last executing test programs:

3m49.148586649s ago: executing program 4 (id=483):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000200)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@bh}, {@dioread_nolock}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@mblk_io_submit}, {@acl}, {@resgid}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x64, 0x34, 0x38, 0x66, 0x32, 0x36, 0x32], 0x2d, [0x3, 0x63, 0x38, 0x31], 0x2d, [0x0, 0x39, 0x33, 0x38], 0x2d, [0x65, 0x37, 0x62, 0x64], 0x2d, [0x62, 0x39, 0x30, 0x31, 0x34, 0x30, 0x32, 0x38]}}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'appraise_type=imasig'}}, {@smackfsdef={'smackfsdef', 0x3d, 'dioread_nolock'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}], 0x3d}, 0x1, 0x51f, &(0x7f000001c2c0)="$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")
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000b00)={[{@test_dummy_encryption_v1}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@nobh}, {@nodiscard}, {@barrier_val={'barrier', 0x3d, 0x6fa}}, {@max_batch_time={'max_batch_time', 0x3d, 0xf59}}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0xfff}}, {@jqfmt_vfsv1}, {@test_dummy_encryption_v1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800}}], [{@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '-&'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@dont_measure}]}, 0x1, 0x481, &(0x7f0000000f80)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x3, 0x1, 0xfffffffffffffff3, 0xfffffffffffffffd, 0x9, 0x0, {0x2, 0x8000000000000001, 0x40003, 0x6, 0x800000000003, 0x100100000000008, 0x80000000, 0x4, 0x5, 0xa000, 0x4, r2, r3, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8002104}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x17c, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x2, 0x0, 0x0, {0x4, 0x9, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x401, 0x1}}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1a, 0xfc, "b967af10907310fdfd85e292bcfab00caa1df4cb30a6"}, @NL80211_ATTR_FILS_ERP_REALM={0xb7, 0xfa, "c2dc8a57d8325c35cc362096e1a8da1f79ffd70ea17da9093b7314a81896ffc6955009eb84e31bf65c1a7cb76f3f32ab7076d43b7fadb51bf2247ffcd43099ced1728ac9a3195032322efccc5a9ebb6478a1276e57ad627163a5711850d44d114f97eee6fe7e6cd4299a4496838e7d1e85f7cb163271c03a210cc5f6424ede0c3c027d73b5122a49d6b6bb9f1047d2de47bf1da276b9c58a33ba64c8f2e807acf99593ee833d029a28f7e704b852a95fe42934"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x30, 0xfc, "5e087557106f35dc829ce5c0573054a45e6a27bc13614bd88c84b79b1b18dc093c45ef7185831542cb41aa67"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "8a706f6e3866d5006bb4878539"}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x1, 0x2, 0x0, {0x5, 0x4, 0x0, 0x91, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x1}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4004000}, 0x840)

3m48.588215697s ago: executing program 4 (id=485):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2)
ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000002080)={0x9, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739"})
syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
r3 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r6, &(0x7f00000016c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000400), 0x4)
syz_io_uring_submit(r4, r5, 0x0)
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2})
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000380)={0x0, 0xf6, ""/246})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000200)={0x2, 0x2, 0x3})
r7 = socket$xdp(0x2c, 0x3, 0x0)
r8 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x24)
ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0x541b, 0x0)
r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
r10 = syz_io_uring_setup(0x35, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x21, &(0x7f0000000440)=r9, 0x1)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)

3m47.439716647s ago: executing program 4 (id=488):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x75)
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646fef3d", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x7, 0x0, 0xfffffffb, 0xffffffff, 'syz1\x00', 0x8}, 0x0, [0xffff, 0x58e, 0x6, 0x0, 0x104, 0x2, 0x8, 0x3, 0xc, 0x8, 0x4, 0xffffffffffff17bf, 0x8, 0x405, 0x10001, 0x2, 0x0, 0x7e01, 0x4, 0xffffffffffffffdb, 0x4, 0x100000001, 0x1821, 0x3dca, 0x6, 0x4, 0x2, 0x5, 0x8, 0xfffffffffffffff9, 0xffff, 0x8, 0xffffffffffffeffe, 0x5, 0x81, 0x49, 0x10001, 0x400, 0x100000001, 0x8, 0x0, 0x75, 0x5, 0x7, 0xf, 0x8, 0x86c, 0x23b2, 0x1, 0xfffffffffffff26e, 0xa, 0x6, 0x8, 0xf, 0x5, 0x7ff, 0x2, 0x8, 0x2, 0x13f, 0x8, 0x8e, 0x7, 0x400, 0x646, 0x3, 0x9, 0x3, 0x5, 0x5, 0x7, 0xc862, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x0, 0x1, 0x8, 0x7, 0x100, 0x3ff, 0x80, 0x1, 0x100000001, 0x3afaac1, 0xddd, 0x9, 0x10, 0x8, 0x80, 0x5, 0x7, 0x3357, 0x6, 0x9c, 0x3, 0x9, 0x51, 0x0, 0x9, 0x7, 0x10, 0x40, 0x29bf, 0x9, 0x9, 0x4, 0x5d, 0x0, 0x400, 0x1, 0x4, 0x10000, 0x8000, 0x0, 0xcb, 0x3, 0x0, 0x8, 0xe56, 0xfff, 0x5, 0xd61, 0x6, 0x3, 0x277a, 0x800]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000006a113147000000000c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000706000000ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c0735cce6d26ce12fe9867d9dbb79c04bff713f726ee26148201ff75c90527b9966344fb9d976ad1b37bbb58efb205169a0c30676497e1dc5615f9725ee37a50fd29fe643b2c7db56247816ec1d5fd513f20677e959b32bde97fbd37cdb380fb7cf2e97780d3c27b40468c2836f73eb74f81c05667edc2335d", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018440000feffffff0000000000000000182a0000", @ANYRES32=r0, @ANYBLOB="00000000ff0300009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='oom_score_adj_update\x00', r2}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000000100)=0xd01c, 0x6)
syz_open_procfs(0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x6]}, 0x8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
unshare(0x20040600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x0, 0x0}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

