.900898][ T9453] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[  640.062193][ T9453] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.065333][ T9453] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  640.067982][ T9453] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.075947][ T9453] usb 8-1: config 0 descriptor??
[  640.140867][    T9] usb 13-1: new high-speed USB device number 4 using dummy_hcd
[  640.288751][ T9453] usbhid 8-1:0.0: can't add hid device: -71
[  640.290552][ T9453] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  640.295376][ T9453] usb 8-1: USB disconnect, device number 59
[  640.315046][    T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.319113][    T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  640.322150][    T9] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  640.325520][    T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.331852][    T9] usb 13-1: config 0 descriptor??
[  640.353367][T15143] hub 2-0:1.0: USB hub found
[  640.355333][T15143] hub 2-0:1.0: 2 ports detected
[  640.542171][    T9] usbhid 13-1:0.0: can't add hid device: -71
[  640.544549][    T9] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  640.548561][    T9] usb 13-1: USB disconnect, device number 4
[  640.720835][ T9453] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[  640.870902][ T9453] usb 8-1: Using ep0 maxpacket: 32
[  640.874935][ T9453] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.879229][ T9453] usb 8-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40
[  640.883337][ T9453] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.887924][ T9453] usb 8-1: config 0 descriptor??
[  640.980937][    T9] usb 13-1: new high-speed USB device number 5 using dummy_hcd
[  641.130901][    T9] usb 13-1: Using ep0 maxpacket: 32
[  641.137639][    T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.147535][    T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.157078][    T9] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  641.159708][    T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.173942][    T9] usb 13-1: config 0 descriptor??
[  641.183659][    T9] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  641.194345][    T9] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  641.291923][T15150] syzkaller0: entered promiscuous mode
[  641.293744][T15150] syzkaller0: entered allmulticast mode
[  641.449219][T15126] ldusb 13-1:0.0: Couldn't submit interrupt_in_urb -90
[  641.461435][T15108] ldusb 13-1:0.0: Couldn't submit interrupt_in_urb -90
[  641.571559][    T8] usb 13-1: USB disconnect, device number 5
[  641.574671][    T8] ldusb 13-1:0.0: LD USB Device #0 now disconnected
[  641.620948][T15159] netlink: 'syz.1.1480': attribute type 4 has an invalid length.
[  641.672840][T15160] netlink: 'syz.1.1480': attribute type 4 has an invalid length.
[  641.678384][ T9453] usbhid 8-1:0.0: can't add hid device: -71
[  641.680175][ T9453] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  641.686435][ T9453] usb 8-1: USB disconnect, device number 60
[  644.765700][T15203] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1495'.
[  644.781341][T15203] loop9: detected capacity change from 0 to 6
[  644.786201][T15203] Dev loop9: unable to read RDB block 6
[  644.787949][T15203]  loop9: unable to read partition table
[  644.790468][T15203] loop9: partition table beyond EOD, truncated
[  644.793005][T15203] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  644.793005][T15203] 
) failed (rc=-5)
[  645.431369][ T5999] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  645.689957][ T6028] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[  645.852896][ T6028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  645.862623][ T6028] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  645.869370][ T6028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.963999][ T6028] usb 8-1: config 0 descriptor??
[  646.152225][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'.
[  646.173705][ T6028] usbhid 8-1:0.0: can't add hid device: -71
[  646.175603][ T6028] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  646.202240][ T6028] usb 8-1: USB disconnect, device number 61
[  646.230844][    T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  646.383037][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.387152][    T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  646.390464][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.394901][    T9] usb 6-1: config 0 descriptor??
[  646.604567][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  646.606373][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  646.609385][    T9] usb 6-1: USB disconnect, device number 36
[  646.611287][    T8] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[  646.760902][    T8] usb 8-1: Using ep0 maxpacket: 32
[  646.769500][    T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.773395][    T8] usb 8-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40
[  646.775986][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.778676][    T8] usb 8-1: config 0 descriptor??
[  647.040935][    T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  647.209299][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.213930][    T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  647.216575][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.220346][    T9] usb 6-1: config 0 descriptor??
[  647.460918][    T8] usbhid 8-1:0.0: can't add hid device: -71
[  647.462799][    T8] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  647.499159][    T8] usb 8-1: USB disconnect, device number 62
[  647.643948][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'.
[  647.712357][T15259] syz.8.1498 (15259): drop_caches: 2
[  648.022615][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  648.024407][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  648.028449][    T9] usb 6-1: USB disconnect, device number 37
[  657.552351][T15306] bond0: entered promiscuous mode
[  657.622137][ T9453] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  657.650070][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'.
[  658.311228][    T8] usb 8-1: new high-speed USB device number 63 using dummy_hcd
[  658.463919][    T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.467017][    T8] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  658.469743][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.477539][    T8] usb 8-1: config 0 descriptor??
