last executing test programs:

8m58.315823657s ago: executing program 4 (id=264):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00')
read$FUSE(r3, &(0x7f0000000e00)={0x2020}, 0x2020)
r4 = socket$inet(0xa, 0x801, 0x84)
listen(r4, 0x8)
r5 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000180)={0x10, 0x2})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r6, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'})
listen(0xffffffffffffffff, 0x2)
r7 = socket(0x2b, 0x80801, 0x1)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="24000000130000000004000000000000000000df"], 0x14}], 0x1, 0x0, 0x0, 0x8a}, 0x400c0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r10, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB="060000000000000018"], 0x44}}, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000040)=0xf3)
connect$inet6(r7, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

8m55.843039061s ago: executing program 4 (id=265):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', <r1=>0x0, 0x7, 0x80, 0x4, 0x100, {{0x1c, 0x4, 0x3, 0x6, 0x70, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast2, @empty, {[@rr={0x7, 0x2b, 0xaf, [@remote, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010102, @empty, @rand_addr=0x64010102]}, @generic={0x82, 0x9, "800bce636f4ad2"}, @cipso={0x86, 0x24, 0x3, [{0x7, 0xa, "d950bb11bf439397"}, {0x0, 0x2}, {0x5, 0xe, "bacd968894d7cb9385cea397"}, {0x7, 0x4, 'gJ'}]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@empty, 0x1e, r1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)

8m55.594317406s ago: executing program 4 (id=268):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x400002, 0x32280)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = gettid()
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0xd, 0x8, 0x64, &(0x7f00000000c0)="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"})
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_create(0x7, &(0x7f0000000500)={0x0, 0xb, 0x1, @tid=r2}, &(0x7f0000000540))
timer_create(0x0, &(0x7f0000000700)={0x0, 0x15, 0x1, @thr={&(0x7f0000000580)="5b5addfacf9e70f4b45a9b55bc10b7f5d9d70e64c16938dd656d66a1ca68aa3a4031c5829652e9a0b53391744b163f498a8a314b5ff34e5160ef514f0da3f2358587bbd4588ced6755666e3cdff4141e1f07f0c404d0d0ba70aa672b27b498c006878865b2061ddb225947e55ede2443a0deff846d30700c07fdb37ee8e4b44cdd746d607b9411909c86bc7d0dfb52cc8420efe0cac95d87a3c5046898b5ea5ff57467f513dd4bd94092046bd7bc215c2414d3373218356ab0507dc80aa6108ae2d90fa92be1a82b", &(0x7f0000000680)="7c295eec18300c06cf448dcb5d7dda0a7fa1d499bc387df0bd91f81b606034d11864819a484778991cc456ca48ec50d4cf719a784165732fcc0e148dcc42d4e5ab436be2aaface1471fca8bd70acc0390e705d585311ac8b"}}, &(0x7f0000000780)=<r4=>0x0)
clock_gettime(0x0, &(0x7f0000000800))
clock_gettime(0x0, &(0x7f0000000880))
timer_settime(r4, 0x1, &(0x7f0000000040), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="1081", 0x2, r5)
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)

8m54.317135314s ago: executing program 4 (id=270):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn'])
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
chdir(&(0x7f00000000c0)='./file0\x00')
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x2, 0x42, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x6, 0x8, 0x0, 0x200, 0xe81d, 0xfffffff9, 0x4000, 0xd, r3, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573733d75735ffa673d5e5d5b29252624285b3a282b5c2c63616368653d6d6d61702c63616368653d6c6f6f73652c64697273796e632c7569643e", @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f686173682c636f6e746578743d73746166665f752c7365636c6162656c2c6c617a7974696d652c7375626a5f726f6c653dd92c736d61636b66736465663d616673002c726f6f74636f6e746578743d73797374656d5f752c00"])
sendmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000280)="8b33ab556fa6680510dbc873d7e45c52226c869f1e98e04a8b2579af364838859eac1969985d5d1b117f906760", 0x2d}, {&(0x7f0000000440)="fbf6aca88a6022840a4873f59cebc701ceb3f43183ef0db3ec", 0x19}, {&(0x7f0000000a80)="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", 0x1000}], 0x3, 0x0, 0x0, 0x20000000}}], 0x1, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0xf000, 0x0)

8m53.336629264s ago: executing program 4 (id=277):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00')
pread64(r0, 0x0, 0x0, 0x4eb) (async)
gettid() (async)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
read(r1, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x21, @time={0x3, 0x6a5e34f2}, 0x0, {0x0, 0x22}, 0x0, 0x0, 0x4})
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) (async)
socket(0x200000000000011, 0x4000000000080002, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async, rerun: 32)
close_range(0xffffffffffffffff, r0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x80000) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = getpid() (async)
r5 = io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x2393, 0x2, 0x2020002, 0x3a9, 0x0, r2})
io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000000280)={0x0}, 0x1)
r6 = syz_pidfd_open(r4, 0x0)
open_by_handle_at(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1)

8m50.458623402s ago: executing program 4 (id=279):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000a80)=@newqdisc={0x874, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x848, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x3, 0x3, 0x1, 0x6}, {0x7, 0x2, 0x3, 0x4, 0x2, 0x2}, 0x6, 0xdfd8f0be, 0x506}}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x4, 0x0, 0x6, 0x1, 0x55be, 0x81, 0x8, 0x4, 0x2, 0x80, 0x8, 0xfffffc00, 0xff80, 0x3, 0x1, 0x8, 0x1ff, 0x0, 0x1, 0x438d5755, 0x20004, 0xc873, 0x5, 0x83, 0x9, 0x5, 0xfffffffc, 0x8000, 0x8, 0x0, 0x6, 0x5, 0x5, 0x3, 0x2, 0x5295, 0x400, 0x5, 0x8, 0x3, 0x8, 0xffff7fff, 0x6, 0x1, 0x0, 0x5, 0xc, 0x2, 0x80000000, 0x8, 0xffff, 0x4, 0x3e9, 0x7, 0x7, 0x2371, 0x4, 0x1, 0x4, 0x8, 0xc54, 0xffffffff, 0xa, 0x0, 0x3, 0x8, 0xb, 0x2, 0x3, 0x7, 0x40, 0x7fffffff, 0x0, 0xce31, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x7, 0x3, 0x0, 0x400, 0xb, 0x6, 0x5, 0x9bc, 0xfffffffa, 0x6, 0x813b, 0x7, 0x3, 0xe5b, 0x1ff, 0x211, 0x6, 0xffffffff, 0x1, 0x2, 0x3b2d, 0x3ff, 0x26, 0xe, 0x3, 0x8, 0x4, 0x5, 0x4, 0x3, 0x1, 0x32f, 0x0, 0x5969547c, 0x8, 0x2, 0x3ff, 0xfffffaa1, 0x7ff, 0xfffffff6, 0x2, 0x0, 0x8, 0x0, 0xfffffff7, 0x7fffffff, 0x9, 0x3, 0x1, 0xfe, 0x9, 0x80000000, 0x6, 0x6d, 0x6, 0x8, 0x5cff, 0x5, 0x2, 0x6, 0x80000000, 0x1, 0x10001, 0x0, 0x7f, 0x3, 0x8, 0x0, 0xfffffff9, 0x5, 0xffffffff, 0xf, 0x1, 0x0, 0xffff, 0x0, 0x7, 0x1, 0x9, 0x8c, 0xef, 0x7ff, 0x7fff, 0x3, 0xe, 0x0, 0x0, 0x1, 0x10001, 0xae1, 0x11, 0x10000000, 0x9, 0xe5, 0x844, 0x8, 0x1, 0x1b5, 0x5, 0x8, 0x2, 0x1, 0x0, 0x9, 0x7fffffff, 0x2bc289ee, 0x80000001, 0x7, 0x5, 0x6, 0x2c, 0x9, 0xf9e, 0x5, 0x9, 0xfffffffc, 0x6, 0x3, 0x5, 0xfffffff9, 0x6, 0x2, 0x9a, 0xc801, 0x0, 0x1, 0x3, 0x800, 0x4, 0x5, 0x0, 0x5, 0x9, 0x5, 0x1, 0x4, 0xec66, 0x8007, 0xef, 0x6, 0x3800, 0x4, 0x5, 0x7ff, 0x8000, 0x10000, 0x0, 0x7, 0x5, 0x1, 0x2d, 0x313d, 0x8, 0xfffffffb, 0x0, 0x33, 0x2, 0x7fffffff, 0x5, 0x6, 0x5, 0x0, 0xa30, 0x9, 0xea, 0x7, 0x7, 0x6, 0x1, 0xad36, 0x2, 0x0, 0x9, 0x2, 0xfffffffa]}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b9}, @TCA_TBF_PTAB={0x404, 0x3, [0xb, 0x6, 0x8, 0x3, 0x1, 0x81, 0x599, 0x80000000, 0xb, 0x200, 0x3, 0x8, 0x10000, 0x50, 0xe, 0x5, 0x2, 0x51d, 0x1, 0x5, 0x8, 0xfffffffc, 0xc01f, 0xf, 0xc27, 0x6, 0xce1, 0xa, 0x6, 0x8, 0xfffffffe, 0x3, 0x9, 0x5, 0xa, 0x8, 0x3, 0x1ff, 0x8, 0xff, 0xffffffff, 0xbd6, 0x77, 0x6, 0xc80c, 0x9cf1, 0x7, 0x81, 0x3, 0x9, 0x4, 0x10001, 0x7de, 0x8, 0x2, 0xfffffffb, 0x9, 0xdb7, 0x1, 0x1, 0x80000001, 0x7, 0x6, 0x2, 0xa, 0x10001, 0x7, 0x7f, 0x8, 0xffffff80, 0x8, 0xb98, 0x0, 0x6, 0xfffffffe, 0x157, 0x7, 0x2, 0x4, 0x8, 0x1, 0x80000001, 0x10001, 0x8, 0x4, 0x8, 0x1, 0x2, 0x7, 0x8, 0x3, 0x1bff150, 0x69aa5f74, 0x6, 0x6, 0x0, 0x100, 0x0, 0x7fff, 0x20, 0x800, 0x8, 0x80, 0x858, 0x3, 0x9, 0x2, 0x30f23ee4, 0x1, 0x200, 0x3, 0x7f, 0x6, 0xfffffffe, 0x2, 0x4, 0xfffffff8, 0x100000, 0x0, 0x4, 0x9, 0xa2f, 0xfffffff5, 0x6, 0x0, 0x8001, 0x0, 0x0, 0xe, 0x4, 0xb35, 0x3ff, 0xfd, 0x6, 0x5, 0x152, 0x7, 0xd, 0x9, 0x7fff, 0x7, 0x1, 0x7, 0x7ff, 0x10, 0xfff, 0x5409, 0x0, 0xb, 0x7ff, 0x7, 0x7, 0x26d, 0x2, 0xfffffffe, 0x3, 0x2, 0x9be, 0x5, 0xff, 0x2, 0x3, 0x2, 0x14, 0x9, 0x2, 0x2, 0x0, 0xa7, 0x5, 0x400, 0x7fff, 0xc, 0x80, 0x1, 0xffdfffff, 0x8, 0x2, 0xffff8001, 0x9, 0xffff, 0x4, 0x1, 0x9, 0x3, 0x1ff, 0x9, 0x4, 0xc, 0x101, 0x80000000, 0x2, 0x10000, 0x0, 0x8, 0x10000, 0x1, 0x3, 0x2, 0x7ff, 0x0, 0x83d, 0x5, 0x0, 0x8d, 0x5, 0x8, 0x8, 0x4, 0x200, 0x3, 0x80000000, 0x7ff, 0x411, 0x4, 0x6, 0x8, 0xfffffffb, 0x5b, 0x3, 0x5, 0x3, 0x5, 0x5d, 0x2, 0x9, 0x31, 0x3550, 0x7, 0x6, 0x6, 0x8000, 0x0, 0x64d8, 0xfffffffe, 0x1, 0x48b, 0x0, 0x2, 0x200, 0x7, 0x4, 0x7, 0x99c, 0x40, 0x2, 0xbbb, 0x9, 0x8b, 0x3, 0xc, 0x5f, 0x800, 0xe, 0x4, 0x80000000]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa44f459a6d3d2abc}]}}]}, 0x874}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x67, 0xfe, 0x8, 0x4, 0x7, 0xd9, 0x0, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x1, 0x9, 0xff, 0x5}})
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000380)={0x8, 0x8})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
mlock2(&(0x7f0000818000/0x3000)=nil, 0x3000, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
madvise(&(0x7f0000591000/0x4000)=nil, 0x4000, 0x14)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c2", 0x2, 0x0, 0x8}, 0x50)
lseek(r6, 0x623, 0x4)

