last executing test programs:

16m23.496506288s ago: executing program 32 (id=332):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "709cb3", 0x10, 0x21, 0x0, @loopback, @mcast1, {[], {{0x4e21, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0x3, 0x6, "f4435d", 0x1, "1ac699"}}}}}}}}, 0x4a)

16m15.605845863s ago: executing program 33 (id=392):
truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9)

15m59.213410301s ago: executing program 34 (id=507):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
socket$inet6(0xa, 0x200000000003, 0x87)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

15m57.151068999s ago: executing program 35 (id=517):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4c00, 0x0}, 0x0)

15m55.793999687s ago: executing program 36 (id=528):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000040), &(0x7f00000006c0)=r0}, 0x20)
syz_emit_ethernet(0x2a, &(0x7f0000000580)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0)

15m16.954020003s ago: executing program 37 (id=824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)

14m46.799593289s ago: executing program 38 (id=927):
socket$unix(0x1, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

14m42.52940001s ago: executing program 39 (id=1010):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$packet(r3, &(0x7f0000000180)="280320000a0014000000fbf71914", 0xe, 0x90, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

14m28.696635904s ago: executing program 40 (id=1087):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES32], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)

14m25.05428466s ago: executing program 41 (id=1101):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4})
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0)

14m9.747047393s ago: executing program 42 (id=1149):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000980)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e1, &(0x7f0000000a40)="$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")
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)

12m1.330543185s ago: executing program 43 (id=1784):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
write$bt_hci(r0, 0x0, 0xe)

11m45.731247609s ago: executing program 44 (id=1840):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

11m24.340777155s ago: executing program 45 (id=1928):
r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
fchdir(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000001c0)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@inode_readahead_blks}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@auto_da_alloc}, {@norecovery}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x201}}]}, 0xee, 0x44f, &(0x7f0000000a40)="$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")
lseek(0xffffffffffffffff, 0x100, 0x0)

11m18.789612502s ago: executing program 46 (id=1954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x240408d0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000180)={@my=0x1})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001a80)={@my=0x1})

10m14.500397843s ago: executing program 8 (id=2255):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2008, 0x4)
read(r0, &(0x7f0000001400)=""/4046, 0xffd8)

10m14.302395967s ago: executing program 8 (id=2257):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]})

10m13.774657204s ago: executing program 8 (id=2260):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000040))
fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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")

10m11.020807693s ago: executing program 8 (id=2264):
getpid()
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f00000002c0)}, 0x10)
dup(r0)
setns(0xffffffffffffffff, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0)

10m10.812139904s ago: executing program 8 (id=2265):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}]})

10m10.38585096s ago: executing program 8 (id=2269):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20)
sendmmsg$sock(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="15a1967906", 0x5}], 0x1}}], 0x1, 0x0)

10m9.797500729s ago: executing program 47 (id=2269):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20)
sendmmsg$sock(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="15a1967906", 0x5}], 0x1}}], 0x1, 0x0)

9m46.78260019s ago: executing program 6 (id=2338):
syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000140)='./file2\x00', 0x810418, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x5, 0x1d6, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300})
setns(0xffffffffffffffff, 0x0)

9m44.976172957s ago: executing program 6 (id=2348):
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf", 0x48)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
r1 = epoll_create1(0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = epoll_create1(0x80000)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x20000000})
r4 = epoll_create(0x3)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000002c0)={0x1c})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000100)={0xa0000013})
read(r0, &(0x7f0000000040)=""/119, 0x77)

9m43.57307442s ago: executing program 6 (id=2357):
syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000140)='./file2\x00', 0x810418, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x5, 0x1d6, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300})
setns(0xffffffffffffffff, 0x0)

9m41.495170597s ago: executing program 0 (id=2365):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20)
pselect6(0x40, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0)

9m39.618353124s ago: executing program 6 (id=2371):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f00000002c0)}, 0x10)
dup(r0)
r1 = syz_pidfd_open(0x0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0)

9m39.329424259s ago: executing program 6 (id=2373):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x890b, &(0x7f0000000000))
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000440)='./bus\x00')
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)

9m38.823695083s ago: executing program 0 (id=2375):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0})

9m37.751445022s ago: executing program 6 (id=2378):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x8000000, 0x1, r2, 0xd})

9m36.831811277s ago: executing program 48 (id=2378):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x8000000, 0x1, r2, 0xd})

9m36.802542718s ago: executing program 0 (id=2381):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, 0x0)

9m36.632560661s ago: executing program 0 (id=2383):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f00000002c0)}, 0x10)
dup(r0)
r1 = syz_pidfd_open(0x0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0)

9m36.429895868s ago: executing program 0 (id=2386):
r0 = syz_io_uring_setup(0x1eb1, &(0x7f0000000480)={0x0, 0x100000, 0x1, 0x1, 0x28}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000440))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x8a4, 0x0, 0x1, 0x0, 0x0)
io_uring_enter(r0, 0x1328, 0xeb71, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0xc30e, 0x6], 0x2)

9m33.423815099s ago: executing program 0 (id=2393):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x2, 0x3, 0xff)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
read$FUSE(r3, &(0x7f0000001900)={0x2020}, 0x2020)

9m32.585932067s ago: executing program 49 (id=2393):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x2, 0x3, 0xff)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
read$FUSE(r3, &(0x7f0000001900)={0x2020}, 0x2020)

5m23.688445069s ago: executing program 2 (id=3375):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r2, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r1, 0x4, r1}, 0x10)

5m23.04948805s ago: executing program 2 (id=3378):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000280), 0x0, 0xfffffffffffffff8)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/80, 0x50, 0x0)
r4 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, &(0x7f0000000040))
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5218)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x21, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

5m18.991998191s ago: executing program 2 (id=3389):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0xfffc, 0x1008b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

5m14.984117983s ago: executing program 2 (id=3406):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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")
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x50, 0x0, 0x0, &(0x7f00000001c0)="92")
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0x140, 0x88)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
bind$llc(r0, &(0x7f0000000180)={0x1a, 0x323, 0xa8, 0x2, 0x10, 0xfb, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x8007, 0x0, 0x0, 0x14, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x40000000000000]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143, 0x0)

5m12.52783943s ago: executing program 2 (id=3419):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000b00)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

5m9.907725432s ago: executing program 2 (id=3430):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080))
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
set_mempolicy(0x2, &(0x7f0000000140)=0x8041, 0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
syz_read_part_table(0x5ff, &(0x7f0000000000)="$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")
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)

5m9.33011405s ago: executing program 50 (id=3430):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080))
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
set_mempolicy(0x2, &(0x7f0000000140)=0x8041, 0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
syz_read_part_table(0x5ff, &(0x7f0000000000)="$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")
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)

4m9.930980741s ago: executing program 7 (id=3714):
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

4m9.711406564s ago: executing program 7 (id=3716):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00')
readv(r3, &(0x7f0000000780)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1)

4m8.627437584s ago: executing program 7 (id=3717):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)

4m8.265359125s ago: executing program 7 (id=3719):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000004c0)=""/232, 0x3a, 0xe8, 0x1}, 0x28)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0xff, 0x2, 0xb, 0x6, 0xfffffff0, 0x9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c00000040000000000000000800000014c0aad1935d8ab6c3fc58126f3a91adbdb48c03d56f1f692209f93ae183d9727b64659ffd0e3152fc0f07706097408c5ac941a7657428577a21fe9c02bf54fb3bb78203b4e28d6d41210e5dbd2e17a7179720effbeae21b3021020415fe8cbedd3551593343a06b80334b21a6ec07cae2812da7b9f694cad34ce95b8a8e352314bf34135ae0cfd3a76ed7363aa95312b5b9aa6325cc0b2ff3d836fc2bd8eeffcfc42e45d41aeccd8f318abd47c7584af0b99764f50394700755ddc69fc0e076178d57083669b45bfbb065e99465", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000"], 0x40}, 0x0)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20)
inotify_rm_watch(r5, r6)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, 0x0, 0x31}, 0x28)

4m7.075621961s ago: executing program 7 (id=3721):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000240)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x80})
io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0)

4m5.924781673s ago: executing program 7 (id=3724):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x4}]}, 0x3c}}, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
shutdown(r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000041000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
listen(r2, 0x7)
accept$unix(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900000001000390428bde6f57000e4ffffff000003e4", @ANYRES32=0x0, @ANYBLOB="43020000cb1d0700700018802c0001801400050078fe4556b36aa34cdca3b834d6425e0814000400b2f811cb7cf283d90c95de8ab97beedf400001800b0002002125e5297d4c000005000600080000000800010004000000140004008f5c6ca5a678157420d4f9b532d868ad0c0002006ef02c23272b2900"], 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x68}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4010)

3m50.787170279s ago: executing program 51 (id=3724):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x4}]}, 0x3c}}, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
shutdown(r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000041000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
listen(r2, 0x7)
accept$unix(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900000001000390428bde6f57000e4ffffff000003e4", @ANYRES32=0x0, @ANYBLOB="43020000cb1d0700700018802c0001801400050078fe4556b36aa34cdca3b834d6425e0814000400b2f811cb7cf283d90c95de8ab97beedf400001800b0002002125e5297d4c000005000600080000000800010004000000140004008f5c6ca5a678157420d4f9b532d868ad0c0002006ef02c23272b2900"], 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x68}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4010)

13.710171015s ago: executing program 5 (id=4787):
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
socket(0x10, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

13.390040749s ago: executing program 1 (id=4789):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d0040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100000000000000"], 0x120}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

13.220582342s ago: executing program 5 (id=4790):
socket$inet6(0xa, 0x5, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd)
r1 = dup(r0)
syz_clone(0x100, &(0x7f0000000140), 0x0, &(0x7f0000000200), 0x0, 0x0)
write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x800}}, 0x18)
ioctl$TCFLSH(r0, 0x540b, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x3, &(0x7f0000003fc0)={0x40, 0x5ac, 0x80000000})

12.634749167s ago: executing program 4 (id=4791):
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x102, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4812}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bind$rose(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
socket(0x2a, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
poll(&(0x7f00000001c0)=[{r1, 0x400}], 0x1, 0x2)
socket(0x10, 0x80002, 0x0)

12.547179699s ago: executing program 1 (id=4792):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000cc0))

12.040296739s ago: executing program 5 (id=4794):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
fgetxattr(r5, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000340)="18000000010003", 0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
shutdown(r6, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)

10.442696705s ago: executing program 1 (id=4796):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
fgetxattr(r4, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000340)="18000000010003", 0x7)

10.337697525s ago: executing program 9 (id=4797):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)

9.615723102s ago: executing program 5 (id=4799):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100f, 0x1}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

8.626908864s ago: executing program 9 (id=4800):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x2, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000780)={{<r6=>0x0, 0x1, 0x8, 0x7f, 0xe4f8, 0x7ff, 0x7, 0x8, 0x0, 0x3, 0x0, 0x0, 0x180a6eac, 0x200, 0x2}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001780)={r5, r6, "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", "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"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)

8.512323947s ago: executing program 1 (id=4801):
mknod$loop(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0xa, 0x0, 0x7, 0xfffffffffffffff8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x9, 0xf5, &(0x7f0000000480)=""/245, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='afs_flock_op\x00', r2, 0x0, 0x9}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ustat(0x800005, 0x0)
read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x4000000)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100)
lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2)

8.194853392s ago: executing program 5 (id=4803):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000feffffff000000000000000018010000514f72f600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000b7080000000000007baaf8ff00000000b5080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000004c0)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

6.601173875s ago: executing program 4 (id=4804):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2a, {0x0, "4b016fc813c813ade53ade55f4c671297d01"}}, @nested_vmlaunch={0x12f, 0x18}], 0x72})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.556223482s ago: executing program 3 (id=4805):
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001000000039"], 0x0, 0x2a}, 0x28)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000100), 0x3d)

6.427578093s ago: executing program 9 (id=4806):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000cc0))

6.412764551s ago: executing program 1 (id=4807):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_writeback}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000780)={@id={0x2, 0x0, @a}})
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x3)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x301)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, 0x20}}, 0x40010)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000007c0)={0x200, 0x3, 0x2, 0xe111, 0x19, "4e044c3e5fa89b4f2908ea1668e0532b9802e2"})

6.299586996s ago: executing program 3 (id=4808):
mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200008, 0x0)

6.156351275s ago: executing program 3 (id=4809):
munmap(&(0x7f0000c01000/0x1000)=nil, 0x1000)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000440)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4002, 0x548803b5, 0x300000, 0x4000000000000001}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x80})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.964255511s ago: executing program 4 (id=4810):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)

5.713144018s ago: executing program 3 (id=4811):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x2, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mlockall(0x2)
r7 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r7, 0xb)
shmat(r7, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r7, 0xc)
io_uring_enter(r3, 0x4e14, 0x912a, 0x41, 0x0, 0x0)

4.926458809s ago: executing program 4 (id=4812):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1)

4.925360577s ago: executing program 9 (id=4813):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100f, 0x1}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

4.355666192s ago: executing program 5 (id=4814):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0xff, 0x2, 0xb, 0x6, 0xfffffff0, 0x9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c00000040000000000000000800000014c0aad1935d8ab6c3fc58126f3a91adbdb48c03d56f1f692209f93ae183d9727b64659ffd0e3152fc0f07706097408c5ac941a7657428577a21fe9c02bf54fb3bb78203b4e28d6d41210e5dbd2e17a7179720effbeae21b3021020415fe8cbedd3551593343a06b80334b21a6ec07cae2812da7b9f694cad34ce95b8a8e352314bf34135ae0cfd3a76ed7363aa95312b5b9aa6325cc0b2ff3d836fc2bd8eeffcfc42e45d41aeccd8f318abd47c7584af0b99764f50394700755ddc69fc0e076178d57083669b45bfbb065e99465", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000"], 0x40}, 0x0)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20)
inotify_rm_watch(r5, r6)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, 0x0, 0x31}, 0x28)

3.352446389s ago: executing program 4 (id=4815):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$igmp6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0)

2.730516216s ago: executing program 1 (id=4816):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000002540)=ANY=[@ANYBLOB='b'])