3m46.699990058s ago: executing program 4 (id=491):
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socket$isdn(0x22, 0x3, 0x1)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x40}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x6c}}, 0x44080)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', <r6=>r4, 0x2d, 0x16, 0x9, 0x0, 0x68, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x10, 0x1, 0x7ffd}})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x5, 0xa}, {0xfff1, 0x7}, {0x8, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendto$inet(r0, &(0x7f00000012c0)="09268a92", 0x4, 0x11, 0x0, 0x0)

3m46.350296143s ago: executing program 4 (id=492):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x3ab}, &(0x7f0000000100), &(0x7f0000000000))
ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x5)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x11, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000540)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x20, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0xb1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b 82'], 0x9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)
r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0x40fff, 0x200, 0xb, 0x660, 0xfffffff9, 0x3, 0x101, 0x9, 0xf5, 0x8, 0x2, 0x4000, 0x4, 0x6], 0x2, 0x7})

3m45.789436281s ago: executing program 4 (id=494):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=@updpolicy={0xd0, 0x19, 0x1, 0x4, 0x0, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcb2c943c3d5714f3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x1}, 0x9, 0x6e6bb1, 0x1, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0xfffffffe}}]}, 0x5c}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=@updpolicy={0xd0, 0x19, 0x1, 0x4, 0x0, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcb2c943c3d5714f3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x1}, 0x9, 0x6e6bb1, 0x1, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0xfffffffe}}]}, 0x5c}}, 0x0)

3m44.960295181s ago: executing program 32 (id=494):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=@updpolicy={0xd0, 0x19, 0x1, 0x4, 0x0, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcb2c943c3d5714f3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x1}, 0x9, 0x6e6bb1, 0x1, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0xfffffffe}}]}, 0x5c}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=@updpolicy={0xd0, 0x19, 0x1, 0x4, 0x0, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcb2c943c3d5714f3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x1}, 0x9, 0x6e6bb1, 0x1, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0xfffffffe}}]}, 0x5c}}, 0x0)

13.423756365s ago: executing program 1 (id=1335):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=""/217, 0xd9, <r0=>0x0, &(0x7f0000000000)=""/18, 0x12}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000040))
ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000440))
close_range(r3, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe})
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc0200000000000000000000000000fefc020000000000000000000000000001fffc000000000004ff1d4b3100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa33030000020000000200020000000000000000000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000fc0200000000000000000000000000003c00000000000000080008002c001300e0000001000000000000000000000000000000000000000000000000000000000000000002000000"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x42000)
r8 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r8, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"})

11.325748621s ago: executing program 1 (id=1341):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r1=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="eac6ffbc", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000100008800c000780080006005d001000"], 0x38}}, 0x0)
semop(0x0, &(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4b23})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r6 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
shutdown(r4, 0x1)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81)
socket$inet(0x10, 0x80000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00')
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3)

8.367805245s ago: executing program 3 (id=1355):
socket(0x2, 0x80805, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
openat$dir(0xffffffffffffff9c, 0x0, 0x4, 0x188)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x257f4606091c31c0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101015, 0x0)