[  658.510916][ T5997] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  658.662282][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.665393][ T5997] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  658.668014][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.672707][ T5997] usb 6-1: config 0 descriptor??
[  658.689178][    T8] usbhid 8-1:0.0: can't add hid device: -71
[  658.691182][    T8] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  658.694426][    T8] usb 8-1: USB disconnect, device number 63
[  658.879939][ T5997] usbhid 6-1:0.0: can't add hid device: -71
[  658.881832][ T5997] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  658.885434][ T5997] usb 6-1: USB disconnect, device number 38
[  659.131003][   T35] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[  659.290908][   T35] usb 8-1: Using ep0 maxpacket: 32
[  659.294091][   T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  659.297354][   T35] usb 8-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40
[  659.300251][   T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.304415][   T35] usb 8-1: config 0 descriptor??
[  659.310958][ T5997] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  659.466344][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  659.470395][ T5997] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  659.473197][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.476632][ T5997] usb 6-1: config 0 descriptor??
[  659.945001][   T35] usbhid 8-1:0.0: can't add hid device: -71
[  659.946811][   T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  659.950012][   T35] usb 8-1: USB disconnect, device number 64
[  660.078574][ T5997] usbhid 6-1:0.0: can't add hid device: -71
[  660.081168][ T5997] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  660.085819][ T5997] usb 6-1: USB disconnect, device number 39
[  660.818656][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'.
[  661.065586][T15366] wireguard0: entered promiscuous mode
[  661.067900][T15366] wireguard0: entered allmulticast mode
[  674.988682][T15389] smc: net device wg0 applied user defined pnetid SYZ0
[  675.153113][T15401] qnx6: unable to read the first superblock
[  676.665260][T15401] net_ratelimit: 10 callbacks suppressed
[  676.665277][T15401] Set syz1 is full, maxelem 65536 reached
[  677.218238][T15446] netlink: 'syz.2.1523': attribute type 2 has an invalid length.
[  677.221039][T15446] netlink: 'syz.2.1523': attribute type 9 has an invalid length.
[  677.223510][T15446] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1523'.
[  677.236658][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'.
[  678.400925][ T6031] usb 13-1: new high-speed USB device number 6 using dummy_hcd
[  678.484648][    C3] vcan0: j1939_tp_rxtimer: 0xffff888023902400: rx timeout, send abort
[  678.562663][ T6031] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.566839][ T6031] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  678.570380][ T6031] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.579664][ T6031] usb 13-1: config 0 descriptor??
[  678.792117][ T6031] usbhid 13-1:0.0: can't add hid device: -71
[  678.794003][ T6031] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  678.800272][ T6031] usb 13-1: USB disconnect, device number 6
[  678.989378][    C3] vcan0: j1939_tp_rxtimer: 0xffff888023902400: abort rx timeout. Force session deactivation
[  679.230872][ T6031] usb 13-1: new high-speed USB device number 7 using dummy_hcd
[  679.412196][ T6031] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  679.412221][ T6031] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  679.412233][ T6031] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.413167][ T6031] usb 13-1: config 0 descriptor??
[  680.086776][ T6031] usbhid 13-1:0.0: can't add hid device: -71
[  680.088606][ T6031] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  680.099763][ T6031] usb 13-1: USB disconnect, device number 7
[  680.110398][T15483] cgroup: fork rejected by pids controller in /syz3
[  680.799540][T15562] hub 2-0:1.0: USB hub found
[  680.801910][T15562] hub 2-0:1.0: 2 ports detected
[  681.122616][T15564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  681.179289][T15564] overlay: filesystem on ./bus not supported as upperdir
[  681.729272][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'.
[  682.497523][T15583] netlink: 'syz.1.1540': attribute type 2 has an invalid length.
[  682.501194][T15583] netlink: 'syz.1.1540': attribute type 9 has an invalid length.
[  682.503525][T15583] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1540'.
[  682.536247][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'.
[  683.202915][ T6028] libceph: connect (1)[c::]:6789 error -101
[  683.204985][ T6028] libceph: mon0 (1)[c::]:6789 connect error
[  683.480082][   T30] libceph: connect (1)[c::]:6789 error -101
[  683.482718][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  683.711612][T15595] ceph: No mds server is up or the cluster is laggy
[  683.783679][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805837d800: rx timeout, send abort
[  684.000503][   T30] usb 13-1: new high-speed USB device number 8 using dummy_hcd
[  684.162187][   T30] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  684.165484][   T30] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  684.169203][   T30] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.173347][   T30] usb 13-1: config 0 descriptor??