2.479504911s ago: executing program 9 (id=4817):
mknod$loop(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0xa, 0x0, 0x7, 0xfffffffffffffff8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x9, 0xf5, &(0x7f0000000480)=""/245, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='afs_flock_op\x00', r2, 0x0, 0x9}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ustat(0x800005, 0x0)
read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x4000000)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100)
lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2)

1.642392799s ago: executing program 3 (id=4818):
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001000000039"], 0x0, 0x2a}, 0x28)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120)

732.519946ms ago: executing program 9 (id=4819):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x4)
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000040))

40.067938ms ago: executing program 3 (id=4820):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000feffffff000000000000000018010000514f72f600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000b7080000000000007baaf8ff00000000b5080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

0s ago: executing program 4 (id=4821):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000972000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x188, 0x0, 0xd63800}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.574924][ T5905] usb 3-1: Product: syz
[  761.595276][ T5905] usb 3-1: Manufacturer: syz
[  761.601708][ T5905] usb 3-1: SerialNumber: syz
[  761.611645][ T5905] usb 3-1: config 0 descriptor??
[  761.650523][ T5905] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  763.527532][ T5897] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  763.710496][T18317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3236'.
[  763.789228][ T5897] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  763.808644][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.836940][ T5897] usb 5-1: config 0 descriptor??
[  763.873681][ T5897] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  764.149525][ T5897] gspca_sn9c2028: read1 error -32
[  764.177083][ T5897] gspca_sn9c2028: read1 error -32
[  764.431990][ T5905] gspca_stk1135: reg_w 0x2ff err -71
[  764.772414][T18330] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  764.772727][ T5897] gspca_sn9c2028: read1 error -71
[  764.898001][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  764.904412][ T5905] gspca_stk1135: Sensor write failed
[  764.918041][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  764.924802][ T5905] gspca_stk1135: Sensor write failed
[  764.936737][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  764.943158][ T5905] gspca_stk1135: Sensor read failed
[  764.955348][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  764.958593][ T5897] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71
[  764.966520][ T5905] gspca_stk1135: Sensor read failed
[  764.975091][ T5905] gspca_stk1135: Detected sensor type unknown (0x0)
[  765.014020][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  765.027890][ T5897] usb 5-1: USB disconnect, device number 5
[  765.052276][ T5905] gspca_stk1135: Sensor read failed
[  765.086456][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  765.099472][T18335] netlink: 840 bytes leftover after parsing attributes in process `syz.1.3239'.
[  765.115895][ T5905] gspca_stk1135: Sensor read failed
[  765.135859][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  765.151744][ T5905] gspca_stk1135: Sensor write failed
[  765.165764][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  765.186676][ T5905] gspca_stk1135: Sensor write failed
[  765.208241][ T5905] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  765.246559][ T5905] usb 3-1: USB disconnect, device number 15
[  766.204039][ T5905] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  766.330253][T18368] 9pnet_virtio: no channels available for device syz
[  766.369614][ T5905] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  766.391552][ T5905] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  766.411883][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.498803][ T5905] usb 8-1: config 0 descriptor??
[  766.529087][ T5905] pwc: Askey VC010 type 2 USB webcam detected.
[  766.603818][ T5839] Bluetooth: hci3: unexpected event for opcode 0x2024
[  766.938472][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00
[  766.977619][ T5905] pwc: recv_control_msg error -32 req 02 val 2700
[  767.199742][ T5905] pwc: recv_control_msg error -71 req 04 val 1000
[  767.500305][ T5905] pwc: recv_control_msg error -71 req 04 val 1300
[  767.507693][ T5905] pwc: recv_control_msg error -71 req 04 val 1400
[  767.521028][ T5905] pwc: recv_control_msg error -71 req 02 val 2000
[  767.528620][ T5905] pwc: recv_control_msg error -71 req 02 val 2100
[  767.535562][ T5905] pwc: recv_control_msg error -71 req 04 val 1500
[  767.549709][ T5905] pwc: recv_control_msg error -71 req 02 val 2500
[  767.579557][ T5905] pwc: recv_control_msg error -71 req 02 val 2400
[  767.621758][ T5905] pwc: recv_control_msg error -71 req 02 val 2600
[  767.636819][ T5905] pwc: recv_control_msg error -71 req 02 val 2900
[  767.657926][ T5905] pwc: recv_control_msg error -71 req 02 val 2800
[  767.675840][ T5905] pwc: recv_control_msg error -71 req 04 val 1100
[  767.716935][ T5905] pwc: recv_control_msg error -71 req 04 val 1200
[  767.889500][ T5905] pwc: Registered as video103.
[  768.419695][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input19
[  768.472901][ T5905] usb 8-1: USB disconnect, device number 7
[  771.692390][T18455] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  773.067594][T18493] binder: BINDER_SET_CONTEXT_MGR already set
[  773.074066][T18493] binder: 18490:18493 ioctl 4018620d 200000000040 returned -16
[  773.382512][T18506] netlink: 'syz.2.3292': attribute type 3 has an invalid length.
[  773.387232][T17640] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  773.415165][T18506] syz_tun: entered allmulticast mode
[  773.452905][T18504] syz_tun: left allmulticast mode
[  773.991440][T18513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  774.000015][T18513] syzkaller0: entered promiscuous mode
[  774.005641][T18513] syzkaller0: entered allmulticast mode
[  774.018360][T17640] usb 8-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  774.047069][T17640] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.087926][T18513] tipc: Resetting bearer <eth:syzkaller0>
[  774.094860][T17640] usb 8-1: config 0 descriptor??
[  774.109172][T18518] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  774.131466][T17640] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  774.196692][T18512] tipc: Resetting bearer <eth:syzkaller0>
[  774.317627][T18512] tipc: Disabling bearer <eth:syzkaller0>
[  774.356473][T17640] gspca_sn9c2028: read1 error -32
[  774.394549][T17640] gspca_sn9c2028: read1 error -32
[  774.415282][T17640] gspca_sn9c2028: read1 error -71
[  774.443568][T17640] sn9c2028 8-1:0.0: probe with driver sn9c2028 failed with error -71
[  774.489932][T17640] usb 8-1: USB disconnect, device number 8
[  774.986862][ T5992] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  775.162060][ T5992] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  775.217369][ T5992] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  775.820431][ T5992] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  775.830026][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.849801][ T5992] usb 3-1: config 0 descriptor??
[  776.588055][ T5897] usb 3-1: USB disconnect, device number 16
[  778.256884][ T5839] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  778.280918][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  778.280951][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  778.280966][ T5839] Workqueue: hci0 hci_rx_work
[  778.281004][ T5839] Call Trace:
[  778.281013][ T5839]  <TASK>
[  778.281024][ T5839]  dump_stack_lvl+0x189/0x250
[  778.281073][ T5839]  ? __pfx_dump_stack_lvl+0x10/0x10
[  778.281108][ T5839]  ? __pfx__printk+0x10/0x10
[  778.281141][ T5839]  ? kernfs_path_from_node+0x250/0x290
[  778.281171][ T5839]  ? kernfs_path_from_node+0x2f/0x290
[  778.281207][ T5839]  sysfs_create_dir_ns+0x259/0x280
[  778.281241][ T5839]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  778.281274][ T5839]  ? do_raw_spin_unlock+0x122/0x240
[  778.281304][ T5839]  kobject_add_internal+0x6ab/0xcc0
[  778.281351][ T5839]  kobject_add+0x155/0x220
[  778.281391][ T5839]  ? __pfx_kobject_add+0x10/0x10
[  778.281426][ T5839]  ? _raw_spin_unlock+0x3f/0x50
[  778.281456][ T5839]  ? get_device_parent+0x366/0x3a0
[  778.281493][ T5839]  device_add+0x408/0xb80
[  778.281534][ T5839]  hci_conn_add_sysfs+0xd5/0x210
[  778.281567][ T5839]  le_conn_complete_evt+0xf1d/0x1420
[  778.281603][ T5839]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  778.281624][ T5839]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  778.281665][ T5839]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  778.281695][ T5839]  ? skb_pull_data+0xfb/0x200
[  778.281729][ T5839]  hci_le_conn_complete_evt+0x187/0x480
[  778.281775][ T5839]  hci_event_packet+0x78f/0x1260
[  778.281810][ T5839]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  778.281862][ T5839]  ? __pfx_hci_event_packet+0x10/0x10
[  778.281900][ T5839]  ? kcov_remote_start+0x2e/0x7f0
[  778.281928][ T5839]  ? hci_send_to_monitor+0xe2/0x590
[  778.281956][ T5839]  hci_rx_work+0x3ee/0x1060
[  778.282001][ T5839]  ? process_one_work+0x868/0x15a0
[  778.282030][ T5839]  process_one_work+0x93a/0x15a0
[  778.282091][ T5839]  ? __pfx_process_one_work+0x10/0x10
[  778.282133][ T5839]  ? assign_work+0x3a1/0x410
[  778.282167][ T5839]  worker_thread+0x9b0/0xee0
[  778.282228][ T5839]  kthread+0x711/0x8a0
[  778.282253][ T5839]  ? __pfx_worker_thread+0x10/0x10
[  778.282282][ T5839]  ? __pfx_kthread+0x10/0x10
[  778.282306][ T5839]  ? _raw_spin_unlock_irq+0x23/0x50
[  778.282332][ T5839]  ? lockdep_hardirqs_on+0x98/0x140
[  778.282360][ T5839]  ? __pfx_kthread+0x10/0x10
[  778.282383][ T5839]  ret_from_fork+0x599/0xb30
[  778.282417][ T5839]  ? __pfx_ret_from_fork+0x10/0x10
[  778.282457][ T5839]  ? __switch_to_asm+0x39/0x70
[  778.282478][ T5839]  ? __switch_to_asm+0x33/0x70
[  778.282498][ T5839]  ? __pfx_kthread+0x10/0x10
[  778.282521][ T5839]  ret_from_fork_asm+0x1a/0x30
[  778.282566][ T5839]  </TASK>
[  778.282778][ T5839] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  778.560527][ T5839] Bluetooth: hci0: failed to register connection device
[  778.897538][T18610] bridge1: entered promiscuous mode
[  780.510763][T18658] loop2: detected capacity change from 0 to 1024
[  783.487674][   T52] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  783.499922][T18692] fuse: Unknown parameter 'fd0x0000000000000004'
[  784.038912][ T6113] hfsplus: b-tree write err: -5, ino 4
[  784.293751][T18711] wlan1 speed is unknown, defaulting to 1000
[  784.826905][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  787.605525][T18758] bridge0: entered promiscuous mode
[  787.781463][T18758] bridge0: port 3(vlan2) entered blocking state
[  787.842792][T18758] bridge0: port 3(vlan2) entered disabled state
[  787.899190][T18758] vlan2: entered allmulticast mode
[  787.948988][T18758] bridge0: entered allmulticast mode
[  788.115077][T18758] vlan2: left allmulticast mode
[  788.128244][T18758] bridge0: left allmulticast mode
[  788.310621][T18758] bridge0: left promiscuous mode
[  788.770816][T18755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  788.777991][T18759] syzkaller0: entered promiscuous mode
[  788.784023][T18759] syzkaller0: entered allmulticast mode
[  789.279272][T18766] tipc: Resetting bearer <eth:syzkaller0>
[  789.346805][T18753] tipc: Resetting bearer <eth:syzkaller0>
[  789.439028][T18753] tipc: Disabling bearer <eth:syzkaller0>
[  789.468580][T18780] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  789.618821][T18789] netlink: 'syz.1.3358': attribute type 2 has an invalid length.
[  790.008882][T18797] overlayfs: failed to clone upperpath
[  790.560184][T18805] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3365'.
[  791.269933][T18815] wlan1 speed is unknown, defaulting to 1000
[  792.096382][ T5897] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  792.276434][ T5897] usb 8-1: Using ep0 maxpacket: 32
[  792.287598][ T5897] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  792.369968][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  792.425771][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  792.469267][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  792.532939][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  792.603881][ T5897] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  792.644089][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.715217][ T5897] usb 8-1: Product: syz
[  792.735791][ T5897] usb 8-1: Manufacturer: syz
[  792.762882][ T5897] usb 8-1: SerialNumber: syz
[  792.808633][ T5897] usb 8-1: config 0 descriptor??
[  793.243561][ T5897] iforce 8-1:0.0: usb_submit_urb failed: -32
[  793.262126][ T5897] input input20: Device does not respond to id packet M
[  793.273707][ T5897] input input20: Device does not respond to id packet P
[  793.474376][ T5897] iforce 8-1:0.0: usb_submit_urb failed: -71
[  793.482618][ T5897] input input20: Device does not respond to id packet B
[  793.514011][ T5897] iforce 8-1:0.0: usb_submit_urb failed: -71
[  793.520842][ T5897] input input20: Device does not respond to id packet N
[  793.575072][ T5897] iforce 8-1:0.0: usb_submit_urb failed: -71
[  793.611588][ T5897] iforce 8-1:0.0: usb_submit_urb failed: -71
[  793.642636][ T5897] iforce 8-1:0.0: usb_submit_urb failed: -71
[  793.761085][ T5897] iforce 8-1:0.0: usb_submit_urb failed: -71
[  793.806265][ T5897] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input20
[  793.924556][ T5897] usb 8-1: USB disconnect, device number 9
[  795.195786][T18883] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  795.568765][T18883] bond1 (unregistering): Released all slaves
[  796.511692][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3381'.
[  796.592622][T18900] bridge_slave_1: left allmulticast mode
[  796.601703][T18900] bridge_slave_1: left promiscuous mode
[  796.610210][T18900] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.080950][T18900] bridge_slave_0: left allmulticast mode
[  797.186213][T18900] bridge_slave_0: left promiscuous mode
[  797.266999][T18900] bridge0: port 1(bridge_slave_0) entered disabled state
[  799.361511][T18905] wlan1 speed is unknown, defaulting to 1000
[  800.766086][T18957] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3396'.
[  801.316126][T18966] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  801.998913][T18984] loop7: detected capacity change from 0 to 256
[  802.130919][T18984] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  802.211359][   T31] audit: type=1800 audit(1764171879.497:45): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3402" name="file1" dev="loop7" ino=1048814 res=0 errno=0
[  802.259809][T18984] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  802.307010][T18984] FAT-fs (loop7): Filesystem has been set read-only
[  802.313886][T18984] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  802.324100][   T31] audit: type=1804 audit(1764171879.517:46): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3402" name="/newroot/155/file0/file1" dev="loop7" ino=1048814 res=1 errno=0
[  802.377921][T18984] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  802.407878][T18984] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  802.431556][T18984] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  802.451967][T18984] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  802.473487][T18989] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  802.524111][T18984] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  802.574887][T18984] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  802.621582][   T31] audit: type=1800 audit(1764171879.907:47): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3402" name="file1" dev="loop7" ino=1048814 res=0 errno=0
[  803.242415][T18993] loop2: detected capacity change from 0 to 32768
[  803.277613][T18998] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  803.285015][T18993] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3406 (18993)
[  803.300533][T18998] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  803.364738][T18993] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  803.425624][T18993] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  803.601269][T18998] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  803.628057][T18998] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  803.650940][T18993] BTRFS info (device loop2): enabling ssd optimizations
[  803.675807][T18993] BTRFS info (device loop2): turning on async discard
[  803.696882][T18993] BTRFS info (device loop2): enabling free space tree