8m49.698315538s ago: executing program 32 (id=279):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000a80)=@newqdisc={0x874, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x848, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x3, 0x3, 0x1, 0x6}, {0x7, 0x2, 0x3, 0x4, 0x2, 0x2}, 0x6, 0xdfd8f0be, 0x506}}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x4, 0x0, 0x6, 0x1, 0x55be, 0x81, 0x8, 0x4, 0x2, 0x80, 0x8, 0xfffffc00, 0xff80, 0x3, 0x1, 0x8, 0x1ff, 0x0, 0x1, 0x438d5755, 0x20004, 0xc873, 0x5, 0x83, 0x9, 0x5, 0xfffffffc, 0x8000, 0x8, 0x0, 0x6, 0x5, 0x5, 0x3, 0x2, 0x5295, 0x400, 0x5, 0x8, 0x3, 0x8, 0xffff7fff, 0x6, 0x1, 0x0, 0x5, 0xc, 0x2, 0x80000000, 0x8, 0xffff, 0x4, 0x3e9, 0x7, 0x7, 0x2371, 0x4, 0x1, 0x4, 0x8, 0xc54, 0xffffffff, 0xa, 0x0, 0x3, 0x8, 0xb, 0x2, 0x3, 0x7, 0x40, 0x7fffffff, 0x0, 0xce31, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x7, 0x3, 0x0, 0x400, 0xb, 0x6, 0x5, 0x9bc, 0xfffffffa, 0x6, 0x813b, 0x7, 0x3, 0xe5b, 0x1ff, 0x211, 0x6, 0xffffffff, 0x1, 0x2, 0x3b2d, 0x3ff, 0x26, 0xe, 0x3, 0x8, 0x4, 0x5, 0x4, 0x3, 0x1, 0x32f, 0x0, 0x5969547c, 0x8, 0x2, 0x3ff, 0xfffffaa1, 0x7ff, 0xfffffff6, 0x2, 0x0, 0x8, 0x0, 0xfffffff7, 0x7fffffff, 0x9, 0x3, 0x1, 0xfe, 0x9, 0x80000000, 0x6, 0x6d, 0x6, 0x8, 0x5cff, 0x5, 0x2, 0x6, 0x80000000, 0x1, 0x10001, 0x0, 0x7f, 0x3, 0x8, 0x0, 0xfffffff9, 0x5, 0xffffffff, 0xf, 0x1, 0x0, 0xffff, 0x0, 0x7, 0x1, 0x9, 0x8c, 0xef, 0x7ff, 0x7fff, 0x3, 0xe, 0x0, 0x0, 0x1, 0x10001, 0xae1, 0x11, 0x10000000, 0x9, 0xe5, 0x844, 0x8, 0x1, 0x1b5, 0x5, 0x8, 0x2, 0x1, 0x0, 0x9, 0x7fffffff, 0x2bc289ee, 0x80000001, 0x7, 0x5, 0x6, 0x2c, 0x9, 0xf9e, 0x5, 0x9, 0xfffffffc, 0x6, 0x3, 0x5, 0xfffffff9, 0x6, 0x2, 0x9a, 0xc801, 0x0, 0x1, 0x3, 0x800, 0x4, 0x5, 0x0, 0x5, 0x9, 0x5, 0x1, 0x4, 0xec66, 0x8007, 0xef, 0x6, 0x3800, 0x4, 0x5, 0x7ff, 0x8000, 0x10000, 0x0, 0x7, 0x5, 0x1, 0x2d, 0x313d, 0x8, 0xfffffffb, 0x0, 0x33, 0x2, 0x7fffffff, 0x5, 0x6, 0x5, 0x0, 0xa30, 0x9, 0xea, 0x7, 0x7, 0x6, 0x1, 0xad36, 0x2, 0x0, 0x9, 0x2, 0xfffffffa]}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b9}, @TCA_TBF_PTAB={0x404, 0x3, [0xb, 0x6, 0x8, 0x3, 0x1, 0x81, 0x599, 0x80000000, 0xb, 0x200, 0x3, 0x8, 0x10000, 0x50, 0xe, 0x5, 0x2, 0x51d, 0x1, 0x5, 0x8, 0xfffffffc, 0xc01f, 0xf, 0xc27, 0x6, 0xce1, 0xa, 0x6, 0x8, 0xfffffffe, 0x3, 0x9, 0x5, 0xa, 0x8, 0x3, 0x1ff, 0x8, 0xff, 0xffffffff, 0xbd6, 0x77, 0x6, 0xc80c, 0x9cf1, 0x7, 0x81, 0x3, 0x9, 0x4, 0x10001, 0x7de, 0x8, 0x2, 0xfffffffb, 0x9, 0xdb7, 0x1, 0x1, 0x80000001, 0x7, 0x6, 0x2, 0xa, 0x10001, 0x7, 0x7f, 0x8, 0xffffff80, 0x8, 0xb98, 0x0, 0x6, 0xfffffffe, 0x157, 0x7, 0x2, 0x4, 0x8, 0x1, 0x80000001, 0x10001, 0x8, 0x4, 0x8, 0x1, 0x2, 0x7, 0x8, 0x3, 0x1bff150, 0x69aa5f74, 0x6, 0x6, 0x0, 0x100, 0x0, 0x7fff, 0x20, 0x800, 0x8, 0x80, 0x858, 0x3, 0x9, 0x2, 0x30f23ee4, 0x1, 0x200, 0x3, 0x7f, 0x6, 0xfffffffe, 0x2, 0x4, 0xfffffff8, 0x100000, 0x0, 0x4, 0x9, 0xa2f, 0xfffffff5, 0x6, 0x0, 0x8001, 0x0, 0x0, 0xe, 0x4, 0xb35, 0x3ff, 0xfd, 0x6, 0x5, 0x152, 0x7, 0xd, 0x9, 0x7fff, 0x7, 0x1, 0x7, 0x7ff, 0x10, 0xfff, 0x5409, 0x0, 0xb, 0x7ff, 0x7, 0x7, 0x26d, 0x2, 0xfffffffe, 0x3, 0x2, 0x9be, 0x5, 0xff, 0x2, 0x3, 0x2, 0x14, 0x9, 0x2, 0x2, 0x0, 0xa7, 0x5, 0x400, 0x7fff, 0xc, 0x80, 0x1, 0xffdfffff, 0x8, 0x2, 0xffff8001, 0x9, 0xffff, 0x4, 0x1, 0x9, 0x3, 0x1ff, 0x9, 0x4, 0xc, 0x101, 0x80000000, 0x2, 0x10000, 0x0, 0x8, 0x10000, 0x1, 0x3, 0x2, 0x7ff, 0x0, 0x83d, 0x5, 0x0, 0x8d, 0x5, 0x8, 0x8, 0x4, 0x200, 0x3, 0x80000000, 0x7ff, 0x411, 0x4, 0x6, 0x8, 0xfffffffb, 0x5b, 0x3, 0x5, 0x3, 0x5, 0x5d, 0x2, 0x9, 0x31, 0x3550, 0x7, 0x6, 0x6, 0x8000, 0x0, 0x64d8, 0xfffffffe, 0x1, 0x48b, 0x0, 0x2, 0x200, 0x7, 0x4, 0x7, 0x99c, 0x40, 0x2, 0xbbb, 0x9, 0x8b, 0x3, 0xc, 0x5f, 0x800, 0xe, 0x4, 0x80000000]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa44f459a6d3d2abc}]}}]}, 0x874}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x67, 0xfe, 0x8, 0x4, 0x7, 0xd9, 0x0, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x1, 0x9, 0xff, 0x5}})
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000380)={0x8, 0x8})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
mlock2(&(0x7f0000818000/0x3000)=nil, 0x3000, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
madvise(&(0x7f0000591000/0x4000)=nil, 0x4000, 0x14)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="c2", 0x2, 0x0, 0x8}, 0x50)
lseek(r6, 0x623, 0x4)

11.825837468s ago: executing program 1 (id=2206):
syz_io_uring_setup(0x28f3, &(0x7f0000000500)={0x0, 0x3, 0x1000, 0x0, 0x118}, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8})
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000240)=0x7)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, 0x0, 0x30, 0x0, @val=@perf_event={0x10001}}, 0x18)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000340)=0x9, 0x2, 0x0)
mremap(&(0x7f0000ad6000/0x2000)=nil, 0x2000, 0x1000, 0xe, &(0x7f0000150000/0x1000)=nil)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)

9.1876969s ago: executing program 3 (id=2209):
r0 = fanotify_init(0x8, 0x8001)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0)) (async)
writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={<r3=>0x0, 0x6, "32d8d38b6b6c"}, &(0x7f0000000040)=0xe)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r3, 0x7}, &(0x7f00000000c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0xae, 0x4}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

9.11429418s ago: executing program 1 (id=2210):
openat$kvm(0xffffffffffffff9c, 0x0, 0x80202, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x286}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000140), 0x1)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2143, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)

8.973167181s ago: executing program 3 (id=2211):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x104)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x168, 0x194, 0x194, 0x168, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x1c}, 0xffffffff, 0x0, 'wg0\x00', 'vlan0\x00', {0xff}, {}, 0x1d, 0x2, 0x4}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0xff000000, 0xff000000, 0x807fffff, 0xffffffff], 0x4e24, 0x4e20, 0x4e22, 0x4e22, 0xfffffffa, 0x2, 0xf, 0x433d09df, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b70500000000000000000700000000000000958f9d618f000800ddfc6aa3fc57954890259a387e0a6dc394906ae596811b37b0a4277fd3bee154e4acc26b54afe32d1443c31d515935c46af69b484c6436fd16e305bc14cbe6f13962ba42029066422bacc66cd926c0426f06f1c37aede91c8f674e1473c87062defb43ad63c2aaf88c2bdcee1ca10ca831312f58b50aaf7ff3ecd4a8224d8b277b50bd1dc3384d2ee42d866d03bfc48bcda632c870d838c89a14d879a35f59275a79231ba685301038a65c61cccc5b4d4469ec02644c1756bc8f5844341addc9de785be2c4d99dd0c0c45304c1218f34d721"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23)
ioctl$TCFLSH(r4, 0x400455c8, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x3}, 0x50)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xff)
ioctl$TIOCSTI(r4, 0x5412, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_create1(0x80000)
mkdirat(r4, &(0x7f0000000080)='./file1\x00', 0x80)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)
umount2(&(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x840000c0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x141042, 0x143)

7.881329827s ago: executing program 3 (id=2214):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r1 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000005c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
sched_getscheduler(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x5}, &(0x7f0000000100)=0x8)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0400"], 0x38}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc4, r6, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff3}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19a8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20000001)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5)
writev(r0, &(0x7f0000000880)=[{&(0x7f00000002c0)="c8", 0x1}], 0x1)
r7 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {<r8=>0x0}}, {}, {0x0, <r9=>0x80000000}, {}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000200)={{0x80000000, r8, 0x0, [0x4, 0x9]}, {r9, 0x0, 0x0, [0x8, 0xe7]}, 0x1, [0x3, 0xffffb4b5]})
pselect6(0x40, &(0x7f0000000000)={0xa71, 0x2, 0x5, 0x3, 0x2, 0x6e, 0x9, 0xd4}, &(0x7f0000000040)={0xd, 0x61, 0x9, 0x6, 0x4, 0x51, 0x8, 0x100000001}, &(0x7f0000000080)={0xffffffffffffff3d, 0x5331, 0xeea, 0x7fffffff, 0xfffffffffffffffa, 0x950, 0x10, 0xffffffffffffff80}, &(0x7f0000000100), &(0x7f0000000240)={&(0x7f0000000140)={[0x9]}, 0x8})

7.860734495s ago: executing program 5 (id=2215):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc9, 0x1}}}, 0x7)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

7.491012915s ago: executing program 5 (id=2216):
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8182, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0xa}, 0x1c)
r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
fcntl$setstatus(r1, 0x4, 0xc00)
read(r1, &(0x7f0000000080)=""/116, 0xfffffeb2)
read(r1, &(0x7f0000000280)=""/96, 0x60)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x47ba, 0x3cae, 0x40, 0x0, 0x0)

6.849011569s ago: executing program 3 (id=2217):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000ac1e000100000000000000000087000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000050ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000001000000000000007000000000000000000000000000000000080000000000004000000b86b6e000100000000000000"], 0xb8}}, 0x8004)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0)
chdir(&(0x7f0000000380)='./file1\x00')
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x210002, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0)
landlock_restrict_self(r3, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @adiantum, 0x8, @desc1})
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0)

6.848653848s ago: executing program 0 (id=2218):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x34, 0xc})
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0)
syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xd6d1, 0x80, 0x3, 0x373, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x1}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2})

6.836874634s ago: executing program 1 (id=2219):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000000540)=""/44, 0x2c}, {&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000640)=""/199, 0xc7}], 0x9, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10000)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r6=>0x0})
setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4)
bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000140)={0x1d, r6, 0x1, {0x0, 0x0, 0x4}, 0x2}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
ustat(0x11, &(0x7f0000000600))
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

6.677199578s ago: executing program 2 (id=2220):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000140)={0x4})
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac000000000901010000000000000000010000020800064000000001480002000c00028005000100210000000c00028005000100880000000c000280050001003a00000014000180080001000000000008000200ffffffff0c00028005000100210000000800034000000bd20900010073797a310000000008000340ffffffd408000640000000000100010073797a300000000018709e84f87b6c3eb86d23c008"], 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2)
pread64(r2, &(0x7f0000000700)=""/115, 0x73, 0x5)
r3 = io_uring_setup(0x2340, &(0x7f00000001c0)={0x0, 0x483a, 0x4000, 0x2, 0x385})
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xf292, 0x0, 0x4, 0xb5, 0x0, r3}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
read(r7, &(0x7f00000000c0)=""/163, 0xd0140f23)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000380)=0x76a, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x12, 0x1, {0x1}})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
close(r2)
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f00000001c0)="441f0801000000e8c94ef56491ee54", 0xf)

6.473304962s ago: executing program 5 (id=2221):
socket$netlink(0x10, 0x3, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
r1 = socket(0x10, 0x2, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x201, 0x4800003e, r2, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0xf00, 0x0)
fanotify_mark(r5, 0x1, 0x10001011, r4, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001400))
r6 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
r10 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=<r11=>0x0, &(0x7f00000001c0)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r10, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)}], 0x1}, 0x8000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}, {0x0}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0)

6.367086351s ago: executing program 3 (id=2222):
openat$6lowpan_enable(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc9, 0x1}}}, 0x7)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

5.823334555s ago: executing program 0 (id=2223):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a0a0104000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000080)
sendmsg(r0, &(0x7f0000000a40)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)="60e6bccfd7c5023c524e444ae2289a82da5fb38e363317767e8f2378d751f4e1505c994c3208bc837466f9253baa6180023254e3cf1cf9a9117ded421d79d023bb2b5c10f83f0ad50fe7ebc09e9d5eb07a1ee90ae0d43b0dcff358d73a98526faed16869329db9b67e5798d2abd5a989eda9fe231762f706e0b88bfd40c66a738ba3", 0x82}, {&(0x7f0000000400)="a1024b99f78c7d3611853dfc67733af966b4888e70970aaad858", 0x1a}, {&(0x7f0000000440)="d21bc2a10387be10ec0a8747acbe487bebd2b3f69203e162f4880955a350b6c44baf3d2b95045e2fa7b2f3da0c3828e84ecf3a6e0de197001cc0b80d9a792937ed9cb75781544ca4ab14961c74bc9ca24a4bbce7dff20ba804a31fdfb096cfddf3c2e5fa0248dbdb0d2cebf395ae000acdc3f5b839695f0bcfd239770af13cf9e55679d2e6f997bafdeeafd18154faef18f9b93f55639b363238064ace26c6fd59f219254ac99b2cb00b52aa6f2ed0caf947044d4c75af9bad54e70b54f36b284a6cae6699e29a53c90b08c89efc3650f8", 0xd1}], 0x3, &(0x7f0000000580)=[{0x110, 0x110, 0x5, "5c7a3d9b0a763088ed1846e3cc5d7915edc5613acf84e7fbefb84d9add29a4239c2477bdc734da069a9a6db04bae8b88c383884b366ac628b2dfbfafdb9d4ed59c8cd26fce77fb9c780c7d949d84551fd3e1c26d38a4dd78ce040348b855a51fb5e99e4b1e6450e93b359ce8c1109352f23466efbc92170fde325f6ba54f408c66db0c6dbdebf7bca63eb013de7f2f0c7457ef096efce10fde3e8f2ea70e9d72e54c915f86521ad3e92019e0fa14c092628e9a24bfb65844a9b40517088d9126302799db2aa1eabf012ad9feed02824bc8101f70070dd29d36ba77ffdb8d2cd0148c9ad10d078a9fc3f3e58f7c828e2e531fb6809fc5dc1771becba0"}, {0xa0, 0x84, 0x73, "bb1ea85182007d762eb15d0db704204206da5b645d9d8134404ad55a79da5af6e3db78ec383cda1e41852e57910342aafaf272a7489d1d3a5a2bedbbe9f021447f4ab16b8585263b7e9bafe9d1c57ddc55040abe5b07f8e1c37a51dc0e3af0776f5a81395a3d92a287292498b2d3edde59d33f47c019daf324c54f2890bf1ad620cb3ce6b3520d880852"}, {0x98, 0x119, 0x48, "cfe6d1bf062c340301403f85f08309b447c65b341bcbce9433b2d306e0d2ed948de9c94f2b517b400ba5e954c89c337d4a2ec97b7256c20994f66705cef9dd9d985128bbd3056b0955ae7944e663f2713c2cdbe24f8f894670e9aa92c51e078673ca283976305386bf74d26eac7b72de51a3de70c9556addc7fec1ee56ae9c5126"}, {0x80, 0x109, 0x8, "b6e6ad0ecdcb51ff3a92daa7c64f0991902f60f78c2f46468cf1ddbe2be5ddfec4fd7a6fe799538a53ab949aff4545c796215068f98183b6bc36ba60024e6af49ce7d71cd41de5a624b52160f536df2fbcf55e63fe612fc6fee7ebcc8dd98779c7838bf54ca29e76ad10869257e8cc"}, {0xf0, 0x113, 0x6, "c27c375eed67e69c2f643ebfa1a3c7932d3ed1127ccf4442cea8d8aed4fdaff97f39301f7d6fe770eea2e281e7801d2f3fe7e49350ead748c06eeb7409b109d5e93041bac63a341819ad780daa0da818c541014d1933ec08728e718fe322786c42d6e1a319590ac473bf32c719d659c25d35e7abcb6828d885b509040481ca774cf3f7559cc8299bed44b01e9cef5593f8ab84059f0376e7b5c13b3b9de0dd990b9fe1326513fc761face386bb8365fd0c91a29b43569bca655a7719d6f223277e32f8fd8a01636fe8a450e66faf3414c9eebe81455444500045"}, {0xd0, 0x113, 0x3, "eb19bba8a92d9a3d1da3b4f55578ee0f37d47aeb6ecc281387fcca6468fa76b49b6816674b009daa3da646c4c49442b43b426bf05b8a6c37a0641e18703b79c18aeb2ac67b29e66b505b27d391320c1efed74227b8afbbbd740b456d57d0a7fe6970b6142e73c0f9fc1103b7954d803194e5d4fcd2832e48f37bccaf45fa45028d58b9dd8c7b42b9563e569438106b1556ed5feb966054c0b1e2258414d975f350b4bcf074b9325432cefd3dce0ffd8b4b04cef894cae14970c5ab"}], 0x488}, 0x41)
socket$inet_tcp(0x2, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000a80)={{0x80, 0x6}, 'port0\x00', 0x72, 0x0, 0x4, 0x0, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810de})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001c8, 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = socket$netlink(0x10, 0x3, 0x15)
r5 = socket$inet6(0xa, 0x803, 0x6)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000001c0)={0x5e}, 0x8)
writev(r4, 0x0, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000001c0)=0x10001)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003980)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000003ac0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000200)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0xffff}, @void, @void, @void, @void, @void, @void, @void, @void}, 0x3a)
writev(r7, &(0x7f0000000600)=[{&(0x7f0000000400)="b27c2835115dbb927528d25f98a8d67dc8ce4308a24b983302575acbca199c7a2e50fbd340863f8f81b755e31dcb23a2592e99534048305811583e41304be71eef60fd790c414c7a25726e546549a4129d1d126a9a865e4c574b16d67234ea791114d3c8bf853201114293ed4d8042111365b434cd3a972fde4bdb099d2685a0f6896fcc569d3c83722ec2a8c0c7ad0828a1538bb104ad8f9071242de9d364ddaaaf5642294b95c74fcbc999398ec1c9e4daebe5f2", 0xb5}, {&(0x7f00000004c0)="0cb7b1c1dec1cbf84f90b738a04bb3c3dcfb1dcf42a8ca3c28830ddac37452bbb40739aa6001f211ef2a69255899593473762bbcd06c103e1ef8e639c4b63d4e474a56f288ce11e440592e9c27b12b", 0x4f}, {&(0x7f0000000540)="133be96550b44e41968d922275", 0xd}, {&(0x7f0000000580)="bd010183e42f2fea7499f9b00758ce3bf4421f421738801486abcac9308d008665818e70f19c6bc59d2ffdcb6bc95032c7eda93e9a0b973a96ed78249a7f06f2f6a2b294f3f90bc751812e4967e0d2ae7cbaa91700d75c27b611bd8b46c2025f19434641b7f47bbd90ed88171a4fb3a1b8", 0x71}], 0x4)