[  684.287024][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805837d800: abort rx timeout. Force session deactivation
[  684.391527][   T30] usbhid 13-1:0.0: can't add hid device: -71
[  684.395650][   T30] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  684.402137][   T30] usb 13-1: USB disconnect, device number 8
[  684.582965][T15619] netlink: 'syz.3.1548': attribute type 10 has an invalid length.
[  684.728326][T15624] syz.2.1546: attempt to access beyond end of device
[  684.728326][T15624] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0
[  684.755875][T15624] XFS (nbd2): SB validate failed with error -5.
[  684.930821][   T30] usb 13-1: new high-speed USB device number 9 using dummy_hcd
[  685.082219][   T30] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  685.085453][   T30] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  685.088298][   T30] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.091634][   T30] usb 13-1: config 0 descriptor??
[  685.172794][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  685.615721][   T30] usbhid 13-1:0.0: can't add hid device: -71
[  685.643551][   T30] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  685.722582][   T30] usb 13-1: USB disconnect, device number 9
[  686.301488][T15650] qnx6: unable to read the first superblock
[  686.318704][T15649] hub 2-0:1.0: USB hub found
[  686.320327][T15649] hub 2-0:1.0: 2 ports detected
[  686.540816][   T30] usb 13-1: new high-speed USB device number 10 using dummy_hcd
[  686.692052][   T30] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.696370][   T30] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  686.704701][   T30] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.718192][   T30] usb 13-1: config 0 descriptor??
[  686.936059][   T30] usbhid 13-1:0.0: can't add hid device: -71
[  686.938498][   T30] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  686.946178][   T30] usb 13-1: USB disconnect, device number 10
[  687.321744][T15650] Set syz1 is full, maxelem 65536 reached
[  687.370822][   T30] usb 13-1: new high-speed USB device number 11 using dummy_hcd
[  687.522924][   T30] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.527598][   T30] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  687.535615][   T30] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.546931][   T30] usb 13-1: config 0 descriptor??
[  688.189140][   T30] usbhid 13-1:0.0: can't add hid device: -71
[  688.191101][   T30] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  688.196622][   T30] usb 13-1: USB disconnect, device number 11
[  688.836695][T15672] syzkaller0: entered promiscuous mode
[  688.838837][T15672] syzkaller0: entered allmulticast mode
[  689.660630][T15686] syz.3.1562: attempt to access beyond end of device
[  689.660630][T15686] nbd3: rw=4096, sector=0, nr_sectors = 2 limit=0
[  689.665601][T15686] XFS (nbd3): SB validate failed with error -5.
[  692.524692][T15785] loop9: detected capacity change from 0 to 8
[  692.539419][T15785]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  692.542313][T15785] loop9: partition table partially beyond EOD, truncated
[  692.544654][T15785] loop9: p1 size 81768186 extends beyond EOD, truncated
[  693.508492][T15802] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1578'.
[  693.508548][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1578'.
[  693.508564][T15802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1578'.
[  693.508576][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1578'.
[  693.560972][ T5980] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  693.712035][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.712061][ T5980] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  693.712074][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.712987][ T5980] usb 7-1: config 0 descriptor??
[  693.922863][ T5980] usbhid 7-1:0.0: can't add hid device: -71
[  693.922919][ T5980] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  693.928718][ T5980] usb 7-1: USB disconnect, device number 53
[  694.361006][ T6031] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  694.485680][T15811] block device autoloading is deprecated and will be removed.
[  694.511798][T15813] syzkaller0: entered promiscuous mode
[  694.514134][T15813] syzkaller0: entered allmulticast mode
[  694.530945][ T6031] usb 7-1: Using ep0 maxpacket: 32
[  694.534759][ T6031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  694.538128][ T6031] usb 7-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40
[  694.540716][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.549973][ T6031] usb 7-1: config 0 descriptor??
[  695.447175][ T6031] usbhid 7-1:0.0: can't add hid device: -71
[  695.449013][ T6031] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  695.462187][ T6031] usb 7-1: USB disconnect, device number 54
[  695.785752][T15840] binder: 15830:15840 ioctl c0306201 0 returned -14
[  696.495025][T15840] Falling back ldisc for ttyprintk.
[  696.950890][ T6031] usb 13-1: new full-speed USB device number 12 using dummy_hcd
[  697.112083][ T6031] usb 13-1: config index 0 descriptor too short (expected 26395, got 27)
[  697.114553][ T6031] usb 13-1: config 130 has 1 interface, different from the descriptor's value: 20
[  697.117286][ T6031] usb 13-1: config 130 interface 0 has no altsetting 0
[  697.121055][ T6031] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  697.123702][ T6031] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.126336][ T6031] usb 13-1: Product: syz
[  697.128036][ T6031] usb 13-1: Manufacturer: syz
[  697.129928][ T6031] usb 13-1: SerialNumber: syz
[  697.490882][ T5999] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  697.681849][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.685842][ T5999] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  697.689183][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.694203][ T5999] usb 6-1: config 0 descriptor??