8.172114638s ago: executing program 1 (id=1356):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f0000000140)="94", 0x1}, {0x0}], 0x2)
r2 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2)
ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000002080)={0x9, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739"})
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
r4 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r7, &(0x7f00000016c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000400), 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2})
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000680)={0x0, 0x100, ""/256})
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r9=>0x0})
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000080)={0x1d, r9}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=@newtfilter={0x1360, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x4}, {0x0, 0xc}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xd}, @filter_kind_options=@f_fw={{0x7}, {0x1324, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bond0\x00'}, @TCA_FW_POLICE={0x8c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x0, 0xe0e, 0x7fff, 0x3, {0x3, 0x1, 0x5, 0x7ff, 0x8, 0xba7}, {0xf9, 0x1, 0x4d, 0x5, 0x4, 0x800}, 0x1, 0x3a8a, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_FW_POLICE={0x84, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x2, 0x4, 0x4, {0x81, 0x1, 0x9, 0x0, 0x5, 0xac4}, {0x9, 0x1, 0xf1, 0xaf, 0x4}, 0x1, 0x20000, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x800, 0x7, 0x9, {0x80, 0x1, 0xb66, 0x1ff, 0x4, 0x9}, {0x7, 0x2, 0x5, 0x4, 0x3}, 0x9, 0x4, 0x7f}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb1}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xfffa}}, @TCA_FW_ACT={0x11f4, 0x4, [@m_connmark={0x10a4, 0x1b, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0xffffffffffffffff, 0x8001, 0x3}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x7, 0x7fffffff, 0xa053}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x80000000, 0x3, 0x2, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7ff, 0x2, 0x584b, 0x2}, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x14c, 0x1a, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}, @TCA_MPLS_TTL={0x5, 0x7, 0x81}, @TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0xf8, 0x6, "a177d1ab46f1fff71a17ffebe9e5ff5120c5f43ce14c3c0f0ac9c4477bffbc2c83be9c82e002ef1c793cb327dac5263dd6c74119e33feae2b0be571d961200e2a75c7d63631d1f40524ecac31b05d0cb915847fa2c473c3c9ed0ec0f3e2f59cb1bbed4785e9a378946de7c7f3d9f0a9658a4c1d1d073d9673dafc491ce6f01dc2a202e204a4be65b1899f081d9493e4ec341b573718df2d557888a840701992460faa7db2b0bf9dc387cfe77b24ac285af2cde6c9f4d9f260cb1798e8cf47f63c4c858008928bbb6b67a722823440b9af8fac34b403f0ec752fcc298d916b188a40f7dfd7d9cd0c9d627c6adc5957c1e27e55238"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3688}]}, 0x1360}, 0x1, 0xf0ffffffffffff}, 0x20000010)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000002c0)={0x2, 0x3, 0x1})
socket$xdp(0x2c, 0x3, 0x0)
r12 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x24)
ioctl$MEDIA_IOC_ENUM_LINKS(r12, 0x541b, 0x0)

7.703643244s ago: executing program 0 (id=1359):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x75)
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646fef3d", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x7, 0x0, 0xfffffffb, 0xffffffff, 'syz1\x00', 0x8}, 0x0, [0xffff, 0x58e, 0x6, 0x0, 0x104, 0x2, 0x8, 0x3, 0xc, 0x8, 0x4, 0xffffffffffff17bf, 0x8, 0x405, 0x10001, 0x2, 0x0, 0x7e01, 0x4, 0xffffffffffffffdb, 0x4, 0x100000001, 0x1821, 0x3dca, 0x6, 0x4, 0x2, 0x5, 0x8, 0xfffffffffffffff9, 0xffff, 0x8, 0xffffffffffffeffe, 0x5, 0x81, 0x49, 0x10001, 0x400, 0x100000001, 0x8, 0x0, 0x75, 0x5, 0x7, 0xf, 0x8, 0x86c, 0x23b2, 0x1, 0xfffffffffffff26e, 0xa, 0x6, 0x8, 0xf, 0x5, 0x7ff, 0x2, 0x8, 0x2, 0x13f, 0x8, 0x8e, 0x7, 0x400, 0x646, 0x3, 0x9, 0x3, 0x5, 0x5, 0x7, 0xc862, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x0, 0x1, 0x8, 0x7, 0x100, 0x3ff, 0x80, 0x1, 0x100000001, 0x3afaac1, 0xddd, 0x9, 0x10, 0x8, 0x80, 0x5, 0x7, 0x3357, 0x6, 0x9c, 0x3, 0x9, 0x51, 0x0, 0x9, 0x7, 0x10, 0x40, 0x29bf, 0x9, 0x9, 0x4, 0x5d, 0x0, 0x400, 0x1, 0x4, 0x10000, 0x8000, 0x0, 0xcb, 0x3, 0x0, 0x8, 0xe56, 0xfff, 0x5, 0xd61, 0x6, 0x3, 0x277a, 0x800]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000006a113147000000000c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000706000000ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c0735cce6d26ce12fe9867d9dbb79c04bff713f726ee26148201ff75c90527b9966344fb9d976ad1b37bbb58efb205169a0c30676497e1dc5615f9725ee37a50fd29fe643b2c7db56247816ec1d5fd513f20677e959b32bde97fbd37cdb380fb7cf2e97780d3c27b40468c2836f73eb74f81c05667edc2335d", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018440000feffffff0000000000000000182a0000", @ANYRES32=r0, @ANYBLOB="00000000ff0300009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='oom_score_adj_update\x00', r2}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000000100)=0xd01c, 0x6)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
unshare(0x20040600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x0, 0x0}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

7.649956226s ago: executing program 0 (id=1361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f00000001c0))
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x80000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
mount(0x0, 0x0, 0x0, 0x2014800, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

7.53202808s ago: executing program 1 (id=1363):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a0904"], 0x0)