5.661427027s ago: executing program 1 (id=2224):
syz_usb_connect(0x0, 0x34, &(0x7f0000001dc0)={{0x12, 0x1, 0x0, 0x4e, 0x2a, 0xa6, 0x10, 0x582, 0x87d1, 0xf8e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x56, 0x65, 0x0, [@generic={0x7, 0x0, "e5c922b9b5"}], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x67c, 0x2ca000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080)=[<r3=>0x0]})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={r2, 0x0, r3, 0x100, 0xfffffff8, 0x5, 0x200, 0x40, 0x3, 0x29d, 0xfffffff1, 0x5})
syz_usb_connect(0x0, 0x34, &(0x7f0000001dc0)={{0x12, 0x1, 0x0, 0x4e, 0x2a, 0xa6, 0x10, 0x582, 0x87d1, 0xf8e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x56, 0x65, 0x0, [@generic={0x7, 0x0, "e5c922b9b5"}], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0) (async)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000300), 0x67c, 0x2ca000) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) (async)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={r2, 0x0, r3, 0x100, 0xfffffff8, 0x5, 0x200, 0x40, 0x3, 0x29d, 0xfffffff1, 0x5}) (async)

5.52598074s ago: executing program 3 (id=2225):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01020301090224000100001000000202000a090582020002000110"], 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
setuid(r3)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

5.462406634s ago: executing program 2 (id=2226):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc9, 0x1}}}, 0x7)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

5.034495156s ago: executing program 33 (id=2225):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01020301090224000100001000000202000a090582020002000110"], 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
setuid(r3)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

4.969295373s ago: executing program 2 (id=2228):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0281, 0x0)
r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x191)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}]}})
chmod(&(0x7f0000000180)='./file0\x00', 0x35e)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r4, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/68, 0x44}, 0x8}], 0x1, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b)
sendfile(r3, r1, 0x0, 0x4000000053d2)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0xa, 0xc, {0xc, 0x6, "0a5d9e6d6c149bbe536b"}}, 0x0, 0x0, 0x0}, 0x0)

4.968935556s ago: executing program 5 (id=2229):
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x107382)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r0, 0x1, {0x0, 0x0, 0x0, 0xffffffffffffff86, 0x7, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2984fcaf1860b3b61f8e2078de86be39f1bb99370491de6bb2c742bcf61f316c63790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ccfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca0206d8b02266a0443e8ae6", [0x3b, 0x4]}})
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='vm_unmapped_area\x00', r4}, 0x18)
socket$kcm(0x2, 0x200000000000001, 0x106)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, &(0x7f0000000000))

4.740205315s ago: executing program 1 (id=2230):
semctl$IPC_RMID(0x0, 0x0, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)={0x5, 0xc, [0xa0, 0x10001, 0xf4f]})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r2, 0x0, 0x20)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x9b)
pipe2$9p(0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)
sendmsg$inet6(r5, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000"], 0x30}, 0x0)
r6 = memfd_create(0x0, 0x7)
dup(r6)
fanotify_init(0x2, 0x40000)
r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000000)=0x1)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x18, 0x2d, 0x9c, 0x10, 0x930, 0xa13, 0x7644, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x2, 0x2, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)

4.011244877s ago: executing program 0 (id=2231):
ioperm(0xbf, 0x9, 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffc}]}, 0x3c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4008080)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f00000025c0)='9', 0x1}, {&(0x7f0000000200)='_', 0x1}], 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c54d08004500004c00000000040690780a010102ac1414aa00010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000907800001312b3e480a7613088fd71106c027deb3b1113126ff10ff662227a1ee386aead7cbb04f5"], 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000000)={0x46e, 0x1})
r8 = socket(0x10, 0x3, 0x0)
sendto$inet6(r8, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
socket$nl_generic(0x10, 0x3, 0x10)

1.953078375s ago: executing program 0 (id=2232):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000200)=0x3, 0x4)
unshare(0x22020400)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200000d4)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5, 0x0, 0x2}, 0x18)
sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x56)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18)
sendmmsg$inet6(r2, &(0x7f0000000100)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000240)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)
syz_open_pts(0xffffffffffffffff, 0xc8c41)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004508004800000000000690780a010100ac14140000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d0000000907800001d0df989140df1ca4bfa8dd9754ba6ea319914c2130000"], 0x0)

1.841983729s ago: executing program 2 (id=2233):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r0, 0x0, 0x4}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r1, 0x0, 0x4}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r2=>0x0)
bind$nfc_llcp(r1, &(0x7f0000000200)={0x27, r2, 0x0, 0x2, 0x49, 0x5, "58aa11f5fa53f2a7c8447b2eca9fa391917988fd04596a1356e8f1c52c7d8d9d6940fa6586f4358e110d144fe444864449537bad165b8bfa21295ae068f860", 0x10}, 0x60)

1.652663837s ago: executing program 5 (id=2234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(r2, 0x0, 0x0, 0x3)
socket(0x1e, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x402, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r7, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

438.290954ms ago: executing program 5 (id=2235):
openat$6lowpan_enable(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc9, 0x1}}}, 0x7)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

315.818144ms ago: executing program 2 (id=2236):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_vmscan_kswapd_wake\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=<r2=>0x0)
ptrace$pokeuser(0x6, r2, 0x2, 0x9)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03000000c310060020b460000000000000697400140002a008000300ac141400da612b94f39887b6"], 0x40}}, 0x0)

273.443519ms ago: executing program 0 (id=2237):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc9, 0x1}}}, 0x7)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

262.559023ms ago: executing program 1 (id=2238):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c81, 0x2)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r5, 0x325, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x1, 0xf}, @void, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x11}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x20000}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r7 = dup(r4)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000000300000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000000000749ed3380012000000000000009500"/40], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$FUSE_DIRENT(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
chdir(&(0x7f0000000100)='./file0\x00')
utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
write$cgroup_pid(r1, &(0x7f0000000400), 0x12)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_procs(r10, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000000380), 0x12)
sendfile(r11, r11, 0x0, 0xb4)

65.235635ms ago: executing program 0 (id=2239):
syz_open_dev$usbmon(&(0x7f0000000280), 0xb, 0x1a300)
socket$netlink(0x10, 0x3, 0xb)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080))
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000000)={&(0x7f00006e3000/0x3000)=nil, 0x3000})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa0}}, 0x0)
mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x6}, 0x18)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0})

0s ago: executing program 2 (id=2240):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) (async)
clock_gettime(0x6, &(0x7f0000000240)) (async)
sched_setscheduler(0x0, 0x6, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone(0xa2264400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
pidfd_send_signal(r5, 0x12, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b303d0e8b089b0732306c090890e0879b0a0a5de70a9b3361959b4b9a240d5b0af3988f7ef31952013fffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193432f6ad916c3ae52dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d10b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f157cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4a7997d7a50502c56845651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fae2ae999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0600becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4d01009644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113cb415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4a05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a51fab86bea9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c00188008000240000000000800014000000000080003"], 0xa4}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) (async)
sched_setscheduler(0x0, 0x1, 0x0) (async)
sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000180)=0x8) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03ba3341aa2576cb00007be04a01001d02000008002e381e1b35ee39e514d600732f55080000"], 0x36)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345}) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d696f200672646d61202d6370756163637420b370696468202b6d656d6f7279202b64757669636573202d646576696365"], 0x4c)

kernel console output (not intermixed with test programs):