[  697.745933][ T6031] usblp 13-1:130.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 245 proto 1 vid 0x0525 pid 0xA4A8
[  697.901868][ T5999] usbhid 6-1:0.0: can't add hid device: -71
[  697.904142][ T5999] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  697.907697][ T5999] usb 6-1: USB disconnect, device number 40
[  698.122810][    C3] usblp0: nonzero write bulk status received: -71
[  698.124603][T10884] usb 13-1: USB disconnect, device number 12
[  698.129330][T10884] usblp0: removed
[  698.332109][ T6031] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  698.335159][T15870] bond0: entered promiscuous mode
[  698.336685][T15870] bond_slave_0: entered promiscuous mode
[  698.338592][T15870] bond_slave_1: entered promiscuous mode
[  698.342736][ T5999] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  698.480858][ T6031] usb 6-1: Using ep0 maxpacket: 32
[  698.484358][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.487592][ T6031] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  698.490263][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.493675][ T6031] usb 6-1: config 0 descriptor??
[  698.496933][ T6031] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  698.501162][ T6031] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  699.205827][ T9453] usb 6-1: USB disconnect, device number 41
[  699.208583][ T9453] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  699.333749][T15882] lo speed is unknown, defaulting to 1000
[  699.338349][T15882] lo speed is unknown, defaulting to 1000
[  699.341215][T15882] lo speed is unknown, defaulting to 1000
[  699.385364][T15882] infiniband syz0: set active
[  699.388060][ T6028] lo speed is unknown, defaulting to 1000
[  699.389823][T15882] infiniband syz0: added lo
[  699.416431][T15882] RDS/IB: syz0: added
[  699.420404][T15882] smc: adding ib device syz0 with port count 1
[  699.423563][T15882] smc:    ib device syz0 port 1 has pnetid 
[  699.429449][ T9453] lo speed is unknown, defaulting to 1000
[  699.436406][T15882] lo speed is unknown, defaulting to 1000
[  699.477208][T15882] lo speed is unknown, defaulting to 1000
[  699.516942][T15882] lo speed is unknown, defaulting to 1000
[  699.555532][T15882] lo speed is unknown, defaulting to 1000
[  699.592981][T15882] lo speed is unknown, defaulting to 1000
[  699.630838][T15882] lo speed is unknown, defaulting to 1000
[  699.669360][T15882] lo speed is unknown, defaulting to 1000
[  700.461597][T10884] libceph: connect (1)[c::]:6789 error -101
[  700.464011][T10884] libceph: mon0 (1)[c::]:6789 connect error
[  700.687624][T15903] 9pnet_virtio: no channels available for device syz
[  700.713702][T15895] ceph: No mds server is up or the cluster is laggy
[  701.010902][ T6028] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  701.304025][ T6028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.307263][ T6028] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  701.309950][ T6028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.332283][ T6028] usb 7-1: config 0 descriptor??
[  701.513646][   T39] audit: type=1326 audit(1736569471.350:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.519755][   T39] audit: type=1326 audit(1736569471.350:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.527705][   T39] audit: type=1326 audit(1736569471.350:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.534021][   T39] audit: type=1326 audit(1736569471.350:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.540138][   T39] audit: type=1326 audit(1736569471.350:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.547766][   T39] audit: type=1326 audit(1736569471.350:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.549044][ T6028] usbhid 7-1:0.0: can't add hid device: -71
[  701.554587][   T39] audit: type=1326 audit(1736569471.350:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.561055][ T6028] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  701.564038][   T39] audit: type=1326 audit(1736569471.350:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.570069][   T39] audit: type=1326 audit(1736569471.350:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.571938][ T6028] usb 7-1: USB disconnect, device number 55
[  701.576619][   T39] audit: type=1326 audit(1736569471.350:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000
[  701.663592][T15918] ieee802154 phy0 wpan0: encryption failed: -22
[  702.080841][ T6028] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  702.262551][ T6028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.301011][ T6028] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  702.304438][ T6028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.313847][ T6028] usb 7-1: config 0 descriptor??
[  702.934607][ T6028] usbhid 7-1:0.0: can't add hid device: -71
[  702.936372][ T6028] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  702.941563][ T6028] usb 7-1: USB disconnect, device number 56
[  703.550866][ T5980] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  703.712448][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.716696][ T5980] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  703.720298][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.727842][ T5980] usb 6-1: config 0 descriptor??