7.337384615s ago: executing program 5 (id=1364):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000800000000000005b000000c3000000010000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2}, 0x94)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x9f, 0x34, 0xea, 0x8, 0x4b8, 0x202, 0x584c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x69, 0x84, 0x51}}]}}]}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r1, 0x2000000ffffff7f, 0x3)
read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, r2, {0x0, 0x1c}}, 0x20)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
recvmmsg(r3, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000400)=""/179, 0xb3}], 0x2}, 0x9}], 0x1, 0x22, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)={0x8be, 0x0, 0x0, 0xfffffffc, 0x5})
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000640)={0x53, 0x0, 0xe9, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="362c47da645e12080695c677c6755f978eed4cab7ff2089c45bb22072f772593ae6d7c92859dd7c5a2b3914fa64d9725396a210daaf5ae88482b6ba414774ebd8d529aa372bbf3b384b1854d283008e3d20d0aa75587e9b2b390f85723127b7edd82fa8e8f21a9903a4f218380a81f4c6a8ae45701347508009770bec6710b6ff158521b92e89e507e5983d5e135bbfae1d5b9dda101ada1ecba5ebadb3251c21e5e8cc739f6da725842a5286dccfcb06a81e61e96558a3a95c8b477c36c8caa30b1abb48ce205c44b479c8430b3802ef58028bf29281513379f65bbb90bdb80401a541702ac5ec1c5", 0x0, 0x5, 0x0, 0x0, 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000800000000000005b000000c3000000010000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2}, 0x94) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x9f, 0x34, 0xea, 0x8, 0x4b8, 0x202, 0x584c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x69, 0x84, 0x51}}]}}]}}, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
lseek(r1, 0x2000000ffffff7f, 0x3) (async)
read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) (async)
write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, r2, {0x0, 0x1c}}, 0x20) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async)
recvmmsg(r3, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000400)=""/179, 0xb3}], 0x2}, 0x9}], 0x1, 0x22, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)={0x8be, 0x0, 0x0, 0xfffffffc, 0x5}) (async)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000640)={0x53, 0x0, 0xe9, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="362c47da645e12080695c677c6755f978eed4cab7ff2089c45bb22072f772593ae6d7c92859dd7c5a2b3914fa64d9725396a210daaf5ae88482b6ba414774ebd8d529aa372bbf3b384b1854d283008e3d20d0aa75587e9b2b390f85723127b7edd82fa8e8f21a9903a4f218380a81f4c6a8ae45701347508009770bec6710b6ff158521b92e89e507e5983d5e135bbfae1d5b9dda101ada1ecba5ebadb3251c21e5e8cc739f6da725842a5286dccfcb06a81e61e96558a3a95c8b477c36c8caa30b1abb48ce205c44b479c8430b3802ef58028bf29281513379f65bbb90bdb80401a541702ac5ec1c5", 0x0, 0x5, 0x0, 0x0, 0x0}) (async)

7.018014452s ago: executing program 5 (id=1365):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x75)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646fef3d", @ANYRESHEX, @ANYBLOB=',\x00'])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000006a113147000000000c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000706000000ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c0735cce6d26ce12fe9867d9dbb79c04bff713f726ee26148201ff75c90527b9966344fb9d976ad1b37bbb58efb205169a0c30676497e1dc5615f9725ee37a50fd29fe643b2c7db56247816ec1d5fd513f20677e959b32bde97fbd37cdb380fb7cf2e97780d3c27b40468c2836f73eb74f81c05667edc2335d", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018440000feffffff0000000000000000182a0000", @ANYRES32=r0, @ANYBLOB="00000000ff0300009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000000100)=0xd01c, 0x6)
syz_open_procfs(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
unshare(0x20040600)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

6.994158986s ago: executing program 3 (id=1366):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r3, 0x1)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r2, 0x0, 0x0)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=""/61)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810)
connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

6.76637863s ago: executing program 5 (id=1367):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x75)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646fef3d", @ANYRESHEX, @ANYBLOB=',\x00'])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000006a113147000000000c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000706000000ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c0735cce6d26ce12fe9867d9dbb79c04bff713f726ee26148201ff75c90527b9966344fb9d976ad1b37bbb58efb205169a0c30676497e1dc5615f9725ee37a50fd29fe643b2c7db56247816ec1d5fd513f20677e959b32bde97fbd37cdb380fb7cf2e97780d3c27b40468c2836f73eb74f81c05667edc2335d", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018440000feffffff0000000000000000182a0000", @ANYRES32=r0, @ANYBLOB="00000000ff0300009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000000100)=0xd01c, 0x6)
syz_open_procfs(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
unshare(0x20040600)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

6.719688449s ago: executing program 0 (id=1368):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000001020101000000000000000002000002240001801400"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)

6.670547756s ago: executing program 5 (id=1369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/76, 0x4c}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0xa)
fchdir(r4) (async)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x20) (async)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) (async)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r8, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) (async)
shutdown(r7, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
close(r5)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x4, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x5, 0x4}], 'R'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7597d5"}]}, {0x0, [0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f00000014c0)=""/184, 0x46, 0xb8, 0x1, 0xc71f2d1f}, 0x28) (async)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)