[  803.823694][T18998] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  803.849082][T18998] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  804.020880][T18998] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  804.057544][T18998] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  804.362340][T19039] loop2: detected capacity change from 32768 to 64
[  804.415488][T19043] syz.2.3406: attempt to access beyond end of device
[  804.415488][T19043] loop2: rw=145409, sector=128, nr_sectors = 8 limit=64
[  804.514386][T19043] BTRFS warning (device loop2): lost super block write due to IO error on /dev/loop2 (-5)
[  804.550067][T19043] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  804.560945][T19043] BTRFS error (device loop2): 1 errors while writing supers
[  804.569214][T19043] BTRFS: error (device loop2) in write_all_supers:4072: errno=-5 IO failure (1 errors while writing supers)
[  804.583355][T19043] BTRFS info (device loop2 state E): forced readonly
[  804.707110][T19043] BTRFS error (device loop2 state EA): Transaction aborted (error -5)
[  804.883967][T19043] BTRFS: error (device loop2 state EA) in btrfs_sync_log:3576: errno=-5 IO failure
[  804.927718][ T5898] wlan1 speed is unknown, defaulting to 1000
[  804.934068][ T5898] syz0: Port: 1 Link DOWN
[  804.938751][T18998] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  804.944833][T18998] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  805.143415][T14899] BTRFS info (device loop2 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  807.207115][T19093] Can't find ip_set type hash:ip,po
[  807.370565][ T6064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.624736][ T6064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.761960][ T6064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.909458][ T6064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.927195][T19109] siw: device registration error -23
[  808.489464][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  808.497504][ T6064] bridge_slave_1: left allmulticast mode
[  808.507571][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  808.516116][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  808.526023][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  808.536378][ T6064] bridge_slave_1: left promiscuous mode
[  808.701876][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  809.160591][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.208534][ T6064] bridge_slave_0: left allmulticast mode
[  809.231954][ T6064] bridge_slave_0: left promiscuous mode
[  809.266637][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.277807][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  809.285233][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  809.292972][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  809.302703][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  809.311026][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  809.427146][T12112] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  809.596629][T12112] usb 5-1: Using ep0 maxpacket: 8
[  809.612241][T12112] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  809.633797][T12112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.648064][T12112] usb 5-1: Product: syz
[  809.652729][T12112] usb 5-1: Manufacturer: syz
[  809.664292][T12112] usb 5-1: SerialNumber: syz
[  809.678994][T12112] usb 5-1: config 0 descriptor??
[  809.806680][T19142] loop7: detected capacity change from 0 to 512
[  809.836584][T19142] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  809.860538][T19142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  809.893155][T19142] EXT4-fs (loop7): orphan cleanup on readonly fs
[  809.928224][T19142] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0
[  809.931129][T12112] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  809.938829][T19142] EXT4-fs warning (device loop7): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  809.962225][T19142] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  810.001480][T19142] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3443: bg 0: block 40: padding at end of block bitmap is not set
[  810.115828][T19142] EXT4-fs (loop7): Remounting filesystem read-only
[  810.130335][T19142] EXT4-fs (loop7): 1 truncate cleaned up
[  810.162662][T19142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  810.233560][T19142] EXT4-fs (loop7): shut down requested (2)
[  810.588819][T19150] siw: device registration error -23
[  810.760384][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.775246][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.787941][ T6064] bond0 (unregistering): Released all slaves
[  810.809449][T19153] netlink: 'syz.1.3448': attribute type 3 has an invalid length.
[  810.830988][T19153] lo: entered allmulticast mode
[  810.842274][T19151] lo: left allmulticast mode
[  810.885291][ T6064] tipc: Left network mode
[  810.899594][T19117] wlan1 speed is unknown, defaulting to 1000
[  811.321977][T12112] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  811.322562][T19163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3450'.
[  811.361660][T12112] usb 5-1: USB disconnect, device number 6
[  811.386569][ T5839] Bluetooth: hci2: command tx timeout
[  811.799232][T19117] chnl_net:caif_netlink_parms(): no params data found
[  811.959397][ T6064] hsr_slave_0: left promiscuous mode
[  811.970571][ T6064] hsr_slave_1: left promiscuous mode
[  811.983662][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  812.012004][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  812.041868][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  812.066107][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  812.146929][ T6064] veth1_macvtap: left promiscuous mode
[  812.171774][ T6064] veth0_macvtap: left promiscuous mode
[  812.210376][ T6064] veth1_vlan: left promiscuous mode
[  812.220232][ T6064] veth0_vlan: left promiscuous mode
[  813.442932][ T6064] team0 (unregistering): Port device team_slave_1 removed
[  813.447013][ T9109] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  813.476875][ T5839] Bluetooth: hci2: command tx timeout
[  813.517476][ T6064] team0 (unregistering): Port device team_slave_0 removed
[  813.617161][ T9109] usb 5-1: Using ep0 maxpacket: 32
[  813.625645][ T9109] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  813.652917][ T9109] usb 5-1: config 0 has no interface number 0
[  813.660219][ T9109] usb 5-1: config 0 interface 184 has no altsetting 0
[  813.683064][ T9109] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  813.694138][ T9109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.708864][T15528] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.715943][ T9109] usb 5-1: Product: syz
[  813.729359][ T9109] usb 5-1: Manufacturer: syz
[  813.734193][ T9109] usb 5-1: SerialNumber: syz
[  813.758118][ T9109] usb 5-1: config 0 descriptor??
[  813.840419][ T9109] smsc75xx v1.0.0
[  814.113754][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  814.288607][T19215] siw: device registration error -23
[  814.407566][ T9109] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  814.424244][ T9109] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  814.619809][T19186] netlink: 'syz.1.3458': attribute type 3 has an invalid length.
[  814.645851][T19196] lo: entered allmulticast mode
[  814.659963][T19196] lo: left allmulticast mode
[  814.905453][T19117] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.933332][T19117] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.965608][T19117] bridge_slave_0: entered allmulticast mode
[  814.982831][T19117] bridge_slave_0: entered promiscuous mode
[  815.044617][T19117] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.058553][T19117] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.066089][T19117] bridge_slave_1: entered allmulticast mode
[  815.079065][T19117] bridge_slave_1: entered promiscuous mode
[  815.249736][T19117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  815.296107][T19117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.533310][ T5839] Bluetooth: hci2: command tx timeout
[  816.643579][T19117] team0: Port device team_slave_0 added
[  817.209882][T19117] team0: Port device team_slave_1 added
[  817.402299][T19117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  817.511174][T19117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  817.568036][T19117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  817.601228][T19117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  817.614881][T19117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  817.641867][T19117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  817.753534][T19258] siw: device registration error -23
[  817.843001][T19117] hsr_slave_0: entered promiscuous mode
[  817.862956][T19117] hsr_slave_1: entered promiscuous mode
[  817.882218][T19117] debugfs: 'hsr0' already exists in 'hsr'
[  817.899301][T19117] Cannot create hsr debugfs directory
[  818.627226][ T5839] Bluetooth: hci2: command tx timeout
[  818.869959][ T9109] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71
[  818.891157][ T9109] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71
[  818.901770][ T9109] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  818.982653][ T9109] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  819.043224][ T9109] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  819.111821][ T9109] usb 5-1: USB disconnect, device number 7
[  820.430696][T19117] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  820.448979][T19117] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  820.480269][T19117] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  820.501048][T19117] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  821.028987][T19117] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.118841][T19117] 8021q: adding VLAN 0 to HW filter on device team0
[  821.209716][ T2050] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.217019][ T2050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.268491][ T2050] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.275742][ T2050] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.020354][T19117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  822.884866][T19117] veth0_vlan: entered promiscuous mode
[  822.927637][T19117] veth1_vlan: entered promiscuous mode
[  823.048372][T19117] veth0_macvtap: entered promiscuous mode
[  823.098729][T19117] veth1_macvtap: entered promiscuous mode
[  823.135019][T19117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  823.154198][T19117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  823.184008][ T2050] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  823.210183][ T2050] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  823.277166][ T2050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  823.298348][ T2050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  823.686572][  T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  823.745118][  T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  823.855519][ T5126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  823.890441][ T5126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.267646][  T982] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  826.598764][  T982] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  826.640387][  T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.700505][  T982] usb 6-1: config 0 descriptor??
[  826.740600][  T982] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  826.941048][  T982] gspca_sn9c2028: read1 error -32
[  826.970362][  T982] gspca_sn9c2028: read1 error -32
[  827.200370][ T9109] usb 6-1: USB disconnect, device number 7
[  829.106740][ T9109] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  829.297010][ T9109] usb 5-1: Using ep0 maxpacket: 8
[  829.311003][ T9109] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  829.387576][ T9109] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  829.408106][ T9109] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  829.453181][ T9109] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  829.526747][ T9109] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  829.556840][ T9109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.820635][ T9109] usb 5-1: usb_control_msg returned -32
[  829.847015][T19462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  829.882912][T19462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  830.316982][ T9109] usbtmc 5-1:16.0: can't read capabilities
[  830.405114][ T9109] usb 5-1: USB disconnect, device number 8
[  830.639520][T19498] wlan1 speed is unknown, defaulting to 1000
[  831.786647][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  832.178688][T19504] wlan1 speed is unknown, defaulting to 1000
[  834.033504][ T5897] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  834.236346][ T5897] usb 5-1: Using ep0 maxpacket: 8
[  834.247426][ T5897] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  834.299513][T19537] netlink: 'syz.9.3540': attribute type 4 has an invalid length.
[  834.326330][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  834.362631][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  834.403625][ T5897] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  834.503271][ T5897] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  834.533880][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.794742][ T5897] usb 5-1: GET_CAPABILITIES returned 0
[  834.813510][ T5897] usbtmc 5-1:16.0: can't read capabilities
[  835.028676][ T5897] usb 5-1: USB disconnect, device number 9
[  837.085428][T19583] netlink: 'syz.1.3554': attribute type 4 has an invalid length.
[  839.142744][T19602] wlan1 speed is unknown, defaulting to 1000
[  840.126406][T17565] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  840.536397][T17565] usb 6-1: Using ep0 maxpacket: 8
[  840.543412][T17565] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  840.560947][T17565] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  840.571527][T17565] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  840.581927][T17565] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  840.602065][T17565] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  840.611312][T17565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.852361][T17565] usb 6-1: GET_CAPABILITIES returned 0
[  840.886241][T17565] usbtmc 6-1:16.0: can't read capabilities
[  841.066524][ T9614] usb 6-1: USB disconnect, device number 8
[  841.313842][T19640] netlink: 'syz.7.3568': attribute type 4 has an invalid length.
[  842.638663][T19645] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  845.355266][T19679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.623894][T19679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.703022][T19688] wlan1 speed is unknown, defaulting to 1000
[  845.873988][T19679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.059185][T19703] xt_policy: neither incoming nor outgoing policy selected
[  846.221243][T19679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.269939][T19705] tipc: Started in network mode
[  846.274881][T19705] tipc: Node identity 8a502a515bc7, cluster identity 4711
[  846.295276][T19705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  846.399338][T19702] syzkaller0: entered promiscuous mode
[  846.416226][T19702] syzkaller0: entered allmulticast mode
[  846.434175][T19702] tipc: Resetting bearer <eth:syzkaller0>
[  846.445797][T19701] tipc: Resetting bearer <eth:syzkaller0>
[  846.477517][T19701] tipc: Disabling bearer <eth:syzkaller0>
[  846.631368][T10037] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  846.689878][T10037] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  846.745463][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  846.826213][T10037] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.042932][T19721] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  847.486726][T19736] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3589'.
[  847.564200][T19740] wlan1 speed is unknown, defaulting to 1000
[  847.741855][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'.
[  847.949129][T19753] wlan1 speed is unknown, defaulting to 1000
[  848.720630][T19782] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  848.831038][T19777] wlan1 speed is unknown, defaulting to 1000
[  848.915352][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3598'.
[  848.986349][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3598'.
[  849.971052][T19821] netlink: 'syz.7.3607': attribute type 10 has an invalid length.
[  849.994142][T19821] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3607'.
[  850.065680][T19821] team0: Port device geneve0 added
[  850.252472][T19829] wlan1 speed is unknown, defaulting to 1000
[  850.425642][T19835] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  850.958368][T12112] IPVS: starting estimator thread 0...
[  851.071156][T19856] IPVS: using max 30 ests per chain, 72000 per kthread
[  851.236796][T19854] Bluetooth: MGMT ver 1.23