[  703.901520][T15935] syzkaller0: entered promiscuous mode
[  703.903706][T15935] syzkaller0: entered allmulticast mode
[  703.943444][ T5980] usbhid 6-1:0.0: can't add hid device: -71
[  703.945258][ T5980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  703.950175][ T5980] usb 6-1: USB disconnect, device number 42
[  703.971030][T15939] 9pnet_virtio: no channels available for device syz
[  704.089905][T15940] syz.2.1613 (15940): drop_caches: 2
[  704.432212][ T5980] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  704.600897][ T5980] usb 6-1: Using ep0 maxpacket: 32
[  704.603813][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  704.607192][ T5980] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  704.609912][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.613857][ T5980] usb 6-1: config 0 descriptor??
[  704.617049][ T5980] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  704.620177][ T5980] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  705.331850][ T5980] usb 6-1: USB disconnect, device number 43
[  705.342435][ T5980] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  706.349438][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'.
[  707.220875][ T5999] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  707.303069][T15976] 
[  707.303830][T15976] ======================================================
[  707.305844][T15976] WARNING: possible circular locking dependency detected
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  707.307826][T15976] 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 Not tainted
[  707.311630][T15976] ------------------------------------------------------
[  707.314681][T15976] syz.2.1621/15976 is trying to acquire lock:
[  707.317098][T15976] ffff8880461ef170 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460
[  707.321167][T15976] 
[  707.321167][T15976] but task is already holding lock:
[  707.324192][T15976] ffff8880461eec40 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460
[  707.328800][T15976] 
[  707.328800][T15976] which lock already depends on the new lock.
[  707.328800][T15976] 
[  707.331766][T15976] 
[  707.331766][T15976] the existing dependency chain (in reverse order) is:
[  707.334564][T15976] 
[  707.334564][T15976] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  707.337224][T15976]        blk_mq_submit_bio+0x1fb6/0x24c0
[  707.338848][T15976]        __submit_bio+0x384/0x540
[  707.340296][T15976]        submit_bio_noacct_nocheck+0x698/0xd70
[  707.342078][T15976]        submit_bio_noacct+0x93a/0x1e20
[  707.343853][T15976]        mpage_readahead+0x41d/0x590
[  707.345991][T15976]        read_pages+0x1a8/0xdc0
[  707.347500][T15976]        page_cache_ra_unbounded+0x3dc/0x750
[  707.349327][T15976]        force_page_cache_ra+0x24b/0x340
[  707.350938][T15976]        page_cache_sync_ra+0x110/0x9c0
[  707.352555][T15976]        filemap_get_pages+0xd7b/0x1be0
[  707.354284][T15976]        filemap_read+0x3ca/0xd70
[  707.355759][T15976]        blkdev_read_iter+0x187/0x480
[  707.357366][T15976]        vfs_read+0x87f/0xbe0
[  707.358781][T15976]        ksys_read+0x12b/0x250
[  707.360557][T15976]        do_syscall_64+0xcd/0x250
[  707.362057][T15976]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.364188][T15976] 
[  707.364188][T15976] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}:
[  707.367405][T15976]        down_read+0x9a/0x330
[  707.369216][T15976]        page_cache_ra_unbounded+0x173/0x750
[  707.371413][T15976]        page_cache_ra_order+0x8f2/0xc80
[  707.373584][T15976]        filemap_fault+0x14a5/0x2820
[  707.375606][T15976]        __do_fault+0x10a/0x490
[  707.377137][T15976]        do_pte_missing+0x1a8/0x3e00
[  707.378949][T15976]        __handle_mm_fault+0x103c/0x2a40
[  707.381043][T15976]        handle_mm_fault+0x3fa/0xaa0
[  707.383086][T15976]        __get_user_pages+0x8d9/0x3b50
[  707.384851][T15976]        get_user_pages_unlocked+0x1c2/0x780
[  707.386638][T15976]        hva_to_pfn+0x8be/0xc20
[  707.388072][T15976]        kvm_follow_pfn+0x29f/0x3f0
[  707.389706][T15976]        __kvm_faultin_pfn+0x11c/0x1a0
[  707.391785][T15976]        kvm_mmu_faultin_pfn+0x469/0x1f30
[  707.393599][T15976]        kvm_tdp_page_fault+0x182/0x3d0
[  707.395691][T15976]        kvm_mmu_do_page_fault+0x58d/0x690
[  707.398004][T15976]        kvm_mmu_page_fault+0x20f/0x1bb0
[  707.400231][T15976]        handle_ept_violation+0x25a/0x640
[  707.402512][T15976]        vmx_handle_exit+0x733/0x1f70
[  707.404630][T15976]        vcpu_run+0x2aaf/0x4c00
[  707.406575][T15976]        kvm_arch_vcpu_ioctl_run+0x44a/0x1740
[  707.409020][T15976]        kvm_vcpu_ioctl+0x6ce/0x1520