terface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.338003][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  511.347363][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.359273][   T10] usb 3-1: config 0 descriptor??
[  511.367747][   T10] hub 3-1:0.0: USB hub found
[  511.567162][   T10] hub 3-1:0.0: 1 port detected
[  511.670146][ T5923] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0
[  511.679039][ T5923] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0
[  511.697598][ T5923] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0
[  511.706096][ T5923] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0
[  511.713872][ T5923] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0
[  511.736756][ T5923] waterforce 0003:1044:7A4D.000B: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.5-1/input0
[  511.819010][ T5923] waterforce 0003:1044:7A4D.000B: fw version request failed with -38
[  511.871639][T11152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.894297][T11152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.915455][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1344'.
[  511.987982][   T24] usb 6-1: USB disconnect, device number 46
[  512.003899][ T5828] usb 3-1: USB disconnect, device number 43
[  512.174846][ T5923] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  512.321617][T11177] lo: entered promiscuous mode
[  512.335462][T11177] lo: entered allmulticast mode
[  512.424803][T11184] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1354'.
[  512.614729][T11185] overlayfs: missing 'lowerdir'
[  513.310149][T11183] ALSA: mixer_oss: invalid OSS volume ''
[  513.311108][  T977] usbhid 2-1:0.0: can't add hid device: -71
[  513.361563][  T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  513.400448][  T977] usb 2-1: USB disconnect, device number 50
[  513.429075][T11184] bond0 (unregistering): left promiscuous mode
[  513.447260][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1357'.
[  513.457070][T11184] bond_slave_0: left promiscuous mode
[  513.465307][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1357'.
[  513.475368][T11184] bond_slave_1: left promiscuous mode
[  513.481752][T11184] bond0 (unregistering): left allmulticast mode
[  513.488768][T11184] bond_slave_0: left allmulticast mode
[  513.494580][T11184] bond_slave_1: left allmulticast mode
[  513.505294][T11184] team0: Port device bond0 removed
[  513.522995][T11184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  513.539834][T11184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  513.576056][T11184] bond0 (unregistering): Released all slaves
[  513.852530][T11186] ipvlan0: entered allmulticast mode
[  513.888577][T11186] veth0_vlan: entered allmulticast mode
[  514.377339][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'.
[  516.290741][T11244] bridge0: port 3(team0) entered disabled state
[  516.442579][T11244] bridge_slave_0: left allmulticast mode
[  516.458551][T11244] bridge_slave_0: left promiscuous mode
[  516.464473][T11244] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.498225][ T5828] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  516.513707][T11244] bridge_slave_1: left allmulticast mode
[  516.519833][T11244] bridge_slave_1: left promiscuous mode
[  516.541241][T11244] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.582010][T11244] bond0: (slave veth0_to_bond): Releasing active interface
[  516.740547][T11244] team_slave_0: left promiscuous mode
[  516.746594][T11244] team_slave_0: left allmulticast mode
[  516.814806][ T5828] usb 4-1: config 0 has an invalid interface number: 9 but max is 0
[  516.845119][T11244] team0: Port device team_slave_0 removed
[  516.861761][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  516.864414][T11244] team_slave_1: left promiscuous mode
[  516.887643][ T5828] usb 4-1: config 0 has no interface number 0
[  516.898359][ T5828] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8
[  516.911770][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.918210][T11244] team_slave_1: left allmulticast mode
[  516.927227][ T5828] usb 4-1: config 0 descriptor??
[  516.950171][ T5828] rndis_host 4-1:0.9: More than one union descriptor, skipping ...
[  516.959299][ T5828] usb 4-1: bad CDC descriptors
[  516.964900][ T5828] cdc_acm 4-1:0.9: More than one union descriptor, skipping ...
[  516.966597][T11244] team0: Port device team_slave_1 removed
[  517.001564][T11244] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  517.038144][T11244] batman_adv: batadv0: Removing interface: batadv_slave_0
[  517.056562][T11244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  517.075482][T11244] batman_adv: batadv0: Removing interface: batadv_slave_1
[  517.187849][ T5828] usb 4-1: USB disconnect, device number 48
[  517.409741][T11274] program syz.2.1372 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  520.647676][ T5923] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  520.818975][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  520.850118][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.889992][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  520.916715][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  520.930255][ T5923] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  520.956861][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  520.989483][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  521.008102][ T5923] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  521.051861][ T5923] usb 2-1: Manufacturer: syz
[  521.084015][ T5923] usb 2-1: config 0 descriptor??
[  521.797465][ T5923] rc_core: IR keymap rc-hauppauge not found
[  521.810098][ T5923] Registered IR keymap rc-empty
[  521.886716][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.011900][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.190354][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  522.231939][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26
[  522.329544][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.391112][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.441659][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.477663][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.510067][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.584887][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.637632][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.679999][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.727513][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.758002][ T5923] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.812520][ T5923] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  522.865728][ T5923] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  523.319204][ T5923] usb 2-1: USB disconnect, device number 51
[  524.999997][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'.
[  525.815040][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'.
[  526.126562][T11366] netlink: 'syz.1.1400': attribute type 2 has an invalid length.
[  528.244925][   T30] audit: type=1326 audit(2000000134.637:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11390 comm="syz.0.1410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x0
[  529.906392][T11414] loop2: detected capacity change from 0 to 7
[  530.186769][T11414]  loop2: p1
[  530.259874][T11414] loop2: partition table partially beyond EOD, truncated
[  530.415839][T11414] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  531.080898][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.174247][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.743955][ T5923] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  531.946587][T11441] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  531.975286][ T5923] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  532.017366][ T5923] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  532.576594][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  532.586288][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.598226][ T5923] usb 6-1: Product: syz
[  532.602476][ T5923] usb 6-1: Manufacturer: syz
[  532.607763][ T5923] usb 6-1: SerialNumber: syz
[  532.639949][T11452] netlink: 'syz.3.1424': attribute type 4 has an invalid length.
[  532.650791][T11452] netlink: 'syz.3.1424': attribute type 5 has an invalid length.
[  532.752317][T11457] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1426'.
[  532.767085][T11452] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1424'.
[  533.669122][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.734916][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.781302][ T5923] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  533.887229][ T5923] usb 6-1: USB disconnect, device number 47
[  534.592057][ T5828] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  534.707139][   T30] audit: type=1326 audit(2000000141.077:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  535.245009][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  535.256814][ T5923] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[  535.290021][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  535.301157][   T30] audit: type=1326 audit(2000000141.077:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  535.334539][ T5828] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  535.358897][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.386896][   T30] audit: type=1326 audit(2000000141.207:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  535.408694][    C0] vkms_vblank_simulate: vblank timer overrun
[  535.416925][ T5828] usb 3-1: config 0 descriptor??
[  535.792328][   T30] audit: type=1326 audit(2000000141.207:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  535.874906][ T5828] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[  535.915366][ T5828] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  535.916644][   T30] audit: type=1326 audit(2000000141.207:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  536.031579][   T30] audit: type=1326 audit(2000000141.247:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  536.190588][   T30] audit: type=1326 audit(2000000141.587:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  536.320067][   T30] audit: type=1326 audit(2000000141.587:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  536.342118][    C0] vkms_vblank_simulate: vblank timer overrun
[  536.389096][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1438'.
[  536.847450][   T30] audit: type=1326 audit(2000000141.627:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  537.064397][   T30] audit: type=1326 audit(2000000141.627:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4a78eb69 code=0x7ffc0000
[  537.327084][ T5828] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x4D
[  537.511269][ T5828] cp2112 0003:10C4:EA90.000C: error requesting SMBus config
[  537.533378][ T5828] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -71
[  537.572789][ T5828] usb 3-1: USB disconnect, device number 44
[  538.116688][   T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  538.563356][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  538.594626][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  538.613580][   T10] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  538.639620][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.670193][   T10] usb 6-1: config 0 descriptor??
[  538.716707][ T5828] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  538.794007][T11544] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1444'.
[  539.630722][ T5932] usb 6-1: USB disconnect, device number 49
[  539.640244][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9
[  540.178538][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8195, setting to 1024
[  540.189890][ T5828] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  540.199523][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.215647][ T5828] usb 3-1: config 0 descriptor??
[  541.486757][T11543] ALSA: mixer_oss: invalid OSS volume ''
[  541.928439][ T5828] usbhid 3-1:0.0: can't add hid device: -71
[  541.934812][ T5828] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  542.007602][ T5828] usb 3-1: USB disconnect, device number 45
[  542.299373][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'.
[  543.842343][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'.
[  544.176433][ T5828] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  544.386257][ T5828] usb 6-1: Using ep0 maxpacket: 32
[  544.404139][ T5828] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  544.436574][ T5828] usb 6-1: config 0 has no interface number 0
[  544.466734][ T5828] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  544.498356][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.515934][ T5828] usb 6-1: Product: syz
[  544.540062][ T5828] usb 6-1: Manufacturer: syz
[  544.544925][ T5828] usb 6-1: SerialNumber: syz
[  545.074253][ T5828] usb 6-1: config 0 descriptor??
[  545.148847][ T5828] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  545.196159][ T5828] usb 6-1: selecting invalid altsetting 1
[  545.242643][ T5828] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  545.289155][ T5828] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  545.355814][ T5828] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  545.491790][ T5828] usb 6-1: media controller created
[  545.521410][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  545.618356][ T5828] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  545.636915][ T5828] zl10353_read_register: readreg error (reg=127, ret==-32)
[  545.648466][ T5828] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  545.678668][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'.
[  545.836608][ T5828] usb 6-1: USB disconnect, device number 50
[  546.364732][T11659] trusted_key: encrypted_key: insufficient parameters specified
[  547.556820][T11674] FAULT_INJECTION: forcing a failure.
[  547.556820][T11674] name failslab, interval 1, probability 0, space 0, times 1
[  547.569748][T11674] CPU: 1 UID: 0 PID: 11674 Comm: syz.5.1473 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  547.569775][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  547.569787][T11674] Call Trace:
[  547.569796][T11674]  <TASK>
[  547.569805][T11674]  dump_stack_lvl+0x189/0x250
[  547.569832][T11674]  ? __pfx____ratelimit+0x10/0x10
[  547.569854][T11674]  ? __pfx_dump_stack_lvl+0x10/0x10
[  547.569878][T11674]  ? __pfx__printk+0x10/0x10
[  547.569910][T11674]  ? __pfx___might_resched+0x10/0x10
[  547.569931][T11674]  ? fs_reclaim_acquire+0x7d/0x100
[  547.569962][T11674]  should_fail_ex+0x414/0x560
[  547.569989][T11674]  should_failslab+0xa8/0x100
[  547.570014][T11674]  __kmalloc_noprof+0xcb/0x4f0
[  547.570031][T11674]  ? kfree+0x4d/0x440
[  547.570057][T11674]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  547.570090][T11674]  tomoyo_realpath_from_path+0xe3/0x5d0
[  547.570118][T11674]  ? tomoyo_domain+0xda/0x130
[  547.570150][T11674]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  547.570171][T11674]  tomoyo_path_number_perm+0x1e8/0x5a0
[  547.570196][T11674]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  547.570238][T11674]  ? __lock_acquire+0xab9/0xd20
[  547.570281][T11674]  ? __fget_files+0x2a/0x420
[  547.570306][T11674]  ? __fget_files+0x2a/0x420
[  547.570327][T11674]  ? __fget_files+0x3a0/0x420
[  547.570348][T11674]  ? __fget_files+0x2a/0x420
[  547.570375][T11674]  security_file_ioctl+0xcb/0x2d0
[  547.570400][T11674]  __se_sys_ioctl+0x47/0x170
[  547.570441][T11674]  do_syscall_64+0xfa/0x3b0
[  547.570461][T11674]  ? lockdep_hardirqs_on+0x9c/0x150
[  547.570482][T11674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.570502][T11674]  ? clear_bhb_loop+0x60/0xb0
[  547.570526][T11674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.570545][T11674] RIP: 0033:0x7fae8d38eb69
[  547.570562][T11674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  547.570580][T11674] RSP: 002b:00007fae8e13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  547.570601][T11674] RAX: ffffffffffffffda RBX: 00007fae8d5b6160 RCX: 00007fae8d38eb69
[  547.570616][T11674] RDX: 0000200000001440 RSI: 0000000050009405 RDI: 0000000000000005
[  547.570630][T11674] RBP: 00007fae8e13b090 R08: 0000000000000000 R09: 0000000000000000
[  547.570642][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  547.570654][T11674] R13: 0000000000000000 R14: 00007fae8d5b6160 R15: 00007fffd6a74408
[  547.570688][T11674]  </TASK>
[  547.570695][T11674] ERROR: Out of memory at tomoyo_realpath_from_path.
[  548.655684][T11684] net_ratelimit: 10 callbacks suppressed
[  548.655705][T11684] openvswitch: netlink: Tunnel attr 16 has unexpected len 12 expected 0
[  548.679829][T11684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.773436][ T5923] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  548.957610][ T5923] usb 3-1: device descriptor read/64, error -71
[  549.496460][ T5923] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  549.510138][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1479'.
[  549.633746][T11705] kAFS: unparsable volume name
[  549.659075][ T5923] usb 3-1: device descriptor read/64, error -71
[  549.686210][   T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  549.786413][ T5923] usb usb3-port1: attempt power cycle
[  550.145892][ T5923] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  550.202893][ T5923] usb 3-1: device descriptor read/8, error -71
[  550.218841][   T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  550.465552][   T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  550.514123][ T5923] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  550.576165][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.698796][   T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  550.712893][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.725142][   T24] usb 4-1: config 0 descriptor??
[  550.740115][   T24] cp210x 4-1:0.0: cp210x converter detected
[  550.772168][ T5923] usb 3-1: device descriptor read/8, error -71
[  550.795015][   T10] usb 2-1: config 0 descriptor??
[  550.810658][   T10] gspca_main: cpia1-2.14.0 probing 0813:0001
[  550.964952][ T5923] usb usb3-port1: unable to enumerate USB device
[  551.005154][   T10] gspca_cpia1: usb_control_msg 05, error -71
[  551.013041][   T10] gspca_cpia1: usb_control_msg 01, error -71
[  551.024102][   T10] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  551.035212][   T10] usb 2-1: USB disconnect, device number 52
[  551.339245][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  551.365451][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.485372][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'.
[  551.544716][   T24] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  552.514477][   T24] usb 4-1: cp210x converter now attached to ttyUSB0
[  552.708064][   T10] usb 4-1: USB disconnect, device number 49
[  552.803689][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  552.922065][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'.
[  552.949420][   T10] cp210x 4-1:0.0: device disconnected
[  553.395933][  T977] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  553.585680][  T977] usb 3-1: Using ep0 maxpacket: 32
[  553.660083][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.882526][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.075056][  T977] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  554.275032][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.330718][T11766] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1500'.
[  554.491391][T11766] syzkaller0: entered allmulticast mode
[  554.524822][T11766] syzkaller0: entered promiscuous mode
[  555.054493][  T977] usb 3-1: config 0 descriptor??
[  555.096929][T11768] netlink: 'syz.3.1500': attribute type 1 has an invalid length.
[  555.104857][T11768] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1500'.
[  555.616235][  T977] usbhid 3-1:0.0: can't add hid device: -71
[  555.642351][T11762] syzkaller0: left promiscuous mode
[  555.648388][  T977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  555.656745][T11762] syzkaller0: left allmulticast mode
[  555.666163][  T977] usb 3-1: USB disconnect, device number 50
[  556.674768][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'.
[  558.119394][ T5923] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  558.287147][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  558.306801][ T5923] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  558.314964][ T5923] usb 4-1: config 0 has no interface number 0
[  558.330326][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'.
[  558.369381][ T5923] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  558.378970][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.398990][ T5923] usb 4-1: Product: syz
[  558.403245][ T5923] usb 4-1: Manufacturer: syz
[  558.420817][ T5923] usb 4-1: SerialNumber: syz
[  558.438820][ T5923] usb 4-1: config 0 descriptor??
[  558.459066][ T5923] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  558.485395][ T5923] usb 4-1: selecting invalid altsetting 1
[  558.491295][ T5923] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  558.514827][ T5923] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  558.550351][ T5923] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  558.575453][ T5923] usb 4-1: media controller created
[  558.676928][T11800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.706029][T11800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.780642][T11800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.839611][T11800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.862382][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  558.915978][ T5923] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  558.990109][T11838] netlink: 'syz.5.1516': attribute type 2 has an invalid length.
[  559.884793][ T5923] zl10353_read_register: readreg error (reg=127, ret==-71)
[  559.902203][ T5923] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  561.807101][ T5923] usb 4-1: USB disconnect, device number 50
[  562.799378][T11850] fuse: Bad value for 'fd'
[  563.242340][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  564.035221][ T5828] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  564.205415][ T5828] usb 3-1: device descriptor read/64, error -71
[  564.561157][ T5828] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  565.038531][ T5828] usb 3-1: device descriptor read/64, error -71
[  565.177935][ T5828] usb usb3-port1: attempt power cycle
[  565.395014][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'.
[  565.424549][T11876] netlink: 'syz.1.1525': attribute type 4 has an invalid length.