[  851.319647][T19870] loop4: detected capacity change from 0 to 8
[  851.459956][T19875] netlink: 'syz.4.3623': attribute type 4 has an invalid length.
[  851.521271][T19879] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  852.021355][T19890] wlan1 speed is unknown, defaulting to 1000
[  852.309130][T19903] openvswitch: netlink: Message has 572 unknown bytes.
[  852.334965][T19903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  852.592471][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3636'.
[  852.626887][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3636'.
[  852.650480][T19912] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3637'.
[  852.670194][T19912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  852.678081][T19912] IPv6: NLM_F_CREATE should be set when creating new route
[  852.685447][T19912] IPv6: NLM_F_CREATE should be set when creating new route
[  854.198495][T19922] binder: 19918:19922 ioctl c0306201 200000000680 returned -14
[  854.286778][T19931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  854.326092][T19931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  854.609924][T19933] geneve2: entered promiscuous mode
[  854.629129][ T7469] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.667979][ T7469] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20002 - 0
[  854.691376][ T7469] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.731213][ T7469] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20002 - 0
[  854.767267][ T7469] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.806365][ T7469] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20002 - 0
[  854.816113][ T7469] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.875004][ T7469] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20002 - 0
[  855.843689][T19957] wlan1 speed is unknown, defaulting to 1000
[  856.278894][T19962] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  856.962476][T19992] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  857.413797][T19971] loop7: detected capacity change from 0 to 32768
[  857.450231][T19971] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3652 (19971)
[  857.527920][T19971] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  857.567979][T19971] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  857.609658][T20017] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  857.923251][T19971] BTRFS info (device loop7): enabling ssd optimizations
[  857.939115][T19971] BTRFS info (device loop7): turning on async discard
[  857.991695][T19971] BTRFS info (device loop7): enabling free space tree
[  858.283111][T20051] wlan1 speed is unknown, defaulting to 1000
[  858.866860][T15528] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  859.244028][T20056] netlink: 13 bytes leftover after parsing attributes in process `syz.9.3672'.
[  859.294624][T20056] netlink: 13 bytes leftover after parsing attributes in process `syz.9.3672'.
[  860.239614][T20081] syzkaller0: entered promiscuous mode
[  860.245259][T20081] syzkaller0: entered allmulticast mode
[  860.254912][T20085] fuse: Bad value for 'fd'
[  861.532261][T20124] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  861.620876][T20124] bond1 (unregistering): Released all slaves
[  861.682957][T20087] loop7: detected capacity change from 0 to 32768
[  861.702950][T20087] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3681 (20087)
[  861.809216][T20120] wlan1 speed is unknown, defaulting to 1000
[  861.823064][T20087] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  861.871518][T20087] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  862.181994][T20087] BTRFS info (device loop7): enabling ssd optimizations
[  862.244928][T20087] BTRFS info (device loop7): turning on async discard
[  862.292721][T20087] BTRFS info (device loop7): enabling free space tree
[  862.334531][T20150] loop5: detected capacity change from 0 to 4096
[  862.467983][T20150] NILFS (loop5): invalid segment: Checksum error in segment payload
[  862.538955][T20150] NILFS (loop5): trying rollback from an earlier position
[  862.599611][T20150] NILFS (loop5): invalid segment: Checksum error in segment payload
[  862.647094][T20150] NILFS (loop5): error -22 while searching super root
[  862.650054][T15528] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  863.999512][T20165] syzkaller0: entered promiscuous mode
[  864.005184][T20165] syzkaller0: entered allmulticast mode
[  866.640702][T20209] openvswitch: netlink: Actions may not be safe on all matching packets
[  867.009624][T20207] wlan1 speed is unknown, defaulting to 1000
[  867.728676][T20195] loop4: detected capacity change from 0 to 32768
[  868.487306][T20195] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3705 (20195)
[  868.538142][T20229] lo speed is unknown, defaulting to 1000
[  868.582440][T20232] ªªªªªª: renamed from lo
[  868.712357][T20229] ªªªªªª speed is unknown, defaulting to 1000
[  868.764520][T20229] ªªªªªª speed is unknown, defaulting to 1000
[  871.397352][T20265] syz_tun: entered promiscuous mode
[  871.617449][T20267] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3724'.
[  871.884950][T20229] infiniband s
z1: set down
[  871.938516][T20229] infiniband s
z1: added ªªªªªª
[  872.004155][T20229] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  872.033537][T20229] infiniband s
z1: Couldn't open port 1
[  872.144411][ T5941] ªªªªªª speed is unknown, defaulting to 1000
[  872.620138][T20229] RDS/IB: s
z1: added
[  872.624266][T20229] smc: adding ib device s
z1 with port count 1
[  872.630911][T20229] smc:    ib device s
z1 port 1 has no pnetid
[  872.637291][ T9614] ªªªªªª speed is unknown, defaulting to 1000
[  872.671585][T20229] ªªªªªª speed is unknown, defaulting to 1000
[  872.970765][T20289] wlan1 speed is unknown, defaulting to 1000
[  873.905872][T20229] ªªªªªª speed is unknown, defaulting to 1000
[  874.519093][T20289] ªªªªªª speed is unknown, defaulting to 1000
[  875.979555][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  876.340267][T20229] ªªªªªª speed is unknown, defaulting to 1000
[  877.155585][T20229] ªªªªªª speed is unknown, defaulting to 1000
[  877.624070][T20229] ªªªªªª speed is unknown, defaulting to 1000
[  877.970782][T20367] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  878.018072][T20367] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  878.319296][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3749'.
[  878.456218][ T5905] IPVS: starting estimator thread 0...
[  878.589372][T20381] IPVS: using max 37 ests per chain, 88800 per kthread
[  878.944137][T20380] wlan1 speed is unknown, defaulting to 1000
[  878.953034][T20380] ªªªªªª speed is unknown, defaulting to 1000
[  878.968909][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'.
[  879.006497][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'.
[  879.739900][T20410] loop5: detected capacity change from 0 to 8
[  879.898181][T20413] netlink: 'syz.5.3757': attribute type 4 has an invalid length.
[  880.737526][T20423] overlayfs: failed to resolve './file0': -2
[  880.781640][T20424] tipc: Started in network mode
[  880.786583][T20424] tipc: Node identity cace6a14f2c, cluster identity 4711
[  880.807273][T20424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  881.309775][T20424] syzkaller0: entered promiscuous mode
[  881.326591][T20424] syzkaller0: entered allmulticast mode
[  881.527313][T20436] tipc: Resetting bearer <eth:syzkaller0>
[  881.580142][T20422] tipc: Resetting bearer <eth:syzkaller0>
[  881.658729][T20422] tipc: Disabling bearer <eth:syzkaller0>
[  883.897295][T20478] netlink: 'syz.5.3770': attribute type 4 has an invalid length.
[  884.147442][T20471] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3769'.
[  884.328269][T20469] wlan1 speed is unknown, defaulting to 1000
[  884.432167][T20469] ªªªªªª speed is unknown, defaulting to 1000
[  884.810482][T20485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  884.828200][T20485] syzkaller0: entered promiscuous mode
[  884.833731][T20485] syzkaller0: entered allmulticast mode
[  884.885275][T20485] tipc: Resetting bearer <eth:syzkaller0>
[  884.924150][T20484] tipc: Resetting bearer <eth:syzkaller0>
[  885.016927][T20484] tipc: Disabling bearer <eth:syzkaller0>
[  885.140879][T20493] netlink: 'syz.5.3773': attribute type 1 has an invalid length.
[  885.277768][T20493] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  886.499706][T20510] gretap0: entered promiscuous mode
[  887.408588][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  887.421712][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  887.436089][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  887.449051][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  887.463217][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  887.590433][T20524] wlan1 speed is unknown, defaulting to 1000
[  887.622720][T20524] ªªªªªª speed is unknown, defaulting to 1000
[  888.034149][T20542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3782'.
[  888.065205][T20547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  888.112978][T20544] syzkaller0: entered promiscuous mode
[  888.129481][T20544] syzkaller0: entered allmulticast mode
[  888.255254][T20544] tipc: Resetting bearer <eth:syzkaller0>
[  888.283038][T20541] tipc: Resetting bearer <eth:syzkaller0>
[  888.389753][T20541] tipc: Disabling bearer <eth:syzkaller0>
[  889.547167][ T5839] Bluetooth: hci4: command tx timeout
[  889.653287][T20265] Set syz1 is full, maxelem 65536 reached
[  889.757587][T20573] openvswitch: netlink: Message has 4 unknown bytes.
[  889.785402][T20576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  889.803583][T20576] syzkaller0: entered promiscuous mode
[  889.824857][T20576] syzkaller0: entered allmulticast mode
[  889.939407][T20524] chnl_net:caif_netlink_parms(): no params data found
[  890.019471][T20575] tipc: Resetting bearer <eth:syzkaller0>
[  890.158692][T20575] tipc: Disabling bearer <eth:syzkaller0>
[  891.058371][T20524] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.065704][T20524] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.196590][T20524] bridge_slave_0: entered allmulticast mode
[  891.204679][T20524] bridge_slave_0: entered promiscuous mode
[  891.413627][T20524] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.454797][T20524] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.476126][T20524] bridge_slave_1: entered allmulticast mode
[  891.494467][T20524] bridge_slave_1: entered promiscuous mode
[  891.637913][ T5839] Bluetooth: hci4: command tx timeout
[  891.884423][ T3018] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.410539][ T3018] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.669914][T20524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  892.718814][T20633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  892.735793][T20524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  892.851168][ T3018] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.025198][T20634] syzkaller0: entered promiscuous mode
[  893.044032][T20634] syzkaller0: entered allmulticast mode
[  893.136166][T20627] tipc: Resetting bearer <eth:syzkaller0>
[  893.265557][T20627] tipc: Disabling bearer <eth:syzkaller0>
[  893.414529][ T3018] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.496518][T20524] team0: Port device team_slave_0 added
[  893.556679][T20524] team0: Port device team_slave_1 added
[  893.694145][T20656] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3807'.
[  893.717304][ T5839] Bluetooth: hci4: command tx timeout
[  893.788287][T20524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  893.795291][T20524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  893.939948][T20524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  893.990136][T20524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  894.001256][T20524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  894.028960][T20524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  895.789987][ T5839] Bluetooth: hci4: command tx timeout
[  896.050019][T20524] hsr_slave_0: entered promiscuous mode
[  896.063708][T20524] hsr_slave_1: entered promiscuous mode
[  896.081199][T20524] debugfs: 'hsr0' already exists in 'hsr'
[  896.087224][T20524] Cannot create hsr debugfs directory
[  896.095857][T20688] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  896.648185][T20705] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3821'.
[  897.421810][T20717] xt_hashlimit: size too large, truncated to 1048576
[  898.666139][ T3018] team0: Port device geneve0 removed
[  899.353462][T20749] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3832'.
[  899.372923][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  899.393835][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  899.409931][ T3018] bond0 (unregistering): Released all slaves
[  901.315914][T20775] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.3839'.
[  901.325516][T20775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3839'.
[  902.370941][ T3018] tipc: Left network mode
[  904.536990][T20798] autofs: Unknown parameter '00000000000000000000'
[  905.075859][T20793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  905.103736][T20799] syzkaller0: entered promiscuous mode
[  905.133797][T20799] syzkaller0: entered allmulticast mode
[  905.198376][T20791] tipc: Resetting bearer <eth:syzkaller0>
[  905.283279][T20790] tipc: Resetting bearer <eth:syzkaller0>
[  905.417504][T20790] tipc: Disabling bearer <eth:syzkaller0>
[  906.094087][T20832] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.3849'.
[  906.103680][T20832] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3849'.
[  906.902359][T17565] IPVS: starting estimator thread 0...
[  907.676648][T20838] IPVS: using max 24 ests per chain, 57600 per kthread
[  908.113459][ T3018] hsr_slave_0: left promiscuous mode
[  908.758097][ T3018] hsr_slave_1: left promiscuous mode
[  908.770572][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  908.797203][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0
[  908.895608][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  908.943311][T20855] autofs: Unknown parameter '00000000000000000000'
[  909.115838][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1
[  909.601525][ T3018] veth1_macvtap: left promiscuous mode
[  909.624510][ T3018] veth0_macvtap: left promiscuous mode
[  909.685875][ T3018] veth1_vlan: left promiscuous mode
[  909.743340][ T3018] veth0_vlan: left promiscuous mode
[  911.217706][T20878] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  911.533024][ T3018] team0 (unregistering): Port device team_slave_1 removed
[  911.629428][ T3018] team0 (unregistering): Port device team_slave_0 removed
[  912.657594][T20524] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  912.719928][T20524] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  913.138873][T20524] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  913.252243][T20895] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  913.368032][T20906] autofs: Unknown parameter '00000000000000000000'
[  913.870934][T20524] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  914.206896][T20919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  914.264402][T20919] tipc: Resetting bearer <eth:syzkaller0>
[  914.401405][T20918] tipc: Disabling bearer <eth:syzkaller0>
[  914.468623][T20926] netlink: 'syz.9.3873': attribute type 4 has an invalid length.
[  914.735661][T20940] netlink: 'syz.5.3866': attribute type 2 has an invalid length.
[  916.137422][T20524] 8021q: adding VLAN 0 to HW filter on device bond0
[  916.937817][T20524] 8021q: adding VLAN 0 to HW filter on device team0
[  917.021961][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.029194][ T7469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  917.082114][ T3071] bridge0: port 2(bridge_slave_1) entered blocking state
[  917.089394][ T3071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  917.457347][T20965] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  917.537076][T20965] bridge0: entered allmulticast mode
[  917.809945][T20975] netlink: 'syz.9.3885': attribute type 4 has an invalid length.
[  917.918358][T20978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  917.965932][T20978] tipc: Resetting bearer <eth:syzkaller0>
[  917.998868][T20981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3887'.
[  918.119780][T20977] tipc: Disabling bearer <eth:syzkaller0>
[  918.245613][T20524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  918.486259][T20524] veth0_vlan: entered promiscuous mode
[  918.525245][T20524] veth1_vlan: entered promiscuous mode
[  918.674930][T20524] veth0_macvtap: entered promiscuous mode
[  918.729132][T20524] veth1_macvtap: entered promiscuous mode
[  918.840943][T20524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  918.898214][T20524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  918.948052][ T3018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  918.984655][ T3018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  919.025807][ T3018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  919.061724][ T3018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  919.099761][T21017] netlink: 'syz.9.3897': attribute type 4 has an invalid length.