[  707.411147][T15976]        kvm_vcpu_compat_ioctl+0x210/0x3f0
[  707.413143][T15976]        __do_compat_sys_ioctl+0x1cb/0x2c0
[  707.415381][T15976]        __do_fast_syscall_32+0x73/0x120
[  707.417280][T15976]        do_fast_syscall_32+0x32/0x80
[  707.418766][T15976]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  707.421254][T15976] 
[  707.421254][T15976] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  707.423698][T15976]        __might_fault+0x11b/0x190
[  707.425426][T15976]        _copy_from_user+0x29/0xd0
[  707.427044][T15976]        compat_blk_trace_setup+0xc9/0x200
[  707.429177][T15976]        blk_trace_ioctl+0x24a/0x290
[  707.431228][T15976]        compat_blkdev_ioctl+0x13c/0x750
[  707.433342][T15976]        __do_compat_sys_ioctl+0x1cb/0x2c0
[  707.435681][T15976]        __do_fast_syscall_32+0x73/0x120
[  707.437957][T15976]        do_fast_syscall_32+0x32/0x80
[  707.440125][T15976]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  707.442878][T15976] 
[  707.442878][T15976] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[  707.445988][T15976]        __mutex_lock+0x19b/0xa60
[  707.448007][T15976]        blk_register_queue+0x13c/0x4f0
[  707.450247][T15976]        add_disk_fwnode+0x785/0x1300
[  707.452289][T15976]        brd_alloc.isra.0+0x50a/0x7c0
[  707.454289][T15976]        brd_init+0x12b/0x1d0
[  707.456059][T15976]        do_one_initcall+0x128/0x630
[  707.458045][T15976]        kernel_init_freeable+0x58f/0x8b0
[  707.460147][T15976]        kernel_init+0x1c/0x2b0
[  707.462000][T15976]        ret_from_fork+0x45/0x80
[  707.463837][T15976]        ret_from_fork_asm+0x1a/0x30
[  707.465663][T15976] 
[  707.465663][T15976] -> #0 (&q->sysfs_lock){+.+.}-{4:4}:
[  707.468469][T15976]        __lock_acquire+0x249e/0x3c40
[  707.470329][T15976]        lock_acquire.part.0+0x11b/0x380
[  707.472439][T15976]        __mutex_lock+0x19b/0xa60
[  707.474349][T15976]        __blk_mq_update_nr_hw_queues+0x446/0x1460
[  707.476775][T15976]        blk_mq_update_nr_hw_queues+0x2a/0x40
[  707.478787][T15976]        nbd_start_device+0x15b/0xd70
[  707.480755][T15976]        nbd_ioctl+0x21a/0xfd0
[  707.482574][T15976]        compat_blkdev_ioctl+0x2f7/0x750
[  707.484688][T15976]        __do_compat_sys_ioctl+0x1cb/0x2c0
[  707.486879][T15976]        __do_fast_syscall_32+0x73/0x120
[  707.488999][T15976]        do_fast_syscall_32+0x32/0x80
[  707.490984][T15976]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  707.493017][T15976] 
[  707.493017][T15976] other info that might help us debug this:
[  707.493017][T15976] 
[  707.495842][T15976] Chain exists of:
[  707.495842][T15976]   &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#51
[  707.495842][T15976] 
[  707.499982][T15976]  Possible unsafe locking scenario:
[  707.499982][T15976] 
[  707.502135][T15976]        CPU0                    CPU1
[  707.503690][T15976]        ----                    ----
[  707.505252][T15976]   lock(&q->q_usage_counter(io)#51);
[  707.506813][T15976]                                lock(mapping.invalidate_lock#2);
[  707.509065][T15976]                                lock(&q->q_usage_counter(io)#51);
[  707.511323][T15976]   lock(&q->sysfs_lock);
[  707.512592][T15976] 
[  707.512592][T15976]  *** DEADLOCK ***
[  707.512592][T15976] 
[  707.514911][T15976] 4 locks held by syz.2.1621/15976:
[  707.516406][T15976]  #0: ffff88801e949998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0
[  707.519073][T15976]  #1: ffff88801e9498d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40
[  707.522201][T15976]  #2: ffff8880461eec40 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460
[  707.525577][T15976]  #3: ffff8880461eec78 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460
[  707.529027][T15976] 
[  707.529027][T15976] stack backtrace:
[  707.530728][T15976] CPU: 3 UID: 0 PID: 15976 Comm: syz.2.1621 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  707.533797][T15976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  707.536867][T15976] Call Trace:
[  707.537840][T15976]  <TASK>
[  707.538702][T15976]  dump_stack_lvl+0x116/0x1f0
[  707.540015][T15976]  print_circular_bug+0x41c/0x610
[  707.541458][T15976]  check_noncircular+0x31a/0x400
[  707.542960][T15976]  ? __pfx_check_noncircular+0x10/0x10
[  707.544549][T15976]  ? save_trace+0x42/0xa10
[  707.546033][T15976]  ? add_lock_to_list+0x17d/0x390
[  707.547640][T15976]  __lock_acquire+0x249e/0x3c40
[  707.549101][T15976]  ? __pfx___lock_acquire+0x10/0x10
[  707.550673][T15976]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  707.552417][T15976]  ? stack_depot_save_flags+0x36d/0x9e0
[  707.554054][T15976]  lock_acquire.part.0+0x11b/0x380
[  707.555567][T15976]  ? __blk_mq_update_nr_hw_queues+0x446/0x1460