6.360112448s ago: executing program 5 (id=1371):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x75)
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646fef3d", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x7, 0x0, 0xfffffffb, 0xffffffff, 'syz1\x00', 0x8}, 0x0, [0xffff, 0x58e, 0x6, 0x0, 0x104, 0x2, 0x8, 0x3, 0xc, 0x8, 0x4, 0xffffffffffff17bf, 0x8, 0x405, 0x10001, 0x2, 0x0, 0x7e01, 0x4, 0xffffffffffffffdb, 0x4, 0x100000001, 0x1821, 0x3dca, 0x6, 0x4, 0x2, 0x5, 0x8, 0xfffffffffffffff9, 0xffff, 0x8, 0xffffffffffffeffe, 0x5, 0x81, 0x49, 0x10001, 0x400, 0x100000001, 0x8, 0x0, 0x75, 0x5, 0x7, 0xf, 0x8, 0x86c, 0x23b2, 0x1, 0xfffffffffffff26e, 0xa, 0x6, 0x8, 0xf, 0x5, 0x7ff, 0x2, 0x8, 0x2, 0x13f, 0x8, 0x8e, 0x7, 0x400, 0x646, 0x3, 0x9, 0x3, 0x5, 0x5, 0x7, 0xc862, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x0, 0x1, 0x8, 0x7, 0x100, 0x3ff, 0x80, 0x1, 0x100000001, 0x3afaac1, 0xddd, 0x9, 0x10, 0x8, 0x80, 0x5, 0x7, 0x3357, 0x6, 0x9c, 0x3, 0x9, 0x51, 0x0, 0x9, 0x7, 0x10, 0x40, 0x29bf, 0x9, 0x9, 0x4, 0x5d, 0x0, 0x400, 0x1, 0x4, 0x10000, 0x8000, 0x0, 0xcb, 0x3, 0x0, 0x8, 0xe56, 0xfff, 0x5, 0xd61, 0x6, 0x3, 0x277a, 0x800]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000006a113147000000000c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000706000000ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c0735cce6d26ce12fe9867d9dbb79c04bff713f726ee26148201ff75c90527b9966344fb9d976ad1b37bbb58efb205169a0c30676497e1dc5615f9725ee37a50fd29fe643b2c7db56247816ec1d5fd513f20677e959b32bde97fbd37cdb380fb7cf2e97780d3c27b40468c2836f73eb74f81c05667edc2335d", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018440000feffffff0000000000000000182a0000", @ANYRES32=r0, @ANYBLOB="00000000ff0300009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='oom_score_adj_update\x00', r2}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000000100)=0xd01c, 0x6)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
unshare(0x20040600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x0, 0x0}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

5.918666426s ago: executing program 5 (id=1372):
socket(0x2, 0x80805, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
openat$dir(0xffffffffffffff9c, 0x0, 0x4, 0x188)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x257f4606091c31c0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101015, 0x0)

5.73596296s ago: executing program 1 (id=1374):
syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f0700", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x3}}}}}}, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00')
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000)
sendmmsg$sock(r0, &(0x7f000000bb00)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x1b, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x10}}], 0x10}}], 0x1, 0xbbad92905db663d0)
r5 = socket(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3c, 0x65, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c044}, 0x20008885)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
eventfd2(0x1, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x3, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

5.73487576s ago: executing program 0 (id=1375):
r0 = socket(0x840000000002, 0x3, 0xfa)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0)
userfaultfd(0x800)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5)
sendmmsg$inet(r0, &(0x7f0000005240), 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x64, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xb1, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000840)={'team0\x00', <r5=>0x0})
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000880)={<r9=>0x0, @private, @initdev}, &(0x7f00000008c0)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00', <r10=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r12, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000000006"], 0x7c}}, 0x80)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000f40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000940)={0x5c0, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x178, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r10}, {0x148, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x8e, 0xd7, 0x40}, {0x3, 0x7, 0x3, 0x8}, {0x2, 0x5, 0xff}, {0xc8, 0x2, 0xb0, 0xffffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x10, 0x7e, 0x10001}, {0x1, 0x4, 0x6, 0x7}, {0x8, 0x22, 0xf9, 0x9}, {0x5, 0xaa, 0x2, 0x200}, {0x12, 0x40, 0x9d}, {0x217, 0x3, 0x4, 0x4}, {0xacfb, 0x98, 0x4, 0x3}, {0x7c82, 0x9, 0x7, 0x3}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x4010}, 0x4040)
r14 = getpid()
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2, 0x100000000, 0x85, r14})

4.837375105s ago: executing program 2 (id=1376):
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0) (async)
prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x27, 0x800}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000580)=0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) (async)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000500)=0xa8)
getsockname$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async, rerun: 64)
read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async, rerun: 64)
mkdir(&(0x7f00000005c0)='./bus\x00', 0x0) (async)
r2 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}], [{@smackfshat={'smackfshat', 0x3d, '-+#\xd7\x94'}}]})
mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1000, 0x0)
link(&(0x7f0000000200)='./file1\x00', 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
close(r4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ff00"})

4.658340895s ago: executing program 0 (id=1377):
r0 = socket$inet(0x2, 0x80802, 0x7e)
keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYRESHEX=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan0\x00'})
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_getparam(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
io_uring_setup(0x4a86, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x10001, 0x7, 0x0, 0x7bc0, 0x80000001, 0x64b, 0x1862}, 0x1c)
r6 = socket(0x1e, 0x2, 0x7ff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0)

4.540305972s ago: executing program 2 (id=1378):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f00000001c0))
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x80000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
mount(0x0, 0x0, 0x0, 0x2014800, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

3.870184311s ago: executing program 3 (id=1379):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x75)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646fef3d", @ANYRESHEX, @ANYBLOB=',\x00'])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000006a113147000000000c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000706000000ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c0735cce6d26ce12fe9867d9dbb79c04bff713f726ee26148201ff75c90527b9966344fb9d976ad1b37bbb58efb205169a0c30676497e1dc5615f9725ee37a50fd29fe643b2c7db56247816ec1d5fd513f20677e959b32bde97fbd37cdb380fb7cf2e97780d3c27b40468c2836f73eb74f81c05667edc2335d", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018440000feffffff0000000000000000182a0000", @ANYRES32=r0, @ANYBLOB="00000000ff0300009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000000100)=0xd01c, 0x6)
syz_open_procfs(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
unshare(0x20040600)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