[  565.470554][T11879] netlink: 'syz.1.1525': attribute type 4 has an invalid length.
[  566.447689][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'.
[  566.573589][T11876] xt_CT: No such helper "pptp"
[  566.600187][ T5828] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  566.641302][ T5828] usb 3-1: device descriptor read/8, error -71
[  567.094962][ T5828] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  567.164064][ T5828] usb 3-1: config 7 has an invalid interface number: 101 but max is 0
[  567.181882][ T5828] usb 3-1: config 7 has no interface number 0
[  567.209844][ T5828] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  567.220179][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.231861][ T5828] usb 3-1: Product: syz
[  567.238794][ T5828] usb 3-1: Manufacturer: syz
[  567.244100][ T5828] usb 3-1: SerialNumber: syz
[  567.385269][ T5932] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  567.562635][ T5932] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  567.612515][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.696898][ T5932] usb 2-1: config 0 descriptor??
[  567.741118][ T5932] cp210x 2-1:0.0: cp210x converter detected
[  567.995394][ T5828] as10x_usb: device has been detected
[  568.037370][ T5828] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  568.157488][ T5932] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  568.212976][ T5932] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121
[  568.250763][ T5828] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  568.283889][ T5932] cp210x 2-1:0.0: GPIO initialisation failed: -121
[  568.541204][ T5828] as10x_usb: error during firmware upload part1
[  568.548638][ T5932] usb 2-1: cp210x converter now attached to ttyUSB0
[  568.581004][ T5828] Registered device Elgato EyeTV DTT Deluxe
[  568.593502][ T5932] usb 2-1: USB disconnect, device number 53
[  568.625194][ T5828] usb 3-1: USB disconnect, device number 54
[  568.853551][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  568.891229][ T5932] cp210x 2-1:0.0: device disconnected
[  568.982879][ T5828] Unregistered device Elgato EyeTV DTT Deluxe
[  568.997537][ T5828] as10x_usb: device has been disconnected
[  569.800180][ T5932] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  570.055074][ T5932] usb 6-1: Using ep0 maxpacket: 16
[  570.069382][ T5932] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  570.093693][ T5932] usb 6-1: config 1 interface 0 has no altsetting 0
[  570.094989][   T10] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  570.127498][ T5932] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  570.128180][T11961] netlink: 'syz.3.1548': attribute type 1 has an invalid length.
[  570.146276][T11961] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1548'.
[  570.150314][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  570.159677][T11961] netlink: 'syz.3.1548': attribute type 2 has an invalid length.
[  570.172408][ T5932] usb 6-1: SerialNumber: syz
[  570.173857][T11961] netlink: 'syz.3.1548': attribute type 1 has an invalid length.
[  570.204101][ T5932] hub 6-1:1.0: bad descriptor, ignoring hub
[  570.223168][ T5932] hub 6-1:1.0: probe with driver hub failed with error -5
[  570.245024][   T10] usb 3-1: device descriptor read/64, error -71
[  570.360818][T11965] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  570.419759][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1550'.
[  570.495112][   T10] usb 3-1: new low-speed USB device number 56 using dummy_hcd
[  570.541939][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.568254][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  570.625707][   T10] usb 3-1: device descriptor read/64, error -71
[  570.665026][ T5923] usb 6-1: USB disconnect, device number 51
[  570.739133][   T10] usb usb3-port1: attempt power cycle
[  571.325774][T11980] loop2: detected capacity change from 0 to 7
[  571.333436][T11980]  loop2: p1
[  571.341468][T11980] loop2: partition table partially beyond EOD, truncated
[  571.349052][T11980] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  571.572824][T11982] binder_alloc: binder_alloc_mmap_handler: 11981 200000ffd000-200001000000 already mapped failed -16
[  571.664136][T11983] binder: BINDER_SET_CONTEXT_MGR already set
[  571.686101][T11983] binder: 11981:11983 ioctl 4018620d 200000000280 returned -16
[  572.035426][   T10] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[  572.055214][   T10] usb 3-1: device descriptor read/8, error -71
[  572.059464][T11996] overlayfs: failed to clone upperpath
[  572.088894][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1559'.
[  572.304749][   T10] usb 3-1: new low-speed USB device number 58 using dummy_hcd
[  572.335401][   T10] usb 3-1: device descriptor read/8, error -71
[  572.467529][   T10] usb usb3-port1: unable to enumerate USB device
[  573.706977][T12014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1565'.
[  573.820613][T12018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1565'.
[  574.457797][T12014] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9)
[  574.743939][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'.
[  574.754787][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'.
[  574.772446][T12041] veth1_macvtap: left promiscuous mode
[  574.862274][T12046] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  575.029185][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1572'.
[  575.036994][T12046] netlink: 'syz.3.1573': attribute type 11 has an invalid length.
[  575.823843][T12055] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  575.896578][T12058] vlan2: entered promiscuous mode
[  575.903095][T12058] macvtap0: entered promiscuous mode
[  576.690060][T12083] netlink: 'syz.2.1582': attribute type 2 has an invalid length.
[  576.698399][T12083] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1582'.
[  576.728120][T12083] netlink: 'syz.2.1582': attribute type 2 has an invalid length.
[  576.749649][T12083] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1582'.
[  576.862065][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'.
[  578.189262][T12106] bond0: entered promiscuous mode
[  578.195991][T12106] bond0: entered allmulticast mode
[  578.201923][T12106] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.644840][   T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  578.806387][   T10] usb 4-1: Using ep0 maxpacket: 32
[  578.822315][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a
[  578.847203][   T10] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  578.869385][   T10] usb 4-1: Product: syz
[  579.737942][   T10] usb 4-1: config 0 descriptor??
[  579.825496][   T10] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  579.840520][   T10] gspca_stv06xx: st6422 sensor detected
[  579.848026][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'.
[  579.963020][T12140] loop2: detected capacity change from 0 to 7
[  579.981650][T12140]  loop2: p1
[  580.000086][T12140] loop2: partition table partially beyond EOD, truncated
[  580.014353][T12140] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  580.142249][   T10] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71
[  580.152853][   T10] usb 4-1: USB disconnect, device number 51
[  580.369099][T12155] netlink: 'syz.5.1603': attribute type 7 has an invalid length.
[  580.725198][   T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  581.183959][   T10] usb 2-1: Using ep0 maxpacket: 16
[  581.875765][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.967982][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  582.083704][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  582.206006][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  582.272950][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  582.338487][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  582.357106][   T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  582.433467][T12177] 8021q: VLANs not supported on gre0
[  582.445286][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'.
[  582.495564][   T10] usb 2-1: Manufacturer: syz
[  582.505337][   T10] usb 2-1: config 0 descriptor??
[  582.545136][ T5932] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  582.590389][T12183] netlink: 'syz.0.1612': attribute type 3 has an invalid length.
[  582.736878][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short
[  582.761423][ T5932] usb 4-1: config 6 has an invalid interface number: 200 but max is 0
[  583.295631][T12177] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  583.726381][ T5932] usb 4-1: config 6 has no interface number 0
[  583.732975][ T5932] usb 4-1: config 6 interface 200 has no altsetting 0
[  583.745808][ T5932] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  583.756490][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.764697][ T5932] usb 4-1: Product: syz
[  583.769143][ T5932] usb 4-1: Manufacturer: syz
[  583.773955][ T5932] usb 4-1: SerialNumber: syz
[  584.944063][   T10] rc_core: IR keymap rc-hauppauge not found
[  584.954572][   T10] Registered IR keymap rc-empty
[  584.959654][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  585.003899][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  585.029648][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  585.103891][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27
[  585.136261][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  585.178253][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  585.195244][ T5932] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  585.221058][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  585.226162][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  585.243634][ T5932] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  585.260460][ T5932] usb 4-1: media controller created
[  585.279913][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  585.320591][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  585.324314][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  585.348810][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  585.363824][   T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  585.394233][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  585.457138][ T5932] dvb-usb: recv bulk message failed: -22
[  585.564053][   T24] usb 3-1: Using ep0 maxpacket: 8
[  585.661408][ T5932] dvb-usb: bulk message failed: -71 (6/0)
[  585.710182][   T24] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  585.735712][ T5932] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  585.771303][   T24] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 8
[  585.831434][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28
[  585.846632][   T24] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  585.916597][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[  585.955589][ T5932] dvb-usb: schedule remote query interval to 150 msecs.
[  585.992927][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  586.011754][ T5932] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  586.037916][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.078244][   T24] usb 3-1: Product: syz
[  586.092667][ T5932] usb 4-1: USB disconnect, device number 52
[  586.119560][   T24] usb 3-1: Manufacturer: syz
[  586.149264][   T24] usb 3-1: SerialNumber: syz
[  586.267433][T12203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  586.284125][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  586.286496][T12203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  586.376441][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  586.404256][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  586.429415][   T10] mceusb 2-1:0.0: Registered Ð… with mce emulator interface version 1
[  586.443499][   T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  586.456944][   T10] usb 2-1: USB disconnect, device number 54
[  586.523427][ T5932] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  586.650654][   T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  586.662511][   T24] usb 3-1: USB disconnect, device number 59
[  586.756960][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1622'.
[  586.803521][T12226] x_tables: duplicate underflow at hook 4
[  587.331474][   T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  587.544670][   T10] usb 2-1: Using ep0 maxpacket: 8
[  587.610813][   T10] usb 2-1: config 0 has no interfaces?
[  587.709981][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  588.025267][   T10] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  588.079100][   T10] usb 2-1: Product: syz
[  588.083349][   T10] usb 2-1: Manufacturer: syz
[  588.133614][   T10] usb 2-1: SerialNumber: syz
[  588.169958][   T10] usb 2-1: config 0 descriptor??
[  588.514885][T12253] input: syz0 as /devices/virtual/input/input29
[  589.068741][   T24] usb 2-1: USB disconnect, device number 55
[  590.357672][T12262] Bluetooth: MGMT ver 1.23
[  590.557874][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'.
[  592.363850][ T5932] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  592.595287][ T5932] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  592.620968][ T5932] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 204
[  592.640842][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  592.657268][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.668581][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  592.684557][ T5932] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  592.701216][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.743750][   T10] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  592.861389][ T5932] usb 6-1: config 0 descriptor??
[  593.081373][T12310] netlink: 'syz.1.1649': attribute type 11 has an invalid length.
[  593.089540][T12310] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1649'.
[  593.636129][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  593.653636][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  593.675797][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  593.733158][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  593.758382][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  593.789468][   T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  593.892384][   T10] usb 3-1: Manufacturer: syz
[  593.901768][   T10] usb 3-1: config 0 descriptor??
[  593.943558][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'.
[  594.031911][ T5932] usbhid 6-1:0.0: can't add hid device: -71
[  594.053473][ T5932] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  594.080880][ T5932] usb 6-1: USB disconnect, device number 52
[  594.284465][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'.
[  594.296835][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'.
[  594.476834][T12302] loop3: detected capacity change from 0 to 1
[  594.555746][ T5847] Dev loop3: unable to read RDB block 1
[  594.618794][ T5847]  loop3: unable to read partition table
[  594.701155][ T5847] loop3: partition table beyond EOD, truncated
[  594.814654][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.835490][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.863577][   T10] rc_core: IR keymap rc-hauppauge not found
[  594.869566][   T10] Registered IR keymap rc-empty
[  594.876363][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  594.884072][T12302] Dev loop3: unable to read RDB block 1
[  594.893855][T12302]  loop3: unable to read partition table
[  594.899989][T12302] loop3: partition table beyond EOD, truncated
[  594.943384][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  594.967283][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  594.981942][T12302] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  595.018074][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30
[  595.057451][T12327] Dev loop3: unable to read RDB block 1
[  595.078991][T12327]  loop3: unable to read partition table
[  595.084814][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  595.084832][   T30] audit: type=1326 audit(2000000201.481:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.101022][T12332] smb3: Unexpected value for 'rdma'
[  595.118335][T12327] loop3: partition table beyond EOD, truncated
[  595.119774][T12336] loop2: detected capacity change from 0 to 7
[  595.127434][   T30] audit: type=1326 audit(2000000201.491:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.137699][T12336]  loop2: p1
[  595.153841][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.167285][T12336] loop2: partition table partially beyond EOD, truncated
[  595.183012][T12336] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  595.204136][   T30] audit: type=1326 audit(2000000201.491:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.239290][   T30] audit: type=1326 audit(2000000201.491:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.253463][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.305446][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.339327][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.352527][   T30] audit: type=1326 audit(2000000201.491:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.373458][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.414503][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.416256][   T30] audit: type=1326 audit(2000000201.491:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.434035][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.473554][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.483581][ T5923] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  595.513954][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.532505][   T30] audit: type=1326 audit(2000000201.491:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.569425][   T30] audit: type=1326 audit(2000000201.491:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.662814][   T30] audit: type=1326 audit(2000000201.491:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.741161][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.775444][   T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  595.793019][   T30] audit: type=1326 audit(2000000201.491:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12331 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  595.793406][   T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  595.834329][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1663'.
[  596.573024][   T10] usb 3-1: USB disconnect, device number 60
[  596.614312][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  596.647618][T12348] program syz.1.1662 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  596.663476][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  596.695715][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.713470][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  596.792032][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  596.835169][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'.
[  597.827739][ T5923] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  598.294475][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.303081][ T5923] usb 6-1: Product: syz
[  598.307347][ T5923] usb 6-1: Manufacturer: syz
[  598.312026][ T5923] usb 6-1: SerialNumber: syz
[  598.334882][ T5923] usb 6-1: config 0 descriptor??
[  598.358724][ T5923] usb 6-1: can't set config #0, error -71
[  598.372422][ T5923] usb 6-1: USB disconnect, device number 53
[  599.111888][T12402] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[  599.135397][T12384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.361571][T12384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.487483][T12407] netlink: 'syz.5.1677': attribute type 1 has an invalid length.
[  599.661773][T12384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.742511][T12412] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  599.793137][T12412] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  599.858908][T12419] gretap2: entered promiscuous mode
[  599.908274][T12419] bond2: (slave gretap2): making interface the new active one
[  599.945857][T12419] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  599.990287][T12424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1681'.
[  600.053971][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1681'.
[  600.085128][T12384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.146917][T12428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1682'.
[  600.381760][T12433] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1683'.
[  600.482658][T12384] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.530548][T12384] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.632615][T12384] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.692376][T12384] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.573916][T12458] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1690'.
[  602.754198][T12492] fuse: Bad value for 'fd'
[  603.018846][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  603.973504][T12507] xt_cgroup: invalid path, errno=-2
[  607.778196][   T30] kauditd_printk_skb: 79 callbacks suppressed
[  607.778217][   T30] audit: type=1326 audit(2000000214.181:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  607.853058][   T30] audit: type=1326 audit(2000000214.211:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  608.075702][   T30] audit: type=1326 audit(2000000214.211:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  608.118987][   T30] audit: type=1326 audit(2000000214.211:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  608.141450][   T30] audit: type=1326 audit(2000000214.211:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  608.163604][   T30] audit: type=1326 audit(2000000214.211:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  608.186950][   T30] audit: type=1326 audit(2000000214.211:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  608.209578][   T30] audit: type=1326 audit(2000000214.211:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  608.243110][ T5828] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  608.427765][ T5828] usb 3-1: device descriptor read/64, error -71
[  609.020055][ T5828] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  609.030028][   T30] audit: type=1326 audit(2000000214.211:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  609.060668][   T30] audit: type=1326 audit(2000000214.211:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12562 comm="syz.5.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  609.153139][ T5828] usb 3-1: device descriptor read/64, error -71
[  609.283129][ T5828] usb usb3-port1: attempt power cycle
[  609.310440][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1729'.
[  609.525619][T12597] cgroup: fork rejected by pids controller in /syz5