[  707.557458][T15976]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  707.559129][T15976]  ? rcu_is_watching+0x12/0xc0
[  707.560616][T15976]  ? trace_lock_acquire+0x14e/0x1f0
[  707.562209][T15976]  ? __blk_mq_update_nr_hw_queues+0x446/0x1460
[  707.564044][T15976]  ? lock_acquire+0x2f/0xb0
[  707.565421][T15976]  ? __blk_mq_update_nr_hw_queues+0x446/0x1460
[  707.567314][T15976]  __mutex_lock+0x19b/0xa60
[  707.568693][T15976]  ? __blk_mq_update_nr_hw_queues+0x446/0x1460
[  707.570576][T15976]  ? __blk_mq_update_nr_hw_queues+0x446/0x1460
[  707.572413][T15976]  ? __pfx___mutex_lock+0x10/0x10
[  707.574161][T15976]  ? __blk_mq_update_nr_hw_queues+0x446/0x1460
[  707.576000][T15976]  __blk_mq_update_nr_hw_queues+0x446/0x1460
[  707.577847][T15976]  ? lock_acquire.part.0+0x11b/0x380
[  707.579470][T15976]  ? __mutex_trylock_common+0xea/0x250
[  707.581111][T15976]  ? __pfx___mutex_trylock_common+0x10/0x10
[  707.582862][T15976]  ? blk_mq_update_nr_hw_queues+0x20/0x40
[  707.584499][T15976]  ? rcu_is_watching+0x12/0xc0
[  707.585954][T15976]  ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10
[  707.588106][T15976]  ? __pfx___mutex_trylock_common+0x10/0x10
[  707.589863][T15976]  ? blk_mq_update_nr_hw_queues+0x20/0x40
[  707.591592][T15976]  ? __pfx___mutex_lock+0x10/0x10
[  707.593106][T15976]  ? trace_contention_end+0xee/0x140
[  707.594635][T15976]  ? __mutex_lock+0x1cc/0xa60
[  707.596132][T15976]  ? nbd_ioctl+0x151/0xfd0
[  707.597452][T15976]  ? __pfx___mutex_lock+0x10/0x10
[  707.599503][T15976]  blk_mq_update_nr_hw_queues+0x2a/0x40
[  707.601705][T15976]  nbd_start_device+0x15b/0xd70
[  707.603623][T15976]  ? bpf_lsm_capable+0x9/0x10
[  707.605497][T15976]  nbd_ioctl+0x21a/0xfd0
[  707.607138][T15976]  ? __pfx_nbd_ioctl+0x10/0x10
[  707.609090][T15976]  ? __pfx_lock_release+0x10/0x10
[  707.611062][T15976]  ? trace_lock_acquire+0x14e/0x1f0
[  707.613129][T15976]  ? __pfx_nbd_ioctl+0x10/0x10
[  707.614525][T15976]  compat_blkdev_ioctl+0x2f7/0x750
[  707.616019][T15976]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[  707.617711][T15976]  ? __fget_files+0x206/0x3a0
[  707.619087][T15976]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[  707.620731][T15976]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  707.622321][T15976]  __do_fast_syscall_32+0x73/0x120
[  707.623844][T15976]  do_fast_syscall_32+0x32/0x80
[  707.625274][T15976]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  707.627591][T15976] RIP: 0023:0xf7f37579
[  707.629239][T15976] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  707.636849][T15976] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  707.640150][T15976] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ab03
[  707.643334][T15976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  707.646416][T15976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  707.649360][T15976] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  707.652498][T15976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  707.655668][T15976]  </TASK>
[  707.680215][ T5999] usb 6-1: device descriptor read/all, error -71
[  707.711493][T15976] block nbd2: shutting down sockets
[  707.996807][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.062974][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.143643][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.193534][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.251380][   T12] team0: left allmulticast mode
[  708.252896][   T12] team_slave_0: left allmulticast mode
[  708.254476][   T12] team_slave_1: left allmulticast mode
[  708.256107][   T12] bridge0: port 3(team0) entered disabled state
[  708.258922][   T12] bridge_slave_1: left allmulticast mode
[  708.260602][   T12] bridge_slave_1: left promiscuous mode
[  708.262439][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.264948][   T12] bridge_slave_0: left allmulticast mode
[  708.266448][   T12] bridge_slave_0: left promiscuous mode
[  708.267990][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.357716][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  708.362134][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  708.365870][   T12] bond0 (unregistering): Released all slaves
[  708.599632][   T12] hsr_slave_0: left promiscuous mode
[  708.601675][   T12] hsr_slave_1: left promiscuous mode
[  708.603722][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  708.605861][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  708.608431][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  708.610605][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  708.614203][   T12] veth1_macvtap: left promiscuous mode