3.030968106s ago: executing program 2 (id=1380):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0}) (async)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)={0x10, 0xfffffffffffffff5, 0x3}, 0x10) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xf, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008881}, 0x11) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0xf8, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {0x0, 0x10}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc8, 0x2, [@TCA_FLOWER_ACT={0xc4, 0x3, [@m_skbedit={0xc0, 0x17, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0xfffffffc, 0x0, 0x4, 0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xa52}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd, 0xfffffffd, 0x3, 0x4, 0x5}}]}, {0x54, 0x6, "66ce2c232fbd3195a894dec9ce94021228bf4cb1939e036a8eacaf770a174b5cfd6359a6d7ac620d1e276abce7148c3caa84bf4f71d04d340bc2877e14a1edb0b26ee5aa3b8c8b99f534df40169e08e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x11003)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sched_switch\x00', r6, 0x0, 0x3c3d}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x118, r9, 0x400, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xe0, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @loopback, 0x6d2}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004040}, 0x40804) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) (async)
write$usbip_server(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@mpls_getnetconf={0x3c, 0x52, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffff9}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9044}, 0x40)
socket$inet_udp(0x2, 0x2, 0x0)

2.85602125s ago: executing program 3 (id=1381):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0xb0000)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a009d7e000000000080"], 0x26}}, 0x0)
recvfrom(r5, 0x0, 0x0, 0x12060, 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local, 0x1})
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper})
close_range(r3, 0xffffffffffffffff, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x6b, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}})
r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050408100000fa0009058202"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r12=>r2, {0xf}}, './file0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x5, &(0x7f0000000680)=[{0x7f, 0x5, 0x2d, 0xc}, {0x10, 0x9, 0x5, 0x4}, {0x8, 0xd, 0x92, 0x7f}, {0x1000, 0xd5, 0x5, 0x4}, {0x4, 0x4f, 0x1, 0x7fffffff}]})
sendto$unix(r0, &(0x7f00000005c0)="03e4e070750a71ed59dd9a4acea99948e480094eeea0ddbe30a24d4bc09267f7cac695808a175a42119ba7bf44ed4e2caf2505ead1e44a5831123f4e40a001adaf7e756d7deea7eb8153933101d08916063c96aa96804db2142ec59cca94b25c3b45b720cddd78f42a481a54acd3791118d258c7013cd544c67c5481d0ce4eda396b213eb843dcb0c0230a7412bdee", 0x8f, 0x45, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$P9_RGETLOCK(r12, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000370200020d000176b868f7498fd43c2d908d3d9bf590db6ff7b18f3f07ca4466229c0cf6ca8d7a4697be37000000000000ff03000000000000", @ANYRES32, @ANYBLOB='\n\x00/dev/vmci\x00'], 0x28)
syz_usb_control_io$printer(r11, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r11, &(0x7f0000000180)={0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="000c1d0000001d0b6d64ef4feab38659d21c4d3db5331d0214001dfcbc7ae5a0fa733f0c8e8448dacc9ebc4ae6ca60b7780bfd0e04fd2aeb1654633204f3c16e7ce37508d86b9238a0cf4531339bbb4017ad62b8d6d2ff84283655d785a2336503000000b6e9cb34229890e5199c70d40000000033deeb524fcb0dfd1f6d52e6044ab4a2ca24b94055d418d8207a6bc85403cbe7869929679d3e04edc8c9722274a849471f5653dfaebf8710ba4d8a9352bb4bafe8a844e4e5e3f9fb11937cc4"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f00000001c0)={0x40, 0x12, 0x6b, "40815e771dec7b97f0264c57cc45cb274d6ac80ce05174161ec0e3e7d2ec7fbb71b01ddcf1c547e3c29e6dd8cffdb9dbbf9e026a6d7db8daa0bdadbd56bb2ce1ad9da3945ad1ade825253c7e80a63f586ef3a1c08b1ef812d011df3a064e7f2e18c376c759d14096e2b7fc"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}})