[  919.437483][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  919.473818][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  919.572639][T10037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  919.604459][T10037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  919.889440][T21032] netlink: 'syz.1.3898': attribute type 2 has an invalid length.
[  920.044957][T21039] openvswitch: netlink: Duplicate or invalid key (type 0).
[  920.076757][T21038] syz_tun: entered promiscuous mode
[  920.092508][T21039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  920.598423][T21052] loop5: detected capacity change from 0 to 8
[  920.880329][T21054] netlink: 'syz.5.3909': attribute type 4 has an invalid length.
[  921.323641][T21057] syzkaller0: entered promiscuous mode
[  921.341927][T21057] syzkaller0: entered allmulticast mode
[  922.607481][T21091] nbd0: detected capacity change from 0 to 127
[  922.637748][T21094] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3919'.
[  922.679426][ T5839] block nbd0: Receive control failed (result -104)
[  922.702369][T21098] syzkaller0: entered promiscuous mode
[  922.708863][T21098] syzkaller0: entered allmulticast mode
[  922.731924][T21098] 0: reclassify loop, rule prio 0, protocol 800
[  923.502774][T21123] loop4: detected capacity change from 0 to 8
[  923.775613][T21131] netlink: 'syz.4.3929': attribute type 4 has an invalid length.
[  924.858196][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3938'.
[  924.915898][T21153] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3938'.
[  925.002267][T21158] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  925.654085][T21177] openvswitch: netlink: Message has 592 unknown bytes.
[  925.685553][T21177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  925.700797][T21178] loop4: detected capacity change from 0 to 8
[  925.940279][T21180] netlink: 'syz.4.3946': attribute type 4 has an invalid length.
[  926.005748][   T25] block nbd0: Connection timed out, retrying (0/1 alive)
[  926.020885][   T25] block nbd0: Connection timed out, retrying (0/1 alive)
[  926.034944][   T25] block nbd0: Connection timed out, retrying (0/1 alive)
[  926.045423][   T25] block nbd0: Connection timed out, retrying (0/1 alive)
[  926.058372][   T25] block nbd0: Dead connection, failed to find a fallback
[  926.069458][   T25] block nbd0: shutting down sockets
[  926.076137][   T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.087174][   T25] Buffer I/O error on dev nbd0, logical block 3, async page read
[  926.099780][   T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.113165][   T25] Buffer I/O error on dev nbd0, logical block 2, async page read
[  926.122643][   T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.135030][   T25] Buffer I/O error on dev nbd0, logical block 1, async page read
[  926.144321][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.154129][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[  926.172056][T19132] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.192307][T19132] Buffer I/O error on dev nbd0, logical block 0, async page read
[  926.219058][T19132] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.235216][T19132] Buffer I/O error on dev nbd0, logical block 1, async page read
[  926.360110][T19132] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.539179][T19132] Buffer I/O error on dev nbd0, logical block 2, async page read
[  926.578472][T19132] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.644466][T19132] Buffer I/O error on dev nbd0, logical block 3, async page read
[  926.678375][T19132] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.696030][T19132] Buffer I/O error on dev nbd0, logical block 0, async page read
[  926.725675][T21191] syzkaller0: entered promiscuous mode
[  926.735573][T19132] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  926.756916][T21191] syzkaller0: entered allmulticast mode
[  926.948651][T21196] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  927.007429][T19132] Buffer I/O error on dev nbd0, logical block 1, async page read
[  927.028241][T19132] ldm_validate_partition_table(): Disk read failed.
[  927.334725][T19132] Dev nbd0: unable to read RDB block 0
[  927.715017][T19132]  nbd0: unable to read partition table
[  927.818677][T19132] ldm_validate_partition_table(): Disk read failed.
[  927.874027][T19132] Dev nbd0: unable to read RDB block 0
[  927.921261][T19132]  nbd0: unable to read partition table
[  928.186889][T21217] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3958'.
[  928.570647][T21232] loop5: detected capacity change from 0 to 8
[  928.754435][T21235] netlink: 'syz.5.3963': attribute type 4 has an invalid length.
[  928.882029][T21234] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  929.835014][T21250] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  931.207317][T21273] loop5: detected capacity change from 0 to 8
[  931.557559][T21280] netlink: 'syz.5.3975': attribute type 4 has an invalid length.
[  932.270040][T21290] syzkaller0: entered promiscuous mode
[  932.288835][T21290] syzkaller0: entered allmulticast mode
[  932.539236][T21301] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  933.249059][T21321] loop4: detected capacity change from 0 to 8
[  933.272031][T21038] Set syz1 is full, maxelem 65536 reached
[  933.511772][T21324] netlink: 'syz.4.3987': attribute type 4 has an invalid length.
[  934.085757][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'.
[  934.221647][T21336] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  934.542815][T21353] openvswitch: netlink: Message has 4 unknown bytes.
[  934.567103][T21342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  934.680712][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3999'.
[  935.186434][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4006'.
[  935.488465][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4009'.
[  935.517627][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4009'.
[  935.528110][T21404] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4012'.
[  935.989989][T21417] loop5: detected capacity change from 0 to 1024
[  936.018365][T21417] EXT4-fs: inline encryption not supported
[  936.024261][T21417] EXT4-fs: Ignoring removed orlov option
[  936.076086][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4019'.
[  936.096796][T21417] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  936.117469][T21421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  936.124938][T21421] batman_adv: batadv0: Removing interface: batadv_slave_0
[  936.190917][T21417] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  936.231076][T21421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  936.238955][T21417] System zones: 0-1, 3-12
[  936.263791][T21421] batman_adv: batadv0: Removing interface: batadv_slave_1
[  936.268700][T21417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  936.645963][T21432] xt_policy: neither incoming nor outgoing policy selected
[  936.800306][T21432] input: syz1 as /devices/virtual/input/input21
[  936.993987][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  937.049547][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4021'.
[  937.287686][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4024'.
[  937.310379][T21443] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4025'.
[  937.577770][T21451] bridge_slave_0: left allmulticast mode
[  937.583523][T21451] bridge_slave_0: left promiscuous mode
[  937.623429][   T31] audit: type=1326 audit(1764172014.907:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21416 comm="syz.5.4018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f52f8f749 code=0x0
[  937.632658][T21451] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.713207][T21451] bridge_slave_1: left allmulticast mode
[  937.731972][T21451] bridge_slave_1: left promiscuous mode
[  937.746751][T21451] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.785693][T21451] bond0: (slave bond_slave_0): Releasing backup interface
[  937.831567][T21451] bond0: (slave bond_slave_1): Releasing backup interface
[  937.930238][T21451] team0: Port device team_slave_0 removed
[  937.968234][T21451] team0: Port device team_slave_1 removed
[  937.979451][T21451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  937.996099][T21456] netlink: 'syz.1.4030': attribute type 13 has an invalid length.
[  938.877542][T21477] openvswitch: netlink: Message has 4 unknown bytes.
[  939.191921][T21467] binder: 21466:21467 ioctl c0306201 200000000680 returned -14
[  940.038391][T19117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.266152][T21499] __nla_validate_parse: 5 callbacks suppressed
[  940.266175][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4045'.
[  940.277365][T21502] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4050'.
[  940.313964][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'.
[  940.355697][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'.
[  940.376734][ T5905] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  940.459573][T21508] tipc: Can't bind to reserved service type 2
[  940.471015][T21504] wlan1 speed is unknown, defaulting to 1000
[  940.484699][T21504] ªªªªªª speed is unknown, defaulting to 1000
[  940.548153][ T5905] usb 4-1: unable to get BOS descriptor or descriptor too short
[  940.562224][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4052'.
[  940.579270][ T5905] usb 4-1: not running at top speed; connect to a high speed hub
[  940.603135][ T5905] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  940.638999][ T5905] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  940.696506][ T5905] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  940.737000][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.763548][ T5905] usb 4-1: Product: syz
[  940.775510][ T5905] usb 4-1: Manufacturer: syz
[  940.800167][ T5905] usb 4-1: SerialNumber: syz
[  940.882055][T21519] wlan1 speed is unknown, defaulting to 1000
[  940.930754][T21521] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  941.078416][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.097626][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.105221][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.113355][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.133236][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.141315][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.150009][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.158075][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.174417][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.182137][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.190218][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  941.198232][ T5905] usb 4-1: 0:2 : does not exist
[  941.284117][ T5905] usb 4-1: USB disconnect, device number 6
[  941.459370][T19132] udevd[19132]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  941.589129][T21519] ªªªªªª speed is unknown, defaulting to 1000
[  942.027529][T21542] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  942.658592][T21558] syzkaller0: entered promiscuous mode
[  942.664899][T21558] syzkaller0: entered allmulticast mode
[  943.090975][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4068'.
[  946.113271][T21633] ªªªªªª speed is unknown, defaulting to 1000
[  946.454659][T21640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4097'.
[  948.387187][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4108'.
[  948.695580][T21670] syz_tun: entered allmulticast mode
[  948.719044][T21670] syz_tun: left allmulticast mode
[  949.210360][T21684] openvswitch: netlink: Message has 4 unknown bytes.
[  949.381750][T21690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  949.394904][T21690] tipc: Resetting bearer <eth:syzkaller0>
[  949.497563][T21689] tipc: Disabling bearer <eth:syzkaller0>
[  949.509326][T21696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4123'.
[  949.697588][T21705] openvswitch: netlink: Message has 592 unknown bytes.
[  949.729020][T21705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  949.910013][T21712] openvswitch: netlink: Message has 4 unknown bytes.
[  950.375875][T21724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4134'.
[  950.618891][T21728] wlan1 speed is unknown, defaulting to 1000
[  950.631183][T21728] wlan1 speed is unknown, defaulting to 1000
[  950.641684][T21728] wlan1 speed is unknown, defaulting to 1000
[  950.674488][T21728] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  950.703687][T21730] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2
[  950.767737][T21728] wlan1 speed is unknown, defaulting to 1000
[  950.831649][T21733] bridge0: entered promiscuous mode
[  950.845133][T21733] bridge0: port 3(macvtap1) entered blocking state
[  950.867466][T21733] bridge0: port 3(macvtap1) entered disabled state
[  950.874368][T21733] macvtap1: entered allmulticast mode
[  950.891279][T21733] bridge0: entered allmulticast mode
[  950.899683][T21733] macvtap1: left allmulticast mode
[  950.905049][T21733] bridge0: left allmulticast mode
[  950.918642][T21738] openvswitch: netlink: Message has 592 unknown bytes.
[  950.927025][T21738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  950.931564][T21733] bridge0: left promiscuous mode
[  951.025298][T21728] wlan1 speed is unknown, defaulting to 1000
[  951.041265][T21728] wlan1 speed is unknown, defaulting to 1000
[  951.075126][T21728] wlan1 speed is unknown, defaulting to 1000
[  951.099625][T21742] openvswitch: netlink: Message has 4 unknown bytes.
[  951.109341][T21728] wlan1 speed is unknown, defaulting to 1000
[  952.847398][T21769] openvswitch: netlink: Message has 592 unknown bytes.
[  952.867814][T21769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  954.522536][T21794] net_ratelimit: 1 callbacks suppressed
[  954.522558][T21794] openvswitch: netlink: Message has 592 unknown bytes.
[  954.596960][T21794] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  954.613852][T21798] openvswitch: netlink: Message has 4 unknown bytes.
[  956.815785][T21828] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4175'.
[  956.978314][T21830] openvswitch: netlink: Message has 4 unknown bytes.
[  958.547480][T21848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4183'.
[  959.604882][T21862] openvswitch: netlink: Message has 4 unknown bytes.
[  959.625679][ T5918] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  959.725821][T21864] vlan2: entered promiscuous mode
[  959.963987][ T5918] usb 5-1: device descriptor read/64, error -71
[  960.692901][T21879] openvswitch: netlink: Message has 592 unknown bytes.
[  960.734979][T21879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  960.876671][ T5918] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  961.061641][T21895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4199'.
[  961.099097][T21896] openvswitch: netlink: Message has 4 unknown bytes.
[  961.210787][ T5918] usb 5-1: device descriptor read/64, error -71
[  961.508713][ T5918] usb usb5-port1: attempt power cycle
[  962.241837][T21914] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4207'.
[  962.335182][T21920] openvswitch: netlink: Message has 592 unknown bytes.
[  962.352120][T21920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  963.997065][T21954] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4222'.
[  964.173948][T21956] openvswitch: netlink: Message has 592 unknown bytes.
[  964.199706][T21956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  964.927901][T21988] xt_hashlimit: max too large, truncated to 1048576
[  965.066356][T21989] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.4229'.
[  965.075620][T21989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4229'.
[  965.871846][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4240'.
[  965.906818][  T982] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  966.057014][  T982] usb 6-1: device descriptor read/64, error -71
[  966.135346][T22011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4242'.
[  966.269799][T22014] netlink: 'syz.9.4246': attribute type 3 has an invalid length.
[  966.290094][T22014] netlink: 'syz.9.4246': attribute type 3 has an invalid length.
[  966.317489][  T982] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  966.496779][  T982] usb 6-1: device descriptor read/64, error -71
[  966.621824][  T982] usb usb6-port1: attempt power cycle
[  967.016744][  T982] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  967.523536][  T982] usb 6-1: device descriptor read/8, error -71
[  967.876988][  T982] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  967.927520][  T982] usb 6-1: device descriptor read/8, error -71
[  968.040034][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4257'.
[  968.058244][  T982] usb usb6-port1: unable to enumerate USB device