[  708.615923][   T12] veth0_macvtap: left promiscuous mode
[  708.617595][   T12] veth1_vlan: left promiscuous mode
[  708.619121][   T12] veth0_vlan: left promiscuous mode
[  708.807308][   T12] team_slave_1 (unregistering): left promiscuous mode
[  708.809749][   T12] team0 (unregistering): Port device team_slave_1 removed
[  708.863489][   T12] team_slave_0 (unregistering): left promiscuous mode
[  708.865826][   T12] team0 (unregistering): Port device team_slave_0 removed
[  709.524127][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.616742][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.694160][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.763013][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.840714][   T12] team0: left allmulticast mode
[  709.842804][   T12] team_slave_0: left allmulticast mode
[  709.844947][   T12] team_slave_1: left allmulticast mode
[  709.847245][   T12] bridge0: port 3(team0) entered disabled state
[  709.850873][   T12] bridge_slave_1: left allmulticast mode
[  709.853139][   T12] bridge_slave_1: left promiscuous mode
[  709.855389][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.858956][   T12] bridge_slave_0: left allmulticast mode
[  709.861395][   T12] bridge_slave_0: left promiscuous mode
[  709.863136][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.084816][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  710.087404][   T12] bond_slave_0: left promiscuous mode
[  710.089820][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  710.092692][   T12] bond_slave_1: left promiscuous mode
[  710.094762][   T12] bond0 (unregistering): Released all slaves
[  710.374932][   T12] hsr_slave_0: left promiscuous mode
[  710.377546][   T12] hsr_slave_1: left promiscuous mode
[  710.380076][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  710.383398][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  710.386540][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  710.389376][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  710.393920][   T12] veth1_macvtap: left promiscuous mode
[  710.395553][   T12] veth0_macvtap: left promiscuous mode
[  710.397160][   T12] veth1_vlan: left promiscuous mode
[  710.398675][   T12] veth0_vlan: left promiscuous mode
[  710.416338][   T12] infiniband syz0: set down
[  710.647949][   T12] team_slave_1 (unregistering): left promiscuous mode
[  710.651212][   T12] team0 (unregistering): Port device team_slave_1 removed
[  710.712348][   T12] team_slave_0 (unregistering): left promiscuous mode
[  710.714867][   T12] team0 (unregistering): Port device team_slave_0 removed
[  710.913001][   T45] smc: removing ib device syz0
[  710.921066][ T5997] lo speed is unknown, defaulting to 1000

VM DIAGNOSIS:
04:20:21  Registers:
info registers vcpu 0

CPU#0
RAX=000000000149c41c RBX=0000000000000000 RCX=ffffffff8b1a6899 RDX=ffffed1005686fee
RSI=ffffffff8bb170c0 RDI=ffffffff81703039 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20
R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cf290 R15=0000000000000000
RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f50a5da4 CR3=000000006248a000 CR4=00352ef0
DR0=0000000000000000 DR1=000000000000000a DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020800000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080000000 RBX=0000000000000004 RCX=ffffffff845d021f RDX=ffff888023de8000
RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900039d7560
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=1ffff9200073aec1 R13=ffffc900039d7a30 R14=ffffffff8d84c080 R15=dffffc0000000000
RIP=ffffffff8199477c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f5207fd3 CR3=0000000067ccc000 CR4=00352ef0
DR0=0000000000000000 DR1=000000000000000a DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080080783 RBX=0000000000000000 RCX=ffff888045769070 RDX=000000000000009d
RSI=ffffffff8656acf6 RDI=ffff888045769268 RBP=0000000000000001 RSP=ffffc90000548b70
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000a201e
R12=0000000000000001 R13=0000000000004e20 R14=ffff888045769070 R15=0000000000000001
RIP=ffffffff8656ad3d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7fd6e40 CR3=0000000021930000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7473ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85144de5 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc90025377000
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=0000000000000030 R14=ffffffff85144d80 R15=0000000000000000
RIP=ffffffff85144e0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000031fe8ffc CR3=000000004d826000 CR4=00352ef0
DR0=0000000000000000 DR1=00000000000004db DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000