[  609.643851][ T5828] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[  609.686757][ T5828] usb 3-1: device descriptor read/8, error -71
[  609.801796][T12855] netlink: 'syz.1.1731': attribute type 3 has an invalid length.
[  609.809773][T12855] netlink: 'syz.1.1731': attribute type 1 has an invalid length.
[  609.817898][T12855] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1731'.
[  609.982432][ T5828] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[  610.118679][ T5828] usb 3-1: device descriptor read/8, error -71
[  610.403279][ T5828] usb usb3-port1: unable to enumerate USB device
[  612.959441][  T977] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  613.159888][  T977] usb 3-1: Using ep0 maxpacket: 8
[  613.181867][  T977] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  613.235793][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  613.259741][  T977] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[  613.292275][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.321328][  T977] usb 3-1: config 0 descriptor??
[  613.843544][T13162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.872957][T13162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.955993][  T977] hid-u2fzero 0003:20A0:4287.000D: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.2-1/input0
[  613.985841][  T977] hid-u2fzero 0003:20A0:4287.000D: NitroKey U2F LED initialised
[  614.012851][  T977] hid-u2fzero 0003:20A0:4287.000D: NitroKey U2F RNG initialised
[  614.199296][T13164] tipc: Started in network mode
[  614.212443][T13164] tipc: Node identity 080211000001, cluster identity 4711
[  614.219998][T13164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  614.249450][T13162] can: request_module (can-proto-0) failed.
[  614.310224][   T24] usb 3-1: USB disconnect, device number 65
[  614.363897][T13198] fuse: Bad value for 'fd'
[  614.681757][T13202] kvm: pic: non byte write
[  615.383956][ T5923] tipc: Node number set to 134418688
[  615.642703][  T977] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  615.873134][  T977] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  615.892414][  T977] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  616.076447][  T977] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  616.120521][  T977] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  616.134240][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.161647][  T977] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  616.215508][  T977] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[  616.613562][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'.
[  616.635026][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.300626][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.334919][   T24] usb 2-1: USB disconnect, device number 56
[  618.707671][T13275] C: renamed from team_slave_0 (while UP)
[  618.758491][T13275] netlink: 'syz.5.1780': attribute type 1 has an invalid length.
[  618.774059][T13275] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1780'.
[  618.825662][T13275] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  621.871883][ T5828] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  621.977159][   T24] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  622.041993][ T5828] usb 2-1: Using ep0 maxpacket: 8
[  622.051363][ T5828] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  622.069831][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0
[  622.080814][ T5828] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[  622.097928][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.109978][ T5828] usb 2-1: config 0 descriptor??
[  622.144846][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  622.156499][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  622.167883][   T24] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  622.178752][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.141038][   T24] usb 4-1: config 0 descriptor??
[  623.147511][T13312] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  623.700966][ T5828] hid-u2fzero 0003:20A0:4287.000E: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.1-1/input0
[  623.721832][ T5828] hid-u2fzero 0003:20A0:4287.000E: NitroKey U2F LED initialised
[  623.730011][ T5828] hid-u2fzero 0003:20A0:4287.000E: NitroKey U2F RNG initialised
[  624.384082][   T24] glorious 0003:22D4:1503.000F: item fetching failed at offset 5/7
[  624.413138][   T24] glorious 0003:22D4:1503.000F: probe with driver glorious failed with error -22
[  624.655337][T13349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1800'.
[  624.664836][T13349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1800'.
[  624.690845][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  624.918091][   T10] usb 2-1: USB disconnect, device number 57
[  625.724908][  T977] usb 4-1: USB disconnect, device number 53
[  626.023074][T13370] netlink: 5404 bytes leftover after parsing attributes in process `syz.3.1806'.
[  626.045694][T13370] netlink: 5404 bytes leftover after parsing attributes in process `syz.3.1806'.
[  626.191825][   T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  626.226492][T13375] sctp: [Deprecated]: syz.5.1809 (pid 13375) Use of int in maxseg socket option.
[  626.226492][T13375] Use struct sctp_assoc_value instead
[  626.321842][   T24] usb 3-1: device descriptor read/64, error -71
[  626.491541][ T5932] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  626.561594][   T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  626.654220][ T5932] usb 4-1: config 0 has an invalid interface number: 90 but max is 0
[  626.662712][ T5932] usb 4-1: config 0 has no interface number 0
[  626.669216][ T5932] usb 4-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 16896, setting to 64
[  626.685503][ T5932] usb 4-1: New USB device found, idVendor=087d, idProduct=0410, bcdDevice=3a.fa
[  626.694953][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.703557][   T24] usb 3-1: device descriptor read/64, error -71
[  626.709937][ T5932] usb 4-1: Product: syz
[  626.714352][ T5932] usb 4-1: Manufacturer: syz
[  626.718989][ T5932] usb 4-1: SerialNumber: syz
[  626.727437][ T5932] usb 4-1: config 0 descriptor??
[  626.733970][T13377] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  626.812452][   T24] usb usb3-port1: attempt power cycle
[  626.950056][T13377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.960757][T13377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.161881][   T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  627.225840][   T24] usb 3-1: device descriptor read/8, error -71
[  627.229590][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'.
[  627.244930][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'.
[  627.531874][   T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  627.653289][   T24] usb 3-1: device descriptor read/8, error -71
[  627.762938][   T24] usb usb3-port1: unable to enumerate USB device
[  627.999879][T13405] loop2: detected capacity change from 0 to 7
[  628.007266][T13405]  loop2: p1
[  628.010895][T13405] loop2: partition table partially beyond EOD, truncated
[  628.020945][T13405] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  628.149598][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'.
[  629.032559][T13418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1822'.
[  629.042378][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'.
[  629.433540][T13427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.450337][T13427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  629.464367][   T10] usb 4-1: USB disconnect, device number 54
[  630.011091][  T977] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  630.086904][T13438] loop2: detected capacity change from 0 to 7
[  630.105365][T13438]  loop2: p1
[  630.108853][T13438] loop2: partition table partially beyond EOD, truncated
[  630.118981][T13438] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  630.319581][  T977] usb 2-1: Using ep0 maxpacket: 32
[  630.339567][  T977] usb 2-1: config 120 has an invalid interface number: 85 but max is 0
[  630.348759][  T977] usb 2-1: config 120 has no interface number 0
[  630.387463][  T977] usb 2-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=9c.75
[  630.436297][T13446] bridge0: left promiscuous mode
[  630.441992][T13446] bridge0: left allmulticast mode
[  630.599907][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.720042][  T977] usb 2-1: Product: syz
[  630.802079][  T977] usb 2-1: Manufacturer: syz
[  630.892029][  T977] usb 2-1: SerialNumber: syz
[  631.235432][T13454] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1831'.
[  631.262782][T13427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.292775][T13427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.331456][  T977] ums-datafab 2-1:120.85: USB Mass Storage device detected
[  631.362481][  T977] ums-datafab 2-1:120.85: Quirks match for vid 07c4 pid a002: 1
[  631.389100][  T977] ums-datafab 2-1:120.85: This device (07c4,a002,9c75 S 56 P f2) has an unneeded Protocol entry in unusual_devs.h (kernel 6.16.0-syzkaller)
[  631.389100][  T977]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  631.476236][  T977] usb 2-1: USB disconnect, device number 58
[  631.698415][   T30] kauditd_printk_skb: 73 callbacks suppressed
[  631.698436][   T30] audit: type=1326 audit(2000000238.103:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13463 comm="syz.5.1835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x0
[  631.893279][ T5932] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  632.371190][ T5932] usb 3-1: Using ep0 maxpacket: 16
[  632.406373][ T5932] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  632.425176][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.439458][ T5932] usb 3-1: config 0 has no interface number 0
[  632.448778][ T5932] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  632.462948][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.471944][ T5932] usb 3-1: Product: syz
[  632.476574][ T5932] usb 3-1: Manufacturer: syz
[  632.484376][ T5932] usb 3-1: SerialNumber: syz
[  632.492876][ T5932] usb 3-1: config 0 descriptor??
[  632.507257][ T5932] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  632.535745][ T5932] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2
[  632.707948][ T5932] usb 3-1: USB disconnect, device number 70
[  632.711503][  T977] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  632.871768][  T977] usb 2-1: Using ep0 maxpacket: 8
[  632.879892][  T977] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  632.888602][  T977] usb 2-1: config 0 has no interface number 0
[  632.896461][  T977] usb 2-1: config 0 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  632.917633][  T977] usb 2-1: config 0 interface 1 has no altsetting 0
[  632.926825][  T977] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  632.936333][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.944574][  T977] usb 2-1: Product: syz
[  632.948793][  T977] usb 2-1: Manufacturer: syz
[  632.953809][  T977] usb 2-1: SerialNumber: syz
[  632.960752][  T977] usb 2-1: config 0 descriptor??
[  633.274839][  T977] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -71
[  633.286315][  T977] usb 2-1: USB disconnect, device number 59
[  633.442746][T13501] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[  633.449871][T13501] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  633.457955][T13501] vhci_hcd vhci_hcd.0: Device attached
[  634.271225][ T5932] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  634.640097][T13502] vhci_hcd: connection closed
[  634.642439][ T9331] vhci_hcd: stop threads
[  634.841300][ T9331] vhci_hcd: release socket
[  634.860966][ T9331] vhci_hcd: disconnect device
[  635.093306][T13519] loop2: detected capacity change from 0 to 7
[  635.111662][T13519]  loop2: p1
[  635.115063][T13519] loop2: partition table partially beyond EOD, truncated
[  635.145368][T13519] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  635.803742][T13528] x_tables: unsorted underflow at hook 2
[  635.869259][T13533] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1856'.
[  636.304279][T13538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1858'.
[  636.785249][T13549] overlayfs: failed to clone upperpath
[  636.801345][   T30] audit: type=1326 audit(2000000243.153:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  637.530049][   T30] audit: type=1326 audit(2000000243.153:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  637.560900][   T30] audit: type=1326 audit(2000000243.153:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  637.587255][   T30] audit: type=1326 audit(2000000243.153:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  637.640123][   T30] audit: type=1326 audit(2000000243.153:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  637.680237][   T30] audit: type=1326 audit(2000000243.153:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  637.708931][   T30] audit: type=1326 audit(2000000243.153:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  637.765072][   T30] audit: type=1326 audit(2000000243.153:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  637.799497][   T30] audit: type=1326 audit(2000000243.153:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  637.825472][   T30] audit: type=1326 audit(2000000243.163:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  638.411015][  T977] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  638.542258][  T977] usb 2-1: device descriptor read/64, error -71
[  638.803546][  T977] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  638.961013][  T977] usb 2-1: device descriptor read/64, error -71
[  639.031016][   T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  639.071140][  T977] usb usb2-port1: attempt power cycle
[  639.190846][   T24] usb 4-1: Using ep0 maxpacket: 8
[  639.198179][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.208880][   T24] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  639.218179][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.228240][   T24] usb 4-1: config 0 descriptor??
[  639.421072][  T977] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  639.435491][   T24] usb 4-1: USB disconnect, device number 55
[  639.455662][  T977] usb 2-1: device descriptor read/8, error -71
[  639.460912][ T5932] vhci_hcd: vhci_device speed not set
[  639.707007][  T977] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  639.744512][  T977] usb 2-1: device descriptor read/8, error -71
[  639.861606][  T977] usb usb2-port1: unable to enumerate USB device
[  640.274971][T13606] No such timeout policy "syz1"
[  641.181549][  T977] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  641.400822][T13611] overlay: ./file1 is not a directory
[  641.421325][  T977] usb 4-1: Using ep0 maxpacket: 8
[  641.436891][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.469580][  T977] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  641.484225][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.496229][  T977] usb 4-1: config 0 descriptor??
[  641.731823][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1884'.
[  642.849084][T13628] 9pnet_fd: Insufficient options for proto=fd
[  643.446889][  T977] usbhid 4-1:0.0: can't add hid device: -71
[  643.481425][   T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  643.554214][  T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  643.868460][  T977] usb 4-1: USB disconnect, device number 56
[  643.880488][   T10] usb 3-1: Using ep0 maxpacket: 8
[  643.906272][   T10] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[  643.930747][   T10] usb 3-1: config 0 has no interface number 0
[  643.959949][   T10] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  643.993108][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.012656][T13637] bridge_slave_0: entered promiscuous mode
[  644.030152][   T10] usb 3-1: Product: syz
[  644.040471][   T10] usb 3-1: Manufacturer: syz
[  644.045327][   T10] usb 3-1: SerialNumber: syz
[  644.096328][   T10] usb 3-1: config 0 descriptor??
[  644.133885][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  644.133905][   T30] audit: type=1326 audit(2000000250.544:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  644.226538][   T30] audit: type=1326 audit(2000000250.544:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  644.254830][   T30] audit: type=1326 audit(2000000250.544:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  644.284823][   T30] audit: type=1326 audit(2000000250.554:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13644 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fae8d3c1425 code=0x7ffc0000
[  644.312392][   T30] audit: type=1326 audit(2000000250.554:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  644.335585][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'.
[  644.385368][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'.
[  644.416924][   T10] ath6kl: Failed to submit usb control message: -71
[  644.426693][   T10] ath6kl: unable to send the bmi data to the device: -71
[  644.444456][   T30] audit: type=1326 audit(2000000250.554:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  644.470453][   T10] ath6kl: Unable to send get target info: -71
[  644.492828][   T10] ath6kl: Failed to init ath6kl core: -71
[  644.515880][   T10] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71
[  644.538916][   T30] audit: type=1326 audit(2000000250.774:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13644 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  644.612792][   T10] usb 3-1: USB disconnect, device number 71
[  647.550117][ T5932] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  647.792765][ T5932] usb 4-1: Using ep0 maxpacket: 32
[  647.805038][ T5932] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  647.814131][ T5932] usb 4-1: config 0 has no interface number 0
[  647.824021][ T5932] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  647.838006][ T5932] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  647.860997][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.940347][  T977] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  648.096219][ T5932] usb 4-1: Product: syz
[  648.104575][ T5932] usb 4-1: Manufacturer: syz
[  648.109311][ T5932] usb 4-1: SerialNumber: syz
[  648.116933][ T5932] usb 4-1: config 0 descriptor??
[  648.133839][ T5932] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  648.194710][ T5932] em28xx 4-1:0.132: Video interface 132 found:
[  648.980586][  T977] usb 3-1: Using ep0 maxpacket: 8
[  649.042446][  T977] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  649.083282][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.113161][  T977] usb 3-1: config 0 descriptor??
[  649.143965][ T5932] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  649.153322][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1907'.
[  649.280579][ T5923] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  649.338626][  T977] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  649.456031][ T5923] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  649.476460][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.505740][ T5923] usb 2-1: Product: syz
[  649.510023][ T5923] usb 2-1: Manufacturer: syz
[  649.530525][ T5923] usb 2-1: SerialNumber: syz
[  649.544712][ T5923] usb 2-1: config 0 descriptor??
[  649.805449][ T5923] usb 2-1: USB disconnect, device number 64
[  649.996984][ T5932] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  650.006868][ T5932] em28xx 4-1:0.132: failed to read eeprom (err=-5)
[  650.013573][ T5932] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  650.380791][ T5923] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  650.684471][ T5923] usb 2-1: device descriptor read/64, error -71
[  650.789392][ T5932] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  650.797555][ T5932] em28xx 4-1:0.132: analog set to bulk mode.
[  650.803884][   T24] em28xx 4-1:0.132: Registering V4L2 extension
[  650.886660][ T5932] usb 4-1: USB disconnect, device number 57
[  650.925792][ T5932] em28xx 4-1:0.132: Disconnecting em28xx
[  651.102684][  T977] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  651.130207][ T5923] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[  651.225492][  T977] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  651.977455][  T977] asix 3-1:0.0: probe with driver asix failed with error -71
[  651.990118][  T977] usb 3-1: USB disconnect, device number 72
[  652.020348][ T5923] usb 2-1: device descriptor read/64, error -71
[  652.140154][ T5923] usb usb2-port1: attempt power cycle
[  652.163451][   T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  652.199098][   T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  652.209495][T13741] netlink: 'syz.0.1917': attribute type 1 has an invalid length.
[  652.219996][   T24] em28xx 4-1:0.132: No AC97 audio processor
[  652.251265][   T24] usb 4-1: Decoder not found
[  652.256130][   T24] em28xx 4-1:0.132: failed to create media graph
[  652.273196][   T24] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  652.317075][   T24] em28xx 4-1:0.132: Remote control support is not available for this card.
[  652.367537][ T5932] em28xx 4-1:0.132: Closing input extension
[  652.517927][T13742] ip6erspan0: entered promiscuous mode
[  652.569363][ T5932] em28xx 4-1:0.132: Freeing device
[  654.024793][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'.
[  654.183031][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'.
[  654.267385][T13769] libceph: resolve '400' (ret=-3): failed
[  654.934714][T13786] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1929'.
[  655.917513][T13800] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1934'.
[  658.084893][T13826] Invalid source name
[  658.088980][T13826] UBIFS error (pid: 13826): cannot open "/dev/md0", error -22
[  658.098249][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1940'.
[  658.612757][T13836] Cannot find add_set index 1 as target
[  660.203535][  T977] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  660.379662][  T977] usb 3-1: device descriptor read/64, error -71
[  660.703854][  T977] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  660.843909][T13859] fuse: Unknown parameter 'audit'
[  660.890065][  T977] usb 3-1: device descriptor read/64, error -71
[  661.000701][  T977] usb usb3-port1: attempt power cycle
[  661.409540][   T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  661.433767][  T977] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  661.495143][  T977] usb 3-1: device descriptor read/8, error -71
[  661.559569][   T24] usb 2-1: Using ep0 maxpacket: 8
[  661.657226][   T24] usb 2-1: config 0 has an invalid interface number: 99 but max is 0