[  968.254140][T22053] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4260'.
[  968.391110][T22053] "syz.9.4260" (22053) uses obsolete ecb(arc4) skcipher
[  968.689956][T22067] veth3: entered promiscuous mode
[  970.742924][T22121] syzkaller0: entered promiscuous mode
[  970.816523][T22121] syzkaller0: entered allmulticast mode
[  971.606962][T22144] binder: BINDER_SET_CONTEXT_MGR already set
[  971.624813][T22144] binder: 22118:22144 ioctl 4018620d 2000000002c0 returned -16
[  972.117003][T22157] siw: device registration error -23
[  972.207005][T22158] netlink: 'syz.3.4286': attribute type 2 has an invalid length.
[  972.707540][T22164] syz_tun: entered promiscuous mode
[  972.795322][T22170] netlink: 'syz.9.4298': attribute type 1 has an invalid length.
[  973.474557][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4301'.
[  973.893357][T22194] siw: device registration error -23
[  974.134239][ T5897] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  974.286720][T22207] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.4306'.
[  974.295960][T22207] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4306'.
[  974.827513][ T5897] usb 4-1: device descriptor read/64, error -71
[  975.016865][T22211] syz_tun: entered promiscuous mode
[  975.066680][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  975.226384][ T5897] usb 4-1: device descriptor read/64, error -71
[  975.350812][T22221] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4313'.
[  975.357736][ T5897] usb usb4-port1: attempt power cycle
[  975.452949][T22209] binder: BINDER_SET_CONTEXT_MGR already set
[  975.470207][T22209] binder: 22208:22209 ioctl 4018620d 2000000002c0 returned -16
[  975.491462][T22225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4315'.
[  975.637476][T22231] siw: device registration error -23
[  975.716802][ T5897] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  975.747165][ T5897] usb 4-1: device descriptor read/8, error -71
[  976.676354][ T5897] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  976.707422][ T5897] usb 4-1: device descriptor read/8, error -71
[  976.826795][ T5897] usb usb4-port1: unable to enumerate USB device
[  977.103299][T22254] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.4324'.
[  977.112983][T22254] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4324'.
[  978.038871][T22256] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4326'.
[  978.152034][T22261] openvswitch: netlink: Message has 584 unknown bytes.
[  978.181508][T22261] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  978.446436][   T31] audit: type=1326 audit(1764172055.727:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9723865e7 code=0x7ffc0000
[  978.526426][   T31] audit: type=1326 audit(1764172055.757:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97232b829 code=0x7ffc0000
[  978.550784][   T31] audit: type=1326 audit(1764172055.757:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9723865e7 code=0x7ffc0000
[  978.753338][   T31] audit: type=1326 audit(1764172055.757:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97232b829 code=0x7ffc0000
[  978.777003][   T31] audit: type=1326 audit(1764172055.757:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9723865e7 code=0x7ffc0000
[  978.809359][   T31] audit: type=1326 audit(1764172055.757:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97232b829 code=0x7ffc0000
[  979.049998][T22286] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.4335'.
[  979.059225][T22286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4335'.
[  979.807817][   T31] audit: type=1326 audit(1764172055.757:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9723865e7 code=0x7ffc0000
[  979.832400][   T31] audit: type=1326 audit(1764172055.757:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97232b829 code=0x7ffc0000
[  980.237476][   T31] audit: type=1326 audit(1764172055.757:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9723865e7 code=0x7ffc0000
[  980.260669][   T31] audit: type=1326 audit(1764172055.757:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97232b829 code=0x7ffc0000
[  981.687416][T22302] openvswitch: netlink: Message has 584 unknown bytes.
[  981.694402][T22302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  983.449164][T22333] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.4348'.
[  983.458423][T22333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4348'.
[  985.226486][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  985.247373][T22352] openvswitch: netlink: Message has 584 unknown bytes.
[  985.272101][T22352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  985.495607][T22360] loop4: detected capacity change from 0 to 512
[  985.572834][T22360] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  985.617266][T22360] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  985.705104][T22360] EXT4-fs (loop4): orphan cleanup on readonly fs
[  985.753032][T22360] __quota_error: 19 callbacks suppressed
[  985.753065][T22360] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  985.802871][T22360] EXT4-fs warning (device loop4): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  985.820648][T22360] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  986.404086][T22370] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.4361'.
[  986.413932][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4361'.
[  986.899923][T22373] vxfs: WRONG superblock magic 00000000 at 1
[  986.908482][T22373] vxfs: WRONG superblock magic 00000000 at 8
[  986.914565][T22373] vxfs: can't find superblock.
[  986.934272][T22360] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4360: bg 0: block 40: padding at end of block bitmap is not set
[  987.251609][T22374] siw: device registration error -23
[  987.257382][T22360] EXT4-fs (loop4): Remounting filesystem read-only
[  987.369277][T22360] EXT4-fs (loop4): 1 truncate cleaned up
[  987.424536][T22360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  987.492377][T22360] EXT4-fs (loop4): shut down requested (2)
[  989.135169][T14841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  989.199798][T22391] openvswitch: netlink: Message has 584 unknown bytes.
[  989.233466][T22391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  991.723973][T22420] loop5: detected capacity change from 0 to 512
[  991.794908][T22420] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  991.833330][T22420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  991.842231][T22420] EXT4-fs (loop5): orphan cleanup on readonly fs
[  991.850684][T22420] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  991.861161][T22420] EXT4-fs warning (device loop5): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  991.876424][T22420] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  991.884259][T22420] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4379: bg 0: block 40: padding at end of block bitmap is not set
[  991.903006][T22420] EXT4-fs (loop5): Remounting filesystem read-only
[  991.910521][T22420] EXT4-fs (loop5): 1 truncate cleaned up
[  991.918466][T22420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  991.946497][T22420] EXT4-fs (loop5): shut down requested (2)
[  992.269168][T22429] openvswitch: netlink: Message has 584 unknown bytes.
[  992.276173][T22429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  992.618525][T19117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  996.053830][T22466] siw: device registration error -23
[  996.117154][   T31] audit: type=1326 audit(1764172073.407:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22467 comm="syz.3.4395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f417b58f749 code=0x0
[  996.213456][T22476] netlink: 'syz.4.4398': attribute type 1 has an invalid length.
[  998.431225][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  998.980979][T19247] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  999.147851][T19247] usb 6-1: Using ep0 maxpacket: 32
[  999.167237][T19247] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  999.224113][T19247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  999.236687][T19247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  999.255762][T19247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  999.270892][T19247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  999.289742][T19247] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  999.303273][T19247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.312843][T19247] usb 6-1: Product: syz
[  999.318346][T19247] usb 6-1: Manufacturer: syz
[  999.323287][T19247] usb 6-1: SerialNumber: syz
[  999.343812][T19247] usb 6-1: config 0 descriptor??
[ 1000.539360][T19247] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1000.545537][T19247] input input22: Device does not respond to id packet M
[ 1000.606778][T19247] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1000.612863][T19247] input input22: Device does not respond to id packet P
[ 1001.199081][T19247] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1001.205340][T19247] input input22: Device does not respond to id packet B
[ 1001.217897][T19247] iforce 6-1:0.0: usb_submit_urb failed: -71
[ 1001.224794][T19247] input input22: Device does not respond to id packet N
[ 1001.232935][T19247] iforce 6-1:0.0: usb_submit_urb failed: -71
[ 1001.239706][T19247] iforce 6-1:0.0: usb_submit_urb failed: -71
[ 1001.248022][T19247] iforce 6-1:0.0: usb_submit_urb failed: -71
[ 1001.255904][T19247] iforce 6-1:0.0: usb_submit_urb failed: -71
[ 1001.279017][T19247] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22
[ 1001.325540][T19247] usb 6-1: USB disconnect, device number 13
[ 1003.105817][T22332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1003.120539][T22332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1003.133436][T22332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1003.145237][T22332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1003.192026][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[ 1003.207850][T22332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1004.278322][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[ 1004.324971][T22558] ªªªªªª speed is unknown, defaulting to 1000
[ 1004.400875][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[ 1004.626130][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[ 1004.736782][T22580] Bluetooth: MGMT ver 1.23
[ 1005.308394][ T5839] Bluetooth: hci3: command tx timeout
[ 1005.472799][   T12] bridge_slave_1: left allmulticast mode
[ 1005.494255][   T12] bridge_slave_1: left promiscuous mode
[ 1005.526762][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.122705][   T12] bridge_slave_0: left allmulticast mode
[ 1006.147176][   T12] bridge_slave_0: left promiscuous mode
[ 1006.162786][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.206346][T19247] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[ 1006.367969][T19247] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[ 1006.386549][T19247] usb 5-1: config 5 has no interface number 0
[ 1006.392676][T19247] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[ 1006.441628][T19247] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1006.456733][T19247] usb 5-1: config 5 interface 123 has no altsetting 0
[ 1006.504342][T19247] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[ 1006.546155][T19247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.554335][T19247] usb 5-1: Product: syz
[ 1006.558890][T19247] usb 5-1: Manufacturer: syz
[ 1006.563521][T19247] usb 5-1: SerialNumber: syz
[ 1007.427593][ T5839] Bluetooth: hci3: command tx timeout
[ 1007.577420][T19247] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device.
[ 1007.636798][T19247] usb 5-1: USB disconnect, device number 13
[ 1007.700836][T22618] netlink: 1208 bytes leftover after parsing attributes in process `syz.4.4444'.
[ 1008.643124][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1008.710125][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1008.756935][   T12] bond0 (unregistering): Released all slaves
[ 1008.930659][T22558] wlan1 speed is unknown, defaulting to 1000
[ 1008.943288][T22601] syzkaller0: entered promiscuous mode
[ 1008.952962][T22601] syzkaller0: entered allmulticast mode
[ 1009.697136][ T5839] Bluetooth: hci3: command tx timeout
[ 1011.173122][T22558] chnl_net:caif_netlink_parms(): no params data found
[ 1011.736700][ T5839] Bluetooth: hci3: command tx timeout
[ 1012.361353][T22678] syzkaller0: entered promiscuous mode
[ 1012.417223][T22678] syzkaller0: entered allmulticast mode
[ 1014.222931][T22695] ceph: No mds server is up or the cluster is laggy
[ 1014.858260][   T12] hsr_slave_0: left promiscuous mode
[ 1014.917308][   T12] hsr_slave_1: left promiscuous mode
[ 1015.597179][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1015.758529][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1018.669873][T22751] picdev_read: 77 callbacks suppressed
[ 1018.669896][T22751] kvm: pic: non byte read
[ 1018.727134][T22751] kvm: pic: non byte read
[ 1018.736866][T22751] kvm: pic: non byte read
[ 1018.756580][T22751] kvm: pic: non byte read
[ 1018.761110][T22751] kvm: pic: non byte read
[ 1018.788174][T22751] kvm: pic: non byte read
[ 1018.803407][T22751] kvm: pic: non byte read
[ 1018.830538][T22751] kvm: pic: non byte read
[ 1018.835051][T22751] kvm: pic: non byte read
[ 1018.867022][T22751] kvm: pic: non byte read
[ 1019.706737][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1020.391440][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1024.728081][ T2050] smc: removing ib device s
z1
[ 1024.755253][T22558] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.782656][T22558] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1024.798494][T22558] bridge_slave_0: entered allmulticast mode
[ 1024.865391][T22558] bridge_slave_0: entered promiscuous mode
[ 1025.096569][T22558] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1025.148074][T22558] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.186737][T22558] bridge_slave_1: entered allmulticast mode
[ 1025.271522][T22558] bridge_slave_1: entered promiscuous mode
[ 1026.263493][T22833] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4505'.
[ 1027.009014][T22558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1027.119795][T22558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1027.632337][T22558] team0: Port device team_slave_0 added
[ 1027.668923][T22558] team0: Port device team_slave_1 added
[ 1027.865008][T22847] loop4: detected capacity change from 0 to 32768
[ 1027.903935][T22847] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[ 1027.919553][T22847] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1027.929413][T22847] OCFS2: File system is now read-only.
[ 1027.934874][T22847] (syz.4.4512,22847,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[ 1027.943282][T22847] (syz.4.4512,22847,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[ 1027.952551][T22847] (syz.4.4512,22847,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[ 1027.963100][T22847] (syz.4.4512,22847,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[ 1027.972103][T22847] (syz.4.4512,22847,1):ocfs2_mount_volume:1758 ERROR: status = -30
[ 1027.986365][T22847] (syz.4.4512,22847,1):ocfs2_fill_super:1177 ERROR: status = -30
[ 1028.808237][T22558] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1028.825006][T22558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1028.855965][T22558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1028.906880][T22558] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1028.913881][T22558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1029.076300][T22558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1029.266442][T22855] syzkaller0: entered promiscuous mode
[ 1029.272260][T22855] syzkaller0: entered allmulticast mode
[ 1029.872312][T22558] hsr_slave_0: entered promiscuous mode
[ 1029.898226][T22558] hsr_slave_1: entered promiscuous mode
[ 1029.905419][T22558] debugfs: 'hsr0' already exists in 'hsr'
[ 1030.124485][T22865] xt_policy: neither incoming nor outgoing policy selected
[ 1030.125511][T22558] Cannot create hsr debugfs directory
[ 1030.181650][T22865] input: syz1 as /devices/virtual/input/input23
[ 1030.232599][   T12] IPVS: stop unused estimator thread 0...
[ 1030.602707][T22878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4518'.
[ 1030.627957][T22878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4518'.
[ 1032.582730][T22905] siw: device registration error -23
[ 1032.813494][T22558] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1032.849689][T22558] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1032.880914][T22558] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1032.890878][T22919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4534'.
[ 1032.910483][T22919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4534'.
[ 1033.118620][T22558] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1034.610409][T22558] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1034.653361][T22558] 8021q: adding VLAN 0 to HW filter on device team0