2.850312628s ago: executing program 1 (id=1382):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000a, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f000043e000/0x3000)=nil, 0x3000, 0x6000005, 0x10010, r4, 0x852b0000)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0x4583c57b, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000040, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @empty, 0x627bcafb}, 0x1c)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x8dc0b, 0x10100, 0x3, 0x20e, 0x0, r6}, &(0x7f0000000280), &(0x7f00000001c0))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000022696cbf8d7344e1f78aadd6821ea0c2a6dd6369649a1c50e73e8aaaa07f4508dd09edda1ac4f45b3cfacd44ee42b5e946a9a3979d859b3f23b7f4b53e78f1ec51937f50e1a664cc9d86ff2b66c3d422f71825d494862a60e27610fe9053e8350eb15bf2fe375fde4963a8a0013df995ddbcab7334b31b7c92d5a3b871c99855b49dee6", @ANYRES16=r7, @ANYBLOB="050427bd7000fbdbdf255200000008000300", @ANYRES32=r8, @ANYBLOB="0500890002000000050089004c0000000a000600080211000000000005008800070000000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x880)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000010000000000000000000850000000900000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.765444183s ago: executing program 2 (id=1383):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x75)
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646fef3d", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x7, 0x0, 0xfffffffb, 0xffffffff, 'syz1\x00', 0x8}, 0x0, [0xffff, 0x58e, 0x6, 0x0, 0x104, 0x2, 0x8, 0x3, 0xc, 0x8, 0x4, 0xffffffffffff17bf, 0x8, 0x405, 0x10001, 0x2, 0x0, 0x7e01, 0x4, 0xffffffffffffffdb, 0x4, 0x100000001, 0x1821, 0x3dca, 0x6, 0x4, 0x2, 0x5, 0x8, 0xfffffffffffffff9, 0xffff, 0x8, 0xffffffffffffeffe, 0x5, 0x81, 0x49, 0x10001, 0x400, 0x100000001, 0x8, 0x0, 0x75, 0x5, 0x7, 0xf, 0x8, 0x86c, 0x23b2, 0x1, 0xfffffffffffff26e, 0xa, 0x6, 0x8, 0xf, 0x5, 0x7ff, 0x2, 0x8, 0x2, 0x13f, 0x8, 0x8e, 0x7, 0x400, 0x646, 0x3, 0x9, 0x3, 0x5, 0x5, 0x7, 0xc862, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x0, 0x1, 0x8, 0x7, 0x100, 0x3ff, 0x80, 0x1, 0x100000001, 0x3afaac1, 0xddd, 0x9, 0x10, 0x8, 0x80, 0x5, 0x7, 0x3357, 0x6, 0x9c, 0x3, 0x9, 0x51, 0x0, 0x9, 0x7, 0x10, 0x40, 0x29bf, 0x9, 0x9, 0x4, 0x5d, 0x0, 0x400, 0x1, 0x4, 0x10000, 0x8000, 0x0, 0xcb, 0x3, 0x0, 0x8, 0xe56, 0xfff, 0x5, 0xd61, 0x6, 0x3, 0x277a, 0x800]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000006a113147000000000c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000706000000ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c0735cce6d26ce12fe9867d9dbb79c04bff713f726ee26148201ff75c90527b9966344fb9d976ad1b37bbb58efb205169a0c30676497e1dc5615f9725ee37a50fd29fe643b2c7db56247816ec1d5fd513f20677e959b32bde97fbd37cdb380fb7cf2e97780d3c27b40468c2836f73eb74f81c05667edc2335d", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018440000feffffff0000000000000000182a0000", @ANYRES32=r0, @ANYBLOB="00000000ff0300009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='oom_score_adj_update\x00', r2}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000000100)=0xd01c, 0x6)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
unshare(0x20040600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x0, 0x0}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

2.544256715s ago: executing program 2 (id=1384):
r0 = socket$kcm(0xa, 0x2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = gettid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
write$binfmt_elf32(r5, &(0x7f0000002180)=ANY=[@ANYBLOB], 0x58)
getpriority(0x2, r6)
read$msr(r3, &(0x7f000001dc00)=""/102392, 0x18ff8)
mknod(0x0, 0xc000, 0x0)
mount(&(0x7f0000000180)=@nullb, 0x0, &(0x7f0000000040)='befs\x00', 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, <r9=>0x0})
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000002100)={r9})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r10, 0x100000000)

2.468182443s ago: executing program 3 (id=1385):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r1 = socket$xdp(0x2c, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x8]}, 0x8, 0xc0000)
brk(0x400000ffc000)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x10000, 0x1800, 0x4c9, 0x7}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'})

2.260984751s ago: executing program 3 (id=1386):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2)
ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000002080)={0x9, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739", 0x0, 0x0, 0x0, 0x0, 0x3})
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
r4 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x0, 0x0, 0x272}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xffb, 0x0, 0x4)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000016c0)={0x1f, 0x83, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xffffffbe)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000400), 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x1008, 0x3})
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000380)={0x0, 0xf6, ""/246})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000200)={0x2, 0x2, 0x3})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000050000000500010006000000130003006861fbe6a7f167f7e8e673683aee65742c696661636500000930f1072174570a007aefde450500020000000500040008000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc8001}, 0x0)
sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00002e7a0d53a702000000000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000207010100000000000000000200000508000540000000030c00024009000000000003ff0900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2404c884}, 0x20000000)
socket$xdp(0x2c, 0x3, 0x0)
r9 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0)
creat(&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', 0x30c)
ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0x541b, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
syz_io_uring_setup(0x35, &(0x7f0000000580)={0x0, 0xe7b7, 0x40, 0xfffffffe, 0x13c, 0x0, r4}, &(0x7f0000000140), &(0x7f0000001880))