[  661.709638][   T24] usb 2-1: config 0 has no interface number 0
[  661.743547][   T24] usb 2-1: too many endpoints for config 0 interface 99 altsetting 112: 114, using maximum allowed: 30
[  661.759926][  T977] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  661.763803][   T24] usb 2-1: config 0 interface 99 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 114
[  661.782114][   T24] usb 2-1: config 0 interface 99 has no altsetting 0
[  661.792731][   T24] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  661.810720][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.818930][   T24] usb 2-1: Product: syz
[  661.838960][   T24] usb 2-1: Manufacturer: syz
[  661.847354][   T24] usb 2-1: SerialNumber: syz
[  661.859929][   T24] usb 2-1: config 0 descriptor??
[  661.868902][   T24] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  661.992761][T13885] netlink: 'syz.2.1959': attribute type 11 has an invalid length.
[  662.091262][  T977] usb 3-1: device not accepting address 76, error -71
[  662.099001][   T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  662.107309][  T977] usb usb3-port1: unable to enumerate USB device
[  662.391881][   T24] gspca_sn9c2028: read1 error -110
[  662.959902][   T10] usb 4-1: Using ep0 maxpacket: 32
[  662.967076][   T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  662.978551][   T24] gspca_sn9c2028: read1 error -32
[  662.984266][   T10] usb 4-1: config 0 has no interface number 0
[  663.011360][   T10] usb 4-1: config 0 interface 184 has no altsetting 0
[  663.038804][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  663.039762][   T24] gspca_sn9c2028: read1 error -32
[  663.072999][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.108392][   T10] usb 4-1: Product: syz
[  663.130360][   T24] sn9c2028 2-1:0.99: probe with driver sn9c2028 failed with error -32
[  663.132516][   T10] usb 4-1: Manufacturer: syz
[  663.173237][   T10] usb 4-1: SerialNumber: syz
[  663.201114][   T10] usb 4-1: config 0 descriptor??
[  663.218231][   T10] smsc75xx v1.0.0
[  663.848704][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'.
[  664.668926][   T24] usb 2-1: USB disconnect, device number 68
[  665.259329][   T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  666.049347][   T24] usb 2-1: device descriptor read/64, error -71
[  666.226441][ T5923] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  666.299311][   T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  666.346533][T13936] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1975'.
[  666.399493][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  666.407992][ T5923] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  666.426572][ T5923] usb 3-1: config 0 has no interface number 0
[  666.434968][ T5923] usb 3-1: config 0 interface 184 has no altsetting 0
[  666.456024][ T5923] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  666.465793][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.479537][ T5923] usb 3-1: Product: syz
[  666.479571][   T24] usb 2-1: device descriptor read/64, error -71
[  666.491317][ T5923] usb 3-1: Manufacturer: syz
[  666.511520][ T5923] usb 3-1: SerialNumber: syz
[  666.537200][ T5923] usb 3-1: config 0 descriptor??
[  666.588414][ T5923] smsc75xx v1.0.0
[  666.619652][   T24] usb usb2-port1: attempt power cycle
[  666.658590][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  666.678694][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  666.696349][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  666.717360][   T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  666.827689][   T10] usb 4-1: USB disconnect, device number 58
[  667.022552][ T5923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  667.041772][ T5923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  667.070130][ T5923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  667.092776][   T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  667.099463][ T5923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  667.124883][ T5923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  667.124994][   T24] usb 2-1: device descriptor read/8, error -71
[  667.246272][ T5923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  667.263151][ T5923] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  667.277366][ T5923] usb 3-1: USB disconnect, device number 77
[  667.609196][   T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  667.639909][   T24] usb 2-1: device descriptor read/8, error -71
[  667.759793][   T24] usb usb2-port1: unable to enumerate USB device
[  668.040477][T13957] batman_adv: batadv0: Adding interface: dummy0
[  668.053487][T13957] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.118332][T13957] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  668.142933][   T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  668.215046][T13957] netlink: 'syz.3.1981': attribute type 10 has an invalid length.
[  668.549615][   T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  668.689328][   T10] usb 3-1: Using ep0 maxpacket: 8
[  668.715287][   T10] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  668.735338][   T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  668.749565][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  668.794997][   T10] usb 3-1: config 0 has no interface number 0
[  668.795087][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  668.839518][   T10] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  668.868315][   T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  668.888338][   T10] usb 3-1: config 0 interface 52 has no altsetting 0
[  668.893942][   T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  668.917690][   T24] usb 4-1: Manufacturer: syz
[  668.930946][   T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  668.942942][   T24] usb 4-1: config 0 descriptor??
[  668.953383][   T10] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  668.975433][T13969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1985'.
[  668.999667][   T10] usb 3-1: Manufacturer: syz
[  669.022631][   T10] usb 3-1: config 0 descriptor??
[  669.215756][   T24] rc_core: IR keymap rc-hauppauge not found
[  669.239366][   T24] Registered IR keymap rc-empty
[  669.295290][   T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  669.314248][   T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32
[  669.331689][    C1] igorplugusb 4-1:0.0: Error: urb status = -32
[  669.372839][   T24] usb 4-1: USB disconnect, device number 59
[  670.772317][ T5932] usb 3-1: USB disconnect, device number 78
[  670.887973][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'.
[  670.950602][   T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  671.013980][   T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  671.034288][T14027] sock: sock_set_timeout: `syz.2.2000' (pid 14027) tries to set negative timeout
[  671.239317][   T10] usb 4-1: Using ep0 maxpacket: 32
[  671.299063][   T24] usb 2-1: Using ep0 maxpacket: 32
[  671.559868][   T10] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  671.584403][   T24] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  671.603376][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.609234][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  671.621936][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00df, bcdDevice= 0.00
[  671.647009][   T24] usb 2-1: Product: syz
[  671.651601][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.676782][   T24] usb 2-1: Manufacturer: syz
[  671.683453][   T10] usb 4-1: config 0 descriptor??
[  671.685900][   T24] usb 2-1: SerialNumber: syz
[  671.698395][   T24] usb 2-1: config 0 descriptor??
[  671.722812][   T24] cdc_ether 2-1:0.0: More than one union descriptor, skipping ...
[  671.737853][   T24] usb 2-1: bad CDC descriptors
[  671.745657][   T24] usb 2-1: unsupported MDLM descriptors
[  671.933589][   T24] usb 2-1: USB disconnect, device number 73
[  673.869402][ T5923] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  674.129879][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  674.141164][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  674.494831][ T5923] usb 2-1: config 0 has no interfaces?
[  674.506244][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  674.517359][ T5923] usb 2-1: config 0 has no interfaces?
[  674.535989][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  674.547324][ T5923] usb 2-1: config 0 has no interfaces?
[  674.560064][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  674.569921][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.583983][ T5923] usb 2-1: Product: syz
[  674.588557][ T5923] usb 2-1: Manufacturer: syz
[  674.596478][ T5923] usb 2-1: SerialNumber: syz
[  674.641074][ T5923] usb 2-1: config 0 descriptor??
[  674.653639][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  674.663469][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  674.682369][   T10] usb 4-1: USB disconnect, device number 60
[  675.206178][   T24] usb 2-1: USB disconnect, device number 74
[  675.537803][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2017'.
[  675.566410][ T5923] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  675.721011][ T5923] usb 3-1: config 0 has an invalid interface number: 154 but max is 0
[  675.737713][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  675.777481][ T5923] usb 3-1: config 0 has no interface number 0
[  675.791640][ T5923] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0
[  675.818384][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.852009][ T5923] usb 3-1: config 0 descriptor??
[  675.884570][ T5923] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0
[  675.894602][ T5923] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22
[  675.908103][T14096] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  676.055461][T14102] overlayfs: failed to get inode (-116)
[  676.062627][T14102] overlayfs: failed to get inode (-116)
[  676.084066][   T24] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  676.096150][ T5923] usb 3-1: USB disconnect, device number 79
[  676.300441][T14102] overlayfs: failed to get inode (-116)
[  676.306675][T14102] overlayfs: failed to get inode (-116)
[  676.312796][T14102] overlayfs: failed to get inode (-116)
[  676.318966][T14102] overlayfs: failed to get inode (-116)
[  676.325191][T14102] overlayfs: failed to get inode (-116)
[  676.331712][T14102] overlayfs: failed to get inode (-116)
[  676.348945][   T24] usb 2-1: device descriptor read/64, error -71
[  676.588809][   T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  676.666176][   T30] audit: type=1326 audit(2000000283.065:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fef8eb69 code=0x7ffc0000
[  676.703115][   T30] audit: type=1326 audit(2000000283.065:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fef8eb69 code=0x7ffc0000
[  676.730757][   T10] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  676.735739][   T30] audit: type=1326 audit(2000000283.095:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4fef8d61f code=0x7ffc0000
[  676.762247][   T24] usb 2-1: device descriptor read/64, error -71
[  676.852459][   T30] audit: type=1326 audit(2000000283.095:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fef8eb69 code=0x7ffc0000
[  676.891897][   T24] usb usb2-port1: attempt power cycle
[  677.319259][   T30] audit: type=1326 audit(2000000283.095:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fef8eb69 code=0x7ffc0000
[  677.431300][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  677.445436][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.456420][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  677.466838][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.479935][   T10] usb 4-1: config 0 descriptor??
[  677.490476][   T30] audit: type=1326 audit(2000000283.095:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa4fef8eb69 code=0x7ffc0000
[  677.518466][   T30] audit: type=1326 audit(2000000283.095:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fef8eb69 code=0x7ffc0000
[  677.579116][   T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  677.596397][   T30] audit: type=1326 audit(2000000283.095:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fef8eb69 code=0x7ffc0000
[  677.618193][    C0] vkms_vblank_simulate: vblank timer overrun
[  677.625109][   T24] usb 2-1: device descriptor read/8, error -71
[  677.626554][   T30] audit: type=1326 audit(2000000283.095:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4fef8eb69 code=0x7ffc0000
[  677.705821][   T30] audit: type=1326 audit(2000000283.095:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fef8eb69 code=0x7ffc0000
[  677.956354][   T10] hid-u2fzero 0003:10C4:8ACF.0010: unknown main item tag 0x3
[  678.102947][   T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  678.522181][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.741560][   T10] hid-u2fzero 0003:10C4:8ACF.0010: item fetching failed at offset 4/5
[  678.751375][   T10] hid-u2fzero 0003:10C4:8ACF.0010: probe with driver hid-u2fzero failed with error -22
[  678.762116][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.786426][   T24] usb 2-1: device descriptor read/8, error -71
[  678.860728][ T5932] usb 4-1: USB disconnect, device number 61
[  678.908891][   T24] usb usb2-port1: unable to enumerate USB device
[  680.358544][   T24] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  680.551087][   T24] usb 4-1: config 0 has an invalid interface number: 139 but max is 0
[  680.570756][   T24] usb 4-1: config 0 has no interface number 0
[  680.587764][   T24] usb 4-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  680.631712][   T24] usb 4-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[  680.725698][   T24] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64
[  680.792224][   T24] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8B has invalid maxpacket 32832, setting to 64
[  680.831879][   T24] usb 4-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  680.879323][   T24] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  680.906510][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.935454][   T24] usb 4-1: Product: syz
[  680.945577][   T24] usb 4-1: Manufacturer: syz
[  680.972483][   T24] usb 4-1: SerialNumber: syz
[  681.009604][   T24] usb 4-1: config 0 descriptor??
[  681.026199][T14153] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  681.038229][T14153] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  681.149901][T14167] C: renamed from team_slave_0
[  681.157202][T14167] netlink: 'syz.0.2044': attribute type 4 has an invalid length.
[  681.165600][T14167] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2044'.
[  681.190730][T14167] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  681.257752][T14167] pimreg: entered allmulticast mode
[  681.277010][   T24] mct_u232 4-1:0.139: MCT U232 converter detected
[  681.305590][T14167] pimreg: left allmulticast mode
[  681.307843][   T24] usb 4-1: MCT U232 converter now attached to ttyUSB0
[  681.330179][   T24] usb 4-1: USB disconnect, device number 62
[  681.341762][   T24] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0
[  681.351416][   T24] mct_u232 4-1:0.139: device disconnected
[  681.502287][T14175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  681.509030][T14175] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  681.517112][T14175] vhci_hcd vhci_hcd.0: Device attached
[  681.527182][T14180] vhci_hcd: connection closed
[  681.527498][ T9331] vhci_hcd: stop threads
[  681.539315][ T9331] vhci_hcd: release socket
[  681.544015][ T9331] vhci_hcd: disconnect device
[  681.904853][T14191] 9pnet_fd: Insufficient options for proto=fd
[  681.923122][T14198] loop2: detected capacity change from 0 to 7
[  681.938877][T14198]  loop2: p1
[  681.955215][T14198] loop2: partition table partially beyond EOD, truncated
[  681.972358][T14193] 9pnet: Could not find request transport: fd0x0000000000000003
[  681.988640][T14198] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  682.014860][T14193] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2051'.
[  682.216196][T14206] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2054'.
[  682.239005][  T977] usb 3-1: new full-speed USB device number 80 using dummy_hcd
[  682.622918][  T977] usb 3-1: config 8 has an invalid interface number: 223 but max is 0
[  682.632664][  T977] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  682.648108][  T977] usb 3-1: config 8 has no interface number 0
[  682.654608][  T977] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  682.665378][  T977] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  682.733520][T14217] netlink: 'syz.5.2059': attribute type 6 has an invalid length.
[  682.741508][T14217] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2059'.
[  683.506416][  T977] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  683.520260][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.547094][  T977] usb 3-1: Product: syz
[  683.565103][  T977] usb 3-1: Manufacturer: syz
[  683.709877][  T977] usb 3-1: SerialNumber: syz
[  684.592477][  T977] usb 3-1: USB disconnect, device number 80
[  685.200417][T14222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  685.208745][T14222] IPv6: NLM_F_CREATE should be set when creating new route
[  685.216329][T14222] IPv6: NLM_F_CREATE should be set when creating new route
[  685.223891][T14222] IPv6: NLM_F_CREATE should be set when creating new route
[  686.115026][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  686.979404][  T977] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  687.178150][  T977] usb 3-1: Using ep0 maxpacket: 16
[  687.194509][  T977] usb 3-1: config 0 interface 0 has no altsetting 0
[  687.224775][  T977] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  687.248020][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  687.248043][   T30] audit: type=1326 audit(2000000293.636:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  687.290719][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.316242][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'.
[  687.327704][  T977] usb 3-1: config 0 descriptor??
[  687.353932][   T30] audit: type=1326 audit(2000000293.636:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  687.557057][  T977] hid (null): global environment stack underflow
[  687.558080][ T5932] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  687.564213][   T30] audit: type=1326 audit(2000000293.636:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  687.608250][  T977] hid (null): global environment stack underflow
[  687.645933][  T977] hid (null): report_id 3899690137 is invalid
[  687.667894][  T977] hid (null): unknown global tag 0xc
[  687.679596][   T30] audit: type=1326 audit(2000000293.646:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  687.709964][  T977] hid (null): bogus close delimiter
[  687.738196][ T5932] usb 4-1: Using ep0 maxpacket: 32
[  687.772913][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  687.784638][T14239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.788065][   T30] audit: type=1326 audit(2000000293.646:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  687.797326][T14239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.849014][ T5932] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  687.859188][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.889619][ T5932] usb 4-1: Product: syz
[  687.893913][ T5932] usb 4-1: Manufacturer: syz
[  687.898793][   T30] audit: type=1326 audit(2000000293.646:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  687.934866][ T5932] usb 4-1: SerialNumber: syz
[  687.960609][ T5932] usb 4-1: config 0 descriptor??
[  687.976956][T14260] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  687.985063][   T30] audit: type=1326 audit(2000000293.646:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  688.010560][ T5932] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33
[  688.044153][  T977] usb 3-1: USB disconnect, device number 81
[  688.079627][   T30] audit: type=1326 audit(2000000293.646:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  688.177476][   T30] audit: type=1326 audit(2000000293.716:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  688.217636][   T30] audit: type=1326 audit(2000000293.716:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d38eb69 code=0x7ffc0000
[  688.245869][ T5932] usb 4-1: USB disconnect, device number 63
[  688.252056][    C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  689.693133][T14279] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2074'.
[  689.702536][T14279] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2074'.
[  689.908110][T14287] net veth1_virt_wifi 
€Â: renamed from virt_wifi0
[  690.107992][ T5932] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  690.268079][ T5932] usb 4-1: device descriptor read/64, error -71
[  690.601394][T14303] overlayfs: failed to resolve './file1': -2
[  690.775763][T14305] ptrace attach of "./syz-executor exec"[5835] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  690.783390][T14305] fuse: Bad value for 'user_id'
[  690.894780][T14305] fuse: Bad value for 'user_id'
[  690.914518][T14305] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2081'.
[  690.987906][ T5932] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  691.358109][ T5932] usb 4-1: device descriptor read/64, error -71
[  691.616376][ T5932] usb usb4-port1: attempt power cycle
[  691.686865][T14310] ubi31: attaching mtd0
[  691.694915][T14310] ubi31: scanning is finished
[  691.699875][T14310] ubi31: empty MTD device detected
[  691.949055][T14310] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  691.956815][T14310] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  691.967589][T14310] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  691.975330][T14310] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  691.983274][T14310] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  691.990813][T14310] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  691.999205][T14310] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3773533563
[  692.010795][T14310] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  692.553552][ T5932] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  692.660122][T14313] ubi31: background thread "ubi_bgt31d" started, PID 14313
[  692.668981][ T5932] usb 4-1: device descriptor read/8, error -71
[  692.995042][ T5932] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  694.329870][ T5932] usb 4-1: device descriptor read/8, error -71
[  694.519154][ T5932] usb usb4-port1: unable to enumerate USB device
[  695.015102][T14339] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0)