[ 1034.683105][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1034.690504][ T7352] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1034.738752][T22945] siw: device registration error -23
[ 1034.819684][T22946] xt_policy: neither incoming nor outgoing policy selected
[ 1034.829379][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1034.836629][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1034.871807][T22946] input: syz1 as /devices/virtual/input/input24
[ 1035.325295][T22558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1035.335772][T22558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1036.472312][T22558] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1036.507718][T22971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4549'.
[ 1036.530891][T22971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4549'.
[ 1036.622749][T22558] veth0_vlan: entered promiscuous mode
[ 1036.645096][T22558] veth1_vlan: entered promiscuous mode
[ 1036.681360][T22558] veth0_macvtap: entered promiscuous mode
[ 1036.695107][T22558] veth1_macvtap: entered promiscuous mode
[ 1036.736581][T22558] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1036.750825][T22558] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1036.875353][ T7352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.884375][ T7352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1037.520654][ T7352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1037.563046][T22976] syzkaller0: entered promiscuous mode
[ 1037.582136][T22976] syzkaller0: entered allmulticast mode
[ 1037.693602][ T7352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1037.789924][T22986] siw: device registration error -23
[ 1037.950625][ T7352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1037.974213][ T7352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1038.899020][ T7352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1038.928891][ T7352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1042.423126][T23022] IPv6: Can't replace route, no match found
[ 1042.451635][T23023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4562'.
[ 1042.480000][T23023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4562'.
[ 1042.530025][T23025] syzkaller0: entered promiscuous mode
[ 1042.535794][T23025] syzkaller0: entered allmulticast mode
[ 1043.453799][T23033] xt_policy: neither incoming nor outgoing policy selected
[ 1043.464193][T23033] input: syz1 as /devices/virtual/input/input25
[ 1045.517353][ T5897] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[ 1045.817791][ T5897] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[ 1045.835690][ T5897] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[ 1045.877070][ T5897] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[ 1045.904957][ T5897] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[ 1045.937916][ T5897] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[ 1045.976068][ T5897] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[ 1046.028600][ T5897] usb 5-1: string descriptor 0 read error: -22
[ 1046.034988][ T5897] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1046.086503][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.359066][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4580'.
[ 1046.415601][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4580'.
[ 1047.945265][ T5897] usb 5-1: USB disconnect, device number 14
[ 1048.736312][ T5897] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1049.765215][T23112] syzkaller0: entered promiscuous mode
[ 1049.771347][T23112] syzkaller0: entered allmulticast mode
[ 1049.821514][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1049.832049][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1050.118045][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1050.302654][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1050.415785][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1050.424954][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.459564][ T5897] usb 4-1: config 0 descriptor??
[ 1050.843803][ T5897] hdpvr 4-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ	wÒΖŠÒ¥g/ƒNÐ`žxè$«·¯=å"Ü—
[ 1050.865490][ T5897] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[ 1051.690147][T23102] xt_policy: neither incoming nor outgoing policy selected
[ 1051.870632][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4596'.
[ 1051.903173][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4596'.
[ 1051.936846][ T5897] hdpvr 4-1:0.0: Could not setup controls
[ 1051.954741][ T5897] hdpvr 4-1:0.0: registering videodev failed
[ 1051.998411][ T5897] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71
[ 1052.033566][ T5897] usb 4-1: USB disconnect, device number 11
[ 1059.754270][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4612'.
[ 1059.842827][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4612'.
[ 1059.874303][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1061.696577][ T5912] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1061.863050][ T5912] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1061.901935][ T5912] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1061.919988][ T5912] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1061.936313][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.974448][T23189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1062.030699][ T5912] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1063.062845][ T5897] usb 4-1: USB disconnect, device number 12
[ 1063.319413][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4624'.
[ 1063.347944][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4624'.
[ 1063.746820][T23233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4628'.
[ 1064.856821][ T8956] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1065.086348][ T5912] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[ 1065.108681][ T8956] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.237851][ T5912] usb 2-1: device descriptor read/64, error -71
[ 1065.850342][ T8956] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1065.903029][ T8956] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1065.953614][ T8956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1065.970053][ T8956] usb 6-1: SerialNumber: syz
[ 1066.006950][ T5912] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[ 1066.252823][ T8956] usb 6-1: 0:2 : does not exist
[ 1066.429921][T23261] binder: 23257:23261 ioctl c0306201 0 returned -14
[ 1067.257589][ T5912] usb 2-1: device descriptor read/64, error -71
[ 1067.272438][ T8956] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1067.297915][ T8956] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1067.322881][ T8956] usb 6-1: USB disconnect, device number 14
[ 1067.366912][ T5912] usb usb2-port1: attempt power cycle
[ 1067.666333][ T5897] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[ 1067.719157][ T5912] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[ 1067.745317][T23271] tipc: Enabled bearer <eth:batadv0>, priority 10
[ 1067.775212][ T5912] usb 2-1: device descriptor read/8, error -71
[ 1067.812844][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4642'.
[ 1067.841757][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4642'.
[ 1067.860275][ T5897] usb 4-1: config 0 has an invalid interface number: 168 but max is 0
[ 1067.879101][ T5897] usb 4-1: config 0 has no interface number 0
[ 1067.885307][ T5897] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[ 1067.919020][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.945198][T23280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4645'.
[ 1067.946292][ T5897] usb 4-1: config 0 descriptor??
[ 1068.468618][ T8956] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1068.655134][ T5839] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 1068.837238][T23290] binder: 23289:23290 ioctl c0306201 200000000680 returned -14
[ 1068.858701][T16950] tipc: Node number set to 3516344913
[ 1068.898470][ T8956] usb 5-1: Using ep0 maxpacket: 32
[ 1068.921956][ T8956] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[ 1068.951125][ T8956] usb 5-1: config 0 has no interface number 0
[ 1068.956042][ T5897] usb 4-1: string descriptor 0 read error: -71
[ 1068.967197][ T5897] usb-storage 4-1:0.168: USB Mass Storage device detected
[ 1068.978597][ T8956] usb 5-1: config 0 interface 184 has no altsetting 0
[ 1068.990052][ T5897] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2
[ 1069.005449][T23292] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4650'.
[ 1069.008462][ T8956] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1069.028321][ T8956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.037059][ T8956] usb 5-1: Product: syz
[ 1069.041330][ T8956] usb 5-1: Manufacturer: syz
[ 1069.045964][ T8956] usb 5-1: SerialNumber: syz
[ 1069.057669][ T8956] usb 5-1: config 0 descriptor??
[ 1069.065880][ T8956] smsc75xx v1.0.0
[ 1069.107957][ T5897] usb 4-1: USB disconnect, device number 13
[ 1069.471651][ T8956] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1069.489716][ T8956] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[ 1069.502357][ T8956] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1069.520453][ T8956] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32
[ 1070.716125][T23326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4663'.
[ 1070.997370][T23335] wlan1 speed is unknown, defaulting to 1000
[ 1071.745539][ T5897] usb 5-1: USB disconnect, device number 15
[ 1071.756376][T19247] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[ 1071.948348][T19247] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 1071.988228][T19247] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[ 1072.038940][T19247] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[ 1072.060121][T19247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.076698][T19247] usb 4-1: Product: syz
[ 1072.097102][T19247] usb 4-1: Manufacturer: syz
[ 1072.101767][T19247] usb 4-1: SerialNumber: syz
[ 1072.347857][T19247] usb 4-1: USB disconnect, device number 14
[ 1072.396504][ T8956] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1072.568379][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1072.624679][T22332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1072.639334][T22332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1072.658069][ T8956] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1072.669279][T22332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1072.699742][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1072.717397][T22332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1072.725162][T22332] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1072.763649][ T8956] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1072.823857][ T8956] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1072.854518][ T8956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.891964][T23353] wlan1 speed is unknown, defaulting to 1000
[ 1072.905231][ T8956] usb 2-1: config 0 descriptor??
[ 1073.156414][ T8956] hdpvr 2-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ	wÒΖŠÒ¥g/ƒNÐ`žxè$«·¯=å"Ü—
[ 1073.184107][ T8956] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[ 1073.348849][ T8956] hdpvr 2-1:0.0: device init failed
[ 1073.354307][ T8956] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[ 1073.448979][ T8956] usb 2-1: USB disconnect, device number 6
[ 1073.513401][T23368] netlink: 'syz.4.4672': attribute type 2 has an invalid length.
[ 1073.838601][T23353] chnl_net:caif_netlink_parms(): no params data found
[ 1074.058570][T23372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4676'.
[ 1074.297937][T23353] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1074.317846][T23353] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1074.343769][T23353] bridge_slave_0: entered allmulticast mode
[ 1074.358038][T23353] bridge_slave_0: entered promiscuous mode
[ 1074.390043][T23353] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1074.416437][T23353] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1074.433197][T23353] bridge_slave_1: entered allmulticast mode
[ 1074.450141][T23353] bridge_slave_1: entered promiscuous mode
[ 1074.456285][T19247] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1074.576348][T16950] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1074.600367][T23353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1074.633847][T23353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1074.646247][T19247] usb 2-1: Using ep0 maxpacket: 16
[ 1074.655556][T19247] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1074.665254][T19247] usb 2-1: config 0 has no interface number 0
[ 1074.687440][T19247] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1074.731358][T19247] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1074.756389][T16950] usb 4-1: Using ep0 maxpacket: 32
[ 1074.756447][T22332] Bluetooth: hci5: command tx timeout
[ 1074.782087][T16950] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1074.790550][T19247] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1074.801785][T19247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.810192][T16950] usb 4-1: config 0 has no interface number 0
[ 1074.824599][T19247] usb 2-1: config 0 descriptor??
[ 1074.859248][T23353] team0: Port device team_slave_0 added
[ 1074.867119][T16950] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1074.892265][T16950] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1074.903238][T23353] team0: Port device team_slave_1 added
[ 1074.916566][T16950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.925527][T16950] usb 4-1: Product: syz
[ 1074.938898][T16950] usb 4-1: Manufacturer: syz
[ 1074.943591][T16950] usb 4-1: SerialNumber: syz
[ 1074.964716][T16950] usb 4-1: config 0 descriptor??
[ 1074.990104][T16950] smsc75xx v1.0.0
[ 1075.103817][T23384] dummy0: entered promiscuous mode
[ 1075.114800][T23384] macsec1: entered allmulticast mode
[ 1075.123402][T23384] dummy0: entered allmulticast mode
[ 1075.136555][T23384] dummy0: left allmulticast mode
[ 1075.142057][T23384] dummy0: left promiscuous mode
[ 1075.186884][T23353] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1075.203324][T23353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1075.237724][T23353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1075.382395][T10037] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1075.409624][T23353] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1075.418815][T23353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1075.446950][T16950] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1075.468775][T16950] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[ 1075.470797][T19247] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71
[ 1075.479680][T16950] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1075.499636][T23353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1075.545881][T16950] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32
[ 1075.551913][T19247] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71
[ 1075.708072][T19247] uclogic 0003:28BD:0071.0007: pen probing failed: -71
[ 1075.727247][T19247] uclogic 0003:28BD:0071.0007: failed probing parameters: -71
[ 1075.869421][T19247] uclogic 0003:28BD:0071.0007: probe with driver uclogic failed with error -71
[ 1075.877004][T10037] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.189635][T19247] usb 2-1: USB disconnect, device number 7
[ 1076.410038][T10037] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.637467][T23353] hsr_slave_0: entered promiscuous mode
[ 1076.658206][T23353] hsr_slave_1: entered promiscuous mode
[ 1076.665635][T23353] debugfs: 'hsr0' already exists in 'hsr'
[ 1076.686229][T23353] Cannot create hsr debugfs directory
[ 1076.826361][T22332] Bluetooth: hci5: command tx timeout
[ 1077.464918][T10037] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.506594][ T5941] usb 4-1: USB disconnect, device number 15
[ 1077.768219][T23414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4687'.
[ 1078.164856][T23421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4690'.
[ 1078.629107][T23428] netlink: 'syz.4.4693': attribute type 1 has an invalid length.
[ 1078.750551][T23428] bond1: entered promiscuous mode
[ 1078.759187][T23428] bond1: entered allmulticast mode
[ 1078.765264][T23428] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1078.908213][T22332] Bluetooth: hci5: command tx timeout
[ 1080.073419][T10037] bond0 (unregistering): Released all slaves
[ 1080.190463][T23440] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4697'.
[ 1080.204356][T23428] veth3: entered promiscuous mode
[ 1080.214216][T23428] veth3: entered allmulticast mode
[ 1080.224908][T23428] bond1: (slave veth3): Enslaving as a backup interface with a down link
[ 1080.422488][T23443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4700'.
[ 1080.597117][T23448] bond1: (slave geneve2): Enslaving as an active interface with an up link
[ 1080.618320][ T1917] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[ 1080.848743][ T1917] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[ 1080.875608][ T1917] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[ 1080.900774][ T1917] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[ 1080.986618][T22332] Bluetooth: hci5: command tx timeout
[ 1081.447872][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4707'.
[ 1081.465529][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4707'.
[ 1083.194358][T23476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4711'.
[ 1083.396030][T10037] hsr_slave_0: left promiscuous mode
[ 1083.411713][T10037] hsr_slave_1: left promiscuous mode
[ 1083.470036][T10037] veth1_macvtap: left promiscuous mode
[ 1084.457698][T10037] veth0_macvtap: left promiscuous mode
[ 1084.478440][T10037] veth1_vlan: left promiscuous mode
[ 1084.903957][T10037] veth0_vlan: left promiscuous mode
[ 1085.402550][ T9109] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 1085.459528][ T9109] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1087.127104][T23529] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4730'.
[ 1087.308913][T23513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4725'.
[ 1087.324261][T23529] ªªªªªª: renamed from lo (while UP)
[ 1087.567065][T22332] Bluetooth: hci4: command 0x0405 tx timeout
[ 1088.203741][T23353] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1088.397013][T23353] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1089.175936][T23353] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1089.432528][T23353] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1090.169681][T23553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4737'.
[ 1090.947966][T10037] IPVS: stop unused estimator thread 0...
[ 1090.973218][T23562] wlan1 speed is unknown, defaulting to 1000
[ 1091.050786][T23573] overlayfs: failed to resolve './file0': -2
[ 1093.184597][T23593] netlink: 'syz.4.4748': attribute type 1 has an invalid length.
[ 1093.588328][T23597] bond2: entered promiscuous mode
[ 1093.608850][T23597] bond2: entered allmulticast mode
[ 1093.614530][T23597] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1093.701268][T23353] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1093.772019][T23353] 8021q: adding VLAN 0 to HW filter on device team0
[ 1093.829907][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1093.837175][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1093.958454][ T3071] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1093.965661][ T3071] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1094.706699][T23620] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1096.547389][T23635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4760'.
[ 1097.242306][T23643] wlan1 speed is unknown, defaulting to 1000
[ 1097.296638][T23353] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1099.167433][   T31] audit: type=1326 audit(1764172176.427:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f412b7865e7 code=0x7ffc0000
[ 1099.271082][   T31] audit: type=1326 audit(1764172176.427:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f412b72b829 code=0x7ffc0000
[ 1099.410375][   T31] audit: type=1326 audit(1764172176.427:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f749 code=0x7ffc0000
[ 1099.482292][   T31] audit: type=1326 audit(1764172176.427:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f412b7865e7 code=0x7ffc0000
[ 1099.486738][T23353] veth0_vlan: entered promiscuous mode
[ 1099.506004][   T31] audit: type=1326 audit(1764172176.427:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f412b72b829 code=0x7ffc0000
[ 1100.458036][   T31] audit: type=1326 audit(1764172176.427:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f412b7865e7 code=0x7ffc0000
[ 1100.483364][   T31] audit: type=1326 audit(1764172176.427:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f412b72b829 code=0x7ffc0000
[ 1100.516832][T23353] veth1_vlan: entered promiscuous mode
[ 1100.538832][   T31] audit: type=1326 audit(1764172176.437:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f412b7865e7 code=0x7ffc0000
[ 1100.619373][   T31] audit: type=1326 audit(1764172176.457:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f412b72b829 code=0x7ffc0000
[ 1100.680588][T23353] veth0_macvtap: entered promiscuous mode
[ 1100.692791][   T31] audit: type=1326 audit(1764172176.457:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.1.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f412b78f749 code=0x7ffc0000
[ 1100.759489][T23353] veth1_macvtap: entered promiscuous mode
[ 1100.830590][T23353] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1100.877078][T23353] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1100.900507][ T3071] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.940894][ T3071] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.989246][ T5992] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1100.991343][ T3071] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1101.011965][ T3071] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1101.166393][ T5992] usb 6-1: Using ep0 maxpacket: 32
[ 1101.309113][T15626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1101.336234][T15626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1101.345759][ T5992] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1101.388598][ T5992] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1101.402955][ T5992] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[ 1101.420579][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1101.443873][ T5992] usb 6-1: config 0 descriptor??
[ 1101.448422][ T7352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1101.470026][ T7352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1101.569147][T23699] wlan1 speed is unknown, defaulting to 1000
[ 1101.702585][T22332] Bluetooth: unknown link type 175
[ 1101.708012][T22332] Bluetooth: hci5: connection err: -111
[ 1101.886280][   T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1101.931883][ T5992] usbhid 6-1:0.0: can't add hid device: -71
[ 1101.938112][ T5992] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1101.948804][ T5992] usb 6-1: USB disconnect, device number 15
[ 1102.086324][   T43] usb 4-1: Using ep0 maxpacket: 32
[ 1102.160824][   T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1102.170818][   T43] usb 4-1: config 0 has no interface number 0
[ 1102.177167][   T43] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1102.187490][   T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1102.197056][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.205186][   T43] usb 4-1: Product: syz
[ 1102.222970][   T43] usb 4-1: Manufacturer: syz
[ 1102.240599][   T43] usb 4-1: SerialNumber: syz
[ 1102.258513][   T43] usb 4-1: config 0 descriptor??
[ 1102.295215][   T43] smsc75xx v1.0.0
[ 1103.312293][   T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1103.340702][   T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[ 1103.350798][   T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1103.372892][   T43] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32
[ 1103.500422][T23725] loop9: detected capacity change from 0 to 512
[ 1103.582479][T23725] EXT4-fs (loop9): revision level too high, forcing read-only mode
[ 1103.590805][T23725] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[ 1103.599995][T23722] binder: BINDER_SET_CONTEXT_MGR already set
[ 1103.611615][T23722] binder: 23720:23722 ioctl 4018620d 200000000100 returned -16
[ 1103.646597][T23725] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1103.676453][T23725] EXT4-fs warning (device loop9): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1103.714298][T23725] EXT4-fs (loop9): Cannot turn on quotas: error -22
[ 1103.756526][T23725] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4788: bg 0: block 40: padding at end of block bitmap is not set
[ 1103.909947][T23725] EXT4-fs (loop9): Remounting filesystem read-only
[ 1104.014519][T23725] EXT4-fs (loop9): 1 truncate cleaned up
[ 1104.163300][T23725] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1104.328931][T23725] EXT4-fs (loop9): shut down requested (2)
[ 1104.989956][   T43] usb 4-1: USB disconnect, device number 16
[ 1105.007725][T23746] wlan1 speed is unknown, defaulting to 1000
[ 1106.772031][T23353] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1108.668102][T23773] binder: BINDER_SET_CONTEXT_MGR already set
[ 1108.684301][T23773] binder: 23772:23773 ioctl 4018620d 2000000002c0 returned -16
[ 1109.034430][T23782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4800'.
[ 1110.793071][T23793] loop1: detected capacity change from 0 to 512
[ 1110.992307][T23793] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 1111.018596][T23793] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[ 1111.046579][T23793] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1111.059556][T23793] __quota_error: 4 callbacks suppressed
[ 1111.059579][T23793] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[ 1111.196823][T23793] EXT4-fs warning (device loop1): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1111.229733][T23793] EXT4-fs (loop1): Cannot turn on quotas: error -22
[ 1111.248963][T23793] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4807: bg 0: block 40: padding at end of block bitmap is not set
[ 1111.298746][T23793] EXT4-fs (loop1): Remounting filesystem read-only
[ 1111.313080][T23793] EXT4-fs (loop1): 1 truncate cleaned up
[ 1111.352247][T23793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1111.372500][T23793] EXT4-fs (loop1): shut down requested (2)
[ 1112.705340][T23814] binder_alloc: 23812: binder_alloc_buf, no vma
[ 1114.479793][T22558] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1117.126236][T23838] ------------[ cut here ]------------
[ 1117.131797][T23838] WARNING: arch/x86/kvm/lapic.c:3501 at kvm_apic_accept_events+0x341/0x490, CPU#0: syz.9.4819/23838
[ 1117.142690][T23838] Modules linked in:
[ 1117.147702][T23838] CPU: 0 UID: 0 PID: 23838 Comm: syz.9.4819 Not tainted syzkaller #0 PREEMPT(full) 
[ 1117.157509][T23838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1117.167656][T23838] RIP: 0010:kvm_apic_accept_events+0x341/0x490
[ 1117.173870][T23838] Code: eb 0c e8 b2 c1 72 00 eb 05 e8 ab c1 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 90 c1 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f
[ 1117.193600][T23838] RSP: 0018:ffffc90004867bf0 EFLAGS: 00010287
[ 1117.199942][T23838] RAX: ffffffff814ede70 RBX: 0000000000000002 RCX: 0000000000080000
[ 1117.208122][T23838] RDX: ffffc90018eeb000 RSI: 00000000000003a9 RDI: 00000000000003aa
[ 1117.216583][T23838] RBP: 0000000000000000 R08: ffffffff81471af2 R09: ffff888027bbd838
[ 1117.225001][T23838] R10: dffffc0000000000 R11: ffffed100aac5530 R12: 0000000000000002
[ 1117.233357][T23838] R13: dffffc0000000000 R14: ffff888068835c00 R15: ffff88805562ac18
[ 1117.241589][T23838] FS:  00007f3d26df66c0(0000) GS:ffff888125e88000(0000) knlGS:0000000000000000
[ 1117.250809][T23838] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1117.257576][T23838] CR2: 0000000000000000 CR3: 0000000025d42000 CR4: 00000000003526f0
[ 1117.265604][T23838] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1117.273669][T23838] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1117.281742][T23838] Call Trace:
[ 1117.285068][T23838]  <TASK>
[ 1117.288125][T23838]  kvm_arch_vcpu_ioctl_get_mpstate+0x115/0x450
[ 1117.294337][T23838]  ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450
[ 1117.300689][T23838]  kvm_vcpu_ioctl+0x663/0xed0
[ 1117.305513][T23838]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1117.310901][T23838]  ? __fget_files+0x2a/0x420
[ 1117.315929][T23838]  ? __fget_files+0x3a0/0x420
[ 1117.321058][T23838]  ? __fget_files+0x2a/0x420
[ 1117.325798][T23838]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1117.330808][T23838]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1117.336035][T23838]  __se_sys_ioctl+0xfc/0x170
[ 1117.340702][T23838]  do_syscall_64+0xfa/0xf80
[ 1117.345417][T23838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1117.351572][T23838]  ? clear_bhb_loop+0x60/0xb0
[ 1117.356366][T23838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1117.362288][T23838] RIP: 0033:0x7f3d28b8f749
[ 1117.366775][T23838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1117.386746][T23838] RSP: 002b:00007f3d26df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1117.395240][T23838] RAX: ffffffffffffffda RBX: 00007f3d28de5fa0 RCX: 00007f3d28b8f749
[ 1117.403434][T23838] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005
[ 1117.411510][T23838] RBP: 00007f3d28c13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1117.419969][T23838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1117.428440][T23838] R13: 00007f3d28de6038 R14: 00007f3d28de5fa0 R15: 00007ffcbc554938
[ 1117.436610][T23838]  </TASK>
[ 1117.439726][T23838] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1117.447050][T23838] CPU: 0 UID: 0 PID: 23838 Comm: syz.9.4819 Not tainted syzkaller #0 PREEMPT(full) 
[ 1117.456483][T23838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1117.466560][T23838] Call Trace:
[ 1117.469861][T23838]  <TASK>
[ 1117.472808][T23838]  dump_stack_lvl+0x99/0x250
[ 1117.477436][T23838]  ? __asan_memcpy+0x40/0x70
[ 1117.482050][T23838]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1117.487280][T23838]  ? __pfx__printk+0x10/0x10
[ 1117.491894][T23838]  vpanic+0x237/0x6d0
[ 1117.495891][T23838]  ? __pfx_vpanic+0x10/0x10
[ 1117.500404][T23838]  ? is_bpf_text_address+0x292/0x2b0
[ 1117.505713][T23838]  ? is_bpf_text_address+0x26/0x2b0
[ 1117.510934][T23838]  panic+0xb9/0xc0
[ 1117.514665][T23838]  ? __pfx_panic+0x10/0x10
[ 1117.519119][T23838]  __warn+0x317/0x4b0
[ 1117.523160][T23838]  ? kvm_apic_accept_events+0x341/0x490
[ 1117.528741][T23838]  ? kvm_apic_accept_events+0x341/0x490
[ 1117.534321][T23838]  __report_bug+0x22e/0x4b0
[ 1117.538856][T23838]  ? kvm_apic_accept_events+0x341/0x490
[ 1117.544426][T23838]  ? __pfx___report_bug+0x10/0x10
[ 1117.549478][T23838]  ? __lock_acquire+0x6b6/0x2cf0
[ 1117.554438][T23838]  ? rcu_is_watching+0x15/0xb0
[ 1117.559228][T23838]  ? trace_contention_end+0x39/0x100
[ 1117.564552][T23838]  ? kvm_apic_accept_events+0x341/0x490
[ 1117.570140][T23838]  report_bug+0x16a/0x220
[ 1117.574548][T23838]  ? kvm_apic_accept_events+0x341/0x490
[ 1117.580159][T23838]  ? kvm_apic_accept_events+0x343/0x490
[ 1117.585730][T23838]  handle_bug+0x98/0x200
[ 1117.590012][T23838]  exc_invalid_op+0x1a/0x50
[ 1117.594635][T23838]  asm_exc_invalid_op+0x1a/0x20
[ 1117.599505][T23838] RIP: 0010:kvm_apic_accept_events+0x341/0x490
[ 1117.605682][T23838] Code: eb 0c e8 b2 c1 72 00 eb 05 e8 ab c1 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 90 c1 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f
[ 1117.625414][T23838] RSP: 0018:ffffc90004867bf0 EFLAGS: 00010287
[ 1117.631509][T23838] RAX: ffffffff814ede70 RBX: 0000000000000002 RCX: 0000000000080000
[ 1117.639514][T23838] RDX: ffffc90018eeb000 RSI: 00000000000003a9 RDI: 00000000000003aa
[ 1117.647550][T23838] RBP: 0000000000000000 R08: ffffffff81471af2 R09: ffff888027bbd838
[ 1117.655625][T23838] R10: dffffc0000000000 R11: ffffed100aac5530 R12: 0000000000000002
[ 1117.663631][T23838] R13: dffffc0000000000 R14: ffff888068835c00 R15: ffff88805562ac18
[ 1117.671628][T23838]  ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450
[ 1117.677895][T23838]  ? kvm_apic_accept_events+0x340/0x490
[ 1117.683468][T23838]  kvm_arch_vcpu_ioctl_get_mpstate+0x115/0x450
[ 1117.689662][T23838]  ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450
[ 1117.696102][T23838]  kvm_vcpu_ioctl+0x663/0xed0
[ 1117.700810][T23838]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1117.706039][T23838]  ? __fget_files+0x2a/0x420
[ 1117.710642][T23838]  ? __fget_files+0x3a0/0x420
[ 1117.715430][T23838]  ? __fget_files+0x2a/0x420
[ 1117.720033][T23838]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1117.724989][T23838]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1117.730203][T23838]  __se_sys_ioctl+0xfc/0x170
[ 1117.734907][T23838]  do_syscall_64+0xfa/0xf80
[ 1117.739444][T23838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1117.745548][T23838]  ? clear_bhb_loop+0x60/0xb0
[ 1117.750242][T23838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1117.756144][T23838] RIP: 0033:0x7f3d28b8f749
[ 1117.760591][T23838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1117.780210][T23838] RSP: 002b:00007f3d26df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1117.788659][T23838] RAX: ffffffffffffffda RBX: 00007f3d28de5fa0 RCX: 00007f3d28b8f749
[ 1117.796657][T23838] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005
[ 1117.804639][T23838] RBP: 00007f3d28c13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1117.812721][T23838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1117.820725][T23838] R13: 00007f3d28de6038 R14: 00007f3d28de5fa0 R15: 00007ffcbc554938
[ 1117.828729][T23838]  </TASK>
[ 1117.832027][T23838] Kernel Offset: disabled
[ 1117.836362][T23838] Rebooting in 86400 seconds..