[  695.376880][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'.
[  695.427856][  T977] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  695.499564][T14352] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  695.679749][  T977] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  695.743914][  T977] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  696.530181][  T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  696.573410][  T977] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  696.589807][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.607877][  T977] usb 4-1: Product: syz
[  696.612252][  T977] usb 4-1: Manufacturer: syz
[  696.617066][  T977] usb 4-1: SerialNumber: syz
[  696.872696][T14367] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2100'.
[  696.968077][  T977] usb 4-1: 0:2 : does not exist
[  697.045478][  T977] usb 4-1: USB disconnect, device number 68
[  697.133649][T14380] fuse: Invalid rootmode
[  697.618142][T14391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  697.715852][T14391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  698.155961][T14398] bond0: Error: Cannot enslave bond to itself.
[  698.249754][T14399] loop2: detected capacity change from 0 to 7
[  698.312434][T14399] Dev loop2: unable to read RDB block 7
[  698.358586][T14399]  loop2: unable to read partition table
[  698.398158][T14399] loop2: partition table beyond EOD, truncated
[  698.437592][T14399] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  698.910445][T14408] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2112'.
[  699.732163][T14409] @: renamed from vlan0 (while UP)
[  700.172009][T14414] block device autoloading is deprecated and will be removed.
[  701.617325][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'.
[  701.681187][T14430] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  703.908408][T14426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2118'.
[  703.988946][T14448] ip6t_rpfilter: unknown options
[  704.722007][T14458] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2126'.
[  705.144101][T14469] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  705.151021][T14469] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  705.201436][T14469] vhci_hcd vhci_hcd.0: Device attached
[  705.274710][T14474] comedi comedi3: 8255: I/O port conflict (0x10003,4)
[  705.318440][T14474] comedi comedi3: 8255: I/O port conflict (0x10000,4)
[  705.351843][T14474] comedi comedi3: 8255: I/O port conflict (0x7f,4)
[  705.477311][T14472] vhci_hcd: connection closed
[  705.477843][ T9395] vhci_hcd: stop threads
[  705.495096][ T9395] vhci_hcd: release socket
[  705.551728][ T9395] vhci_hcd: disconnect device
[  705.655486][  T977] usb 37-1: new high-speed USB device number 3 using vhci_hcd
[  705.666236][  T977] usb 37-1: enqueue for inactive port 0
[  706.446992][  T977] vhci_hcd: vhci_device speed not set
[  708.737243][T14504] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2138'.
[  709.443670][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'.
[  713.365594][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  713.365614][   T30] audit: type=1800 audit(2000000319.767:569): pid=14570 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2157" name="/" dev="fuse" ino=1 res=0 errno=0
[  715.416671][ T5828] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[  715.756693][ T5932] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  715.857851][ T5828] usb 3-1: unable to read config index 0 descriptor/start: -71
[  715.865658][ T5828] usb 3-1: can't read configurations, error -71
[  715.926538][ T5932] usb 2-1: Using ep0 maxpacket: 32
[  715.938910][ T5932] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  715.956506][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.976551][  T977] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  715.978232][ T5932] usb 2-1: config 0 descriptor??
[  716.003930][ T5932] gspca_main: nw80x-2.14.0 probing 055f:d001
[  716.179832][  T977] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  716.201993][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.218958][  T977] usb 4-1: Product: syz
[  716.223296][  T977] usb 4-1: Manufacturer: syz
[  716.238130][  T977] usb 4-1: SerialNumber: syz
[  716.254248][  T977] usb 4-1: config 0 descriptor??
[  716.674014][  T977] usb 4-1: Firmware version (0.0) predates our first public release.
[  716.716635][  T977] usb 4-1: Please update to version 0.2 or newer
[  716.852064][T14621] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  717.211177][T14632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.232654][T14632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.304874][ T5932] usb 2-1: USB disconnect, device number 80
[  719.025680][  T977] usb 4-1: USB disconnect, device number 69
[  721.387221][T14716] 9pnet_fd: Insufficient options for proto=fd
[  722.227406][T14718] netlink: 'syz.5.2195': attribute type 1 has an invalid length.
[  722.846592][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'.
[  722.855564][T14727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2196'.
[  729.065828][T14766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.483048][T14783] xt_HMARK: proto mask must be zero with L3 mode
[  730.472446][T14792] sctp: [Deprecated]: syz.3.2214 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option.
[  730.472446][T14792] Use struct sctp_sack_info instead
[  731.398520][T14800] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  731.779527][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2219'.
[  731.788083][T14810] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2220'.
[  731.849619][T14810] netlink: 'syz.2.2220': attribute type 2 has an invalid length.
[  731.924922][T14810] netlink: 'syz.2.2220': attribute type 2 has an invalid length.
[  732.179521][T14810] netlink: 'syz.2.2220': attribute type 2 has an invalid length.
[  732.294527][T14810] netlink: 'syz.2.2220': attribute type 1 has an invalid length.
[  732.324401][T14810] netlink: 'syz.2.2220': attribute type 2 has an invalid length.
[  732.392350][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'.
[  732.512061][ T5847] team0: Port device syz_tun removed
[  732.549511][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  732.563037][T14825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  732.563585][T14822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  732.574259][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  732.775815][ T5993] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  732.935645][ T5993] usb 2-1: Using ep0 maxpacket: 16
[  732.949693][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  732.965500][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  732.993539][ T5993] usb 2-1: New USB device found, idVendor=0582, idProduct=87d1, bcdDevice=f8.e7
[  733.011371][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.020048][ T5993] usb 2-1: Product: syz
[  733.024363][ T5993] usb 2-1: Manufacturer: syz
[  733.029226][ T5993] usb 2-1: SerialNumber: syz
[  733.044350][ T5993] usb 2-1: config 0 descriptor??
[  733.273888][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.275815][ T1148] team0: left allmulticast mode
[  733.301198][ T1148] team_slave_0: left allmulticast mode
[  733.305846][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.319185][ T1148] team_slave_1: left allmulticast mode
[  733.337504][ T1148] bridge0: port 3(team0) entered disabled state
[  733.372192][ T1148] bridge_slave_1: left allmulticast mode
[  733.386153][ T1148] bridge_slave_1: left promiscuous mode
[  733.402250][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.450458][ T5993] usb 2-1: USB disconnect, device number 81
[  733.468657][ T1148] bridge_slave_0: left allmulticast mode
[  733.474482][ T1148] bridge_slave_0: left promiscuous mode
[  733.481004][   T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  733.574384][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.055424][   T10] usb 3-1: Using ep0 maxpacket: 32
[  734.067271][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  734.095737][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  734.135565][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  734.175424][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  734.216027][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.249197][   T10] usb 3-1: config 0 descriptor??
[  734.255183][T14830] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  734.270097][ T5993] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  734.281164][   T10] hub 3-1:0.0: USB hub found
[  734.669128][T14846] netlink: 'syz.0.2231': attribute type 4 has an invalid length.
[  734.677509][T14846] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2231'.
[  735.248657][   T10] hub 3-1:0.0: 10 ports detected
[  735.254444][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  735.269313][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  735.280452][   T10] hub 3-1:0.0: insufficient power available to use all downstream ports
[  735.294230][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  735.302501][ T5993] usb 2-1: Using ep0 maxpacket: 16
[  735.316383][ T5993] usb 2-1: config 4 has an invalid interface number: 15 but max is 0
[  735.329708][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  735.335520][ T5993] usb 2-1: config 4 has no interface number 0
[  735.344453][ T5993] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  735.375375][ T5993] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  735.397204][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  735.445573][ T5993] usb 2-1: config 4 interface 15 has no altsetting 0
[  735.485464][ T5993] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44
[  735.507814][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.520308][ T5993] usb 2-1: Product: syz
[  735.524571][ T5993] usb 2-1: Manufacturer: syz
[  735.529311][ T5993] usb 2-1: SerialNumber: syz
[  735.541548][T14840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  735.565755][T14840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  736.283695][   T10] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  736.297335][   T10] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  736.322865][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  736.352269][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  736.362177][   T30] audit: type=1326 audit(2000000344.777:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  736.407133][   T10] usb 3-1: USB disconnect, device number 84
[  736.500390][   T30] audit: type=1326 audit(2000000344.817:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  736.602236][   T30] audit: type=1326 audit(2000000344.817:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  736.779310][T14858] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2232'.
[  737.465336][ T5845] Bluetooth: hci3: command tx timeout
[  737.649224][   T30] audit: type=1326 audit(2000000344.817:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  737.676963][   T30] audit: type=1326 audit(2000000344.817:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  737.700476][   T30] audit: type=1326 audit(2000000344.817:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  737.834601][ T5993] ax88179_178a 2-1:4.15: probe with driver ax88179_178a failed with error -71
[  737.894093][   T30] audit: type=1326 audit(2000000344.817:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  737.896808][ T5993] usb 2-1: USB disconnect, device number 82
[  738.153013][   T30] audit: type=1326 audit(2000000344.817:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  738.174871][    C1] vkms_vblank_simulate: vblank timer overrun
[  738.185335][   T30] audit: type=1326 audit(2000000344.817:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  738.210149][ T1148] hsr_slave_0: left promiscuous mode
[  738.217390][   T30] audit: type=1326 audit(2000000344.817:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14854 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f437c58eb69 code=0x7ffc0000
[  738.239931][ T1148] hsr_slave_1: left promiscuous mode
[  738.248982][ T1148] batman_adv: batadv0: Removing interface: dummy0
[  738.356351][T14876] 
[  738.358846][T14876] ======================================================
[  738.366056][T14876] WARNING: possible circular locking dependency detected
[  738.373096][T14876] 6.16.0-syzkaller #0 Not tainted
[  738.378138][T14876] ------------------------------------------------------
[  738.385268][T14876] syz.1.2238/14876 is trying to acquire lock:
[  738.391366][T14876] ffff888024dcc358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  738.401010][T14876] 
[  738.401010][T14876] but task is already holding lock:
[  738.408825][T14876] ffff888024dcb368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  738.418542][T14876] 
[  738.418542][T14876] which lock already depends on the new lock.
[  738.418542][T14876] 
[  738.429509][T14876] 
[  738.429509][T14876] the existing dependency chain (in reverse order) is:
[  738.438562][T14876] 
[  738.438562][T14876] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  738.447226][T14876]        lock_acquire+0x120/0x360
[  738.452382][T14876]        down_write+0x96/0x1f0
[  738.457454][T14876]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  738.463760][T14876]        nbd_start_device+0x16c/0xac0
[  738.469286][T14876]        nbd_ioctl+0x636/0xeb0
[  738.474292][T14876]        blkdev_ioctl+0x5a8/0x6d0
[  738.479365][T14876]        __se_sys_ioctl+0xfc/0x170
[  738.484514][T14876]        do_syscall_64+0xfa/0x3b0
[  738.489568][T14876]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.496135][T14876] 
[  738.496135][T14876] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  738.504011][T14876]        lock_acquire+0x120/0x360
[  738.509062][T14876]        __mutex_lock+0x182/0xe80
[  738.514118][T14876]        refcount_dec_and_mutex_lock+0x30/0xa0
[  738.520310][T14876]        nbd_config_put+0x2c/0x790
[  738.525452][T14876]        nbd_release+0xfe/0x140
[  738.530370][T14876]        bdev_release+0x533/0x650
[  738.535442][T14876]        blkdev_release+0x15/0x20
[  738.540495][T14876]        __fput+0x449/0xa70
[  738.545027][T14876]        fput_close_sync+0x119/0x200
[  738.550427][T14876]        __x64_sys_close+0x7f/0x110
[  738.555742][T14876]        do_syscall_64+0xfa/0x3b0
[  738.560795][T14876]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.567506][T14876] 
[  738.567506][T14876] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  738.575515][T14876]        validate_chain+0xb9b/0x2140
[  738.581118][T14876]        __lock_acquire+0xab9/0xd20
[  738.586542][T14876]        lock_acquire+0x120/0x360
[  738.591780][T14876]        __mutex_lock+0x182/0xe80
[  738.596865][T14876]        __del_gendisk+0x129/0x9e0
[  738.602032][T14876]        del_gendisk+0xe8/0x160
[  738.607027][T14876]        loop_remove+0x42/0xc0
[  738.611919][T14876]        loop_control_ioctl+0x4ac/0x5a0
[  738.617577][T14876]        __se_sys_ioctl+0xfc/0x170
[  738.622751][T14876]        do_syscall_64+0xfa/0x3b0
[  738.628072][T14876]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.634541][T14876] 
[  738.634541][T14876] other info that might help us debug this:
[  738.634541][T14876] 
[  738.645402][T14876] Chain exists of:
[  738.645402][T14876]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  738.645402][T14876] 
[  738.659707][T14876]  Possible unsafe locking scenario:
[  738.659707][T14876] 
[  738.667348][T14876]        CPU0                    CPU1
[  738.672734][T14876]        ----                    ----
[  738.678145][T14876]   rlock(&set->update_nr_hwq_lock);
[  738.683477][T14876]                                lock(&nbd->config_lock);
[  738.690885][T14876]                                lock(&set->update_nr_hwq_lock);
[  738.698638][T14876]   lock(&disk->open_mutex);
[  738.703279][T14876] 
[  738.703279][T14876]  *** DEADLOCK ***
[  738.703279][T14876] 
[  738.711441][T14876] 1 lock held by syz.1.2238/14876:
[  738.716576][T14876]  #0: ffff888024dcb368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  738.726652][T14876] 
[  738.726652][T14876] stack backtrace:
[  738.732569][T14876] CPU: 1 UID: 0 PID: 14876 Comm: syz.1.2238 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  738.732594][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  738.732607][T14876] Call Trace:
[  738.732617][T14876]  <TASK>
[  738.732627][T14876]  dump_stack_lvl+0x189/0x250
[  738.732655][T14876]  ? __pfx_dump_stack_lvl+0x10/0x10
[  738.732679][T14876]  ? __pfx__printk+0x10/0x10
[  738.732707][T14876]  ? print_lock_name+0xde/0x100
[  738.732733][T14876]  print_circular_bug+0x2ee/0x310
[  738.732760][T14876]  check_noncircular+0x134/0x160
[  738.732787][T14876]  validate_chain+0xb9b/0x2140
[  738.732810][T14876]  ? bpf_trace_printk+0xc1/0x190
[  738.732835][T14876]  ? bpf_trace_printk+0x12d/0x190
[  738.732857][T14876]  ? __pfx_bpf_trace_printk+0x10/0x10
[  738.732880][T14876]  __lock_acquire+0xab9/0xd20
[  738.732904][T14876]  ? __del_gendisk+0x129/0x9e0
[  738.732929][T14876]  lock_acquire+0x120/0x360
[  738.732947][T14876]  ? __del_gendisk+0x129/0x9e0
[  738.732974][T14876]  ? lockdep_unlock+0x89/0x120
[  738.733006][T14876]  __mutex_lock+0x182/0xe80
[  738.733030][T14876]  ? __del_gendisk+0x129/0x9e0
[  738.733059][T14876]  ? __del_gendisk+0x129/0x9e0
[  738.733094][T14876]  ? __pfx___mutex_lock+0x10/0x10
[  738.733116][T14876]  ? __pfx___might_resched+0x10/0x10
[  738.733142][T14876]  ? __lock_acquire+0xab9/0xd20
[  738.733161][T14876]  ? disk_del_events+0xb5/0x210
[  738.733186][T14876]  ? __del_gendisk+0xc1/0x9e0
[  738.733212][T14876]  __del_gendisk+0x129/0x9e0
[  738.733237][T14876]  ? del_gendisk+0xe0/0x160
[  738.733265][T14876]  ? __pfx___del_gendisk+0x10/0x10
[  738.733291][T14876]  ? down_read+0x1ad/0x2e0
[  738.733316][T14876]  del_gendisk+0xe8/0x160
[  738.733341][T14876]  loop_remove+0x42/0xc0
[  738.733372][T14876]  loop_control_ioctl+0x4ac/0x5a0
[  738.733394][T14876]  ? __pfx_loop_control_ioctl+0x10/0x10
[  738.733412][T14876]  ? __fget_files+0x2a/0x420
[  738.733436][T14876]  ? bpf_lsm_file_ioctl+0x9/0x20
[  738.733459][T14876]  ? __pfx_loop_control_ioctl+0x10/0x10
[  738.733478][T14876]  __se_sys_ioctl+0xfc/0x170
[  738.733509][T14876]  do_syscall_64+0xfa/0x3b0
[  738.733531][T14876]  ? lockdep_hardirqs_on+0x9c/0x150
[  738.733551][T14876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.733572][T14876]  ? clear_bhb_loop+0x60/0xb0
[  738.733595][T14876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.733615][T14876] RIP: 0033:0x7ff7acd8eb69
[  738.733634][T14876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  738.733653][T14876] RSP: 002b:00007ff7adc04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  738.733675][T14876] RAX: ffffffffffffffda RBX: 00007ff7acfb5fa0 RCX: 00007ff7acd8eb69
[  738.733691][T14876] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000005
[  738.733705][T14876] RBP: 00007ff7ace11df1 R08: 0000000000000000 R09: 0000000000000000
[  738.733718][T14876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  738.733731][T14876] R13: 0000000000000000 R14: 00007ff7acfb5fa0 R15: 00007ffc20c132b8
[  738.733755][T14876]  </TASK>
[  738.733805][    C1] vkms_vblank_simulate: vblank timer overrun
[  739.042768][    C1] vkms_vblank_simulate: vblank timer overrun
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  739.186647][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  739.244312][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  739.547117][ T5845] Bluetooth: hci3: command tx timeout
[  740.160026][ T1148] team_slave_1 (unregistering): left promiscuous mode
[  740.167833][ T1148] team0 (unregistering): Port device team_slave_1 removed
[  740.221896][ T1148] team_slave_0 (unregistering): left promiscuous mode
[  740.230077][ T1148] team0 (unregistering): Port device team_slave_0 removed
[  741.108401][T14879] syz_tun (unregistering): left promiscuous mode
[  741.121695][ T1148] IPVS: stop unused estimator thread 0...
[  741.252100][ T1148] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.328016][ T1148] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.377101][ T1148] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.447930][ T1148] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.512564][ T1148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.570577][ T1148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.618569][ T1148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.679627][ T1148] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode
[  741.691194][ T1148] team0: Port device macvlan2 removed
[  741.699263][ T1148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.752209][ T1148] bridge_slave_1: left allmulticast mode
[  741.758136][ T1148] bridge_slave_1: left promiscuous mode
[  741.763838][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.772355][ T1148] bridge_slave_0: left allmulticast mode
[  741.778157][ T1148] bridge_slave_0: left promiscuous mode
[  741.783848][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.871719][ T1148] bond0 (unregistering): Released all slaves
[  742.119300][ T1148] bond0 (unregistering): Released all slaves
[  742.154354][ T1148] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  742.164303][ T1148] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  742.173397][ T1148] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 0e:a7:8e:cb:fa:54 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  742.407682][ T1148] bond0 (unregistering): Released all slaves
[  742.419944][ T1148] bond1 (unregistering): (slave veth3): Releasing backup interface
[  742.430000][ T1148] bond1 (unregistering): Released all slaves
[  742.592939][ T1148] bond2 (unregistering): Released all slaves
[  742.654281][ T1148] tipc: Left network mode
[  742.664586][ T1148] tipc: Disabling bearer <eth:syzkaller0>
[  742.673474][ T1148] tipc: Left network mode
[  742.949835][ T1148] hsr_slave_0: left promiscuous mode
[  742.955826][ T1148] hsr_slave_1: left promiscuous mode
[  742.963843][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.971674][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.979593][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.987202][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.998726][ T1148] veth0_macvtap: left promiscuous mode
[  743.005987][ T1148] veth1_macvtap: left promiscuous mode
[  743.011510][ T1148] veth0_macvtap: left promiscuous mode
[  743.017671][ T1148] veth1_vlan: left promiscuous mode
[  743.023052][ T1148] veth0_vlan: left promiscuous mode
[  743.721243][ T1148] team0 (unregistering): Port device team_slave_1 removed
[  743.750032][ T1148] team0 (unregistering): Port device team_slave_0 removed
[  747.557197][ T1303] ieee802154 phy1 wpan1: encryption failed: -22