2.253432501s ago: executing program 2 (id=1387):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x5, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000624000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x1, &(0x7f00000000c0)=""/230, 0xe6}, &(0x7f0000000200)=0x40)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0x1})
r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r3}, &(0x7f0000001600)=""/97, 0x61, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r1, 0x0, r5, 0x0, 0x25a5, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=1388):
r0 = socket(0x840000000002, 0x3, 0xfa)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0)
userfaultfd(0x800)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5)
sendmmsg$inet(r0, &(0x7f0000005240), 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x64, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xb1, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000840)={'team0\x00', <r5=>0x0})
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000880)={<r9=>0x0, @private, @initdev}, &(0x7f00000008c0)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00', <r10=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r12, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000000006"], 0x7c}}, 0x80)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000f40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000940)={0x5c0, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x178, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r10}, {0x148, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x8e, 0xd7, 0x40}, {0x3, 0x7, 0x3, 0x8}, {0x2, 0x5, 0xff}, {0xc8, 0x2, 0xb0, 0xffffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x10, 0x7e, 0x10001}, {0x1, 0x4, 0x6, 0x7}, {0x8, 0x22, 0xf9, 0x9}, {0x5, 0xaa, 0x2, 0x200}, {0x12, 0x40, 0x9d}, {0x217, 0x3, 0x4, 0x4}, {0xacfb, 0x98, 0x4, 0x3}, {0x7c82, 0x9, 0x7, 0x3}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x4010}, 0x4040)
r14 = getpid()
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2, 0x100000000, 0x85, r14})

kernel console output (not intermixed with test programs):

58.056314][ T6025] usb 5-1: reset high-speed USB device number 6 using dummy_hcd
[  158.256401][ T6815] delete_channel: no stack
[  160.766239][ T6025] usb 5-1: device descriptor read/64, error -71
[  161.095036][ T6025] usb 5-1: reset high-speed USB device number 6 using dummy_hcd
[  161.275926][ T6025] usb 5-1: device firmware changed
[  161.290049][    T9] usb 5-1: USB disconnect, device number 6
[  161.358859][ T6856] tmpfs: Bad value for 'mpol'
[  162.015041][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[  162.024238][ T6861] netlink: 'syz.2.224': attribute type 12 has an invalid length.
[  162.069604][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[  162.080892][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.145142][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  162.165389][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.177210][ T6861] netlink: 'syz.2.224': attribute type 12 has an invalid length.
[  162.204500][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.235156][   T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.417845][ T6869] binder: 6864:6869 ioctl c0306201 200000000040 returned -14
[  162.826197][    T9] usb 5-1: Using ep0 maxpacket: 32
[  162.986696][    T9] usb 5-1: device descriptor read/all, error -71
[  163.147731][ T6874] input: syz1 as /devices/virtual/input/input7
[  163.445812][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'.
[  164.134688][ T6895] fuse: Bad value for 'fd'
[  164.155981][ T6895] fuse: Bad value for 'fd'
[  164.298230][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.343850][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.534990][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  164.803926][   T24] usb 4-1: device descriptor read/64, error -71
[  165.976896][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  165.998356][ T6910] netlink: 'syz.4.235': attribute type 2 has an invalid length.
[  166.006269][ T6910] netlink: 'syz.4.235': attribute type 11 has an invalid length.
[  166.014451][ T6910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.235'.
[  166.125189][   T24] usb 4-1: device descriptor read/64, error -71
[  166.410282][   T24] usb usb4-port1: attempt power cycle
[  166.835213][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  166.876441][   T24] usb 4-1: device descriptor read/8, error -71
[  167.227074][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  167.412999][   T24] usb 4-1: device descriptor read/8, error -71
[  167.571458][   T24] usb usb4-port1: unable to enumerate USB device
[  168.125259][    T9] IPVS: starting estimator thread 0...
[  168.147261][ T6960] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  168.256899][ T6959] IPVS: using max 37 ests per chain, 88800 per kthread
[  168.585031][ T6004] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  168.905128][ T6004] usb 5-1: device descriptor read/64, error -71
[  169.126578][ T6972] netlink: 'syz.2.245': attribute type 10 has an invalid length.
[  169.155571][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.163193][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.184017][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'.
[  169.198057][ T6004] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  169.338851][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.346169][ T6972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.353668][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.360892][ T6972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.391399][ T6972] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  169.424994][ T6004] usb 5-1: device descriptor read/64, error -71
[  169.927258][ T6004] usb usb5-port1: attempt power cycle
[  170.295448][ T6004] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  170.336169][ T6004] usb 5-1: device descriptor read/8, error -71
[  170.586389][ T6004] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  170.637645][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  170.638631][ T6004] usb 5-1: device descriptor read/8, error -71
[  170.935499][    T9] usb 2-1: device descriptor read/64, error -71
[  170.956532][ T6004] usb usb5-port1: unable to enumerate USB device
[  171.025189][ T5968] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  171.246460][ T7001] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0
[  171.266887][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  171.275120][ T5968] usb 4-1: Using ep0 maxpacket: 8
[  171.291446][ T5968] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  171.340670][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.365823][ T5968] usb 4-1: Product: syz
[  171.371421][ T5968] usb 4-1: Manufacturer: syz
[  171.396569][ T5968] usb 4-1: SerialNumber: syz
[  171.475088][    T9] usb 2-1: device descriptor read/64, error -71
[  171.485110][ T5968] usb 4-1: config 0 descriptor??
[  171.608474][    T9] usb usb2-port1: attempt power cycle
[  171.665119][ T5968] gspca_main: se401-2.14.0 probing 047d:5003
[  171.955016][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  171.982052][ T5968] gspca_se401: Wrong descriptor type
[  172.068899][    T9] usb 2-1: device descriptor read/8, error -71
[  172.186674][ T5945] usb 4-1: USB disconnect, device number 11
[  172.201037][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'.
[  172.325570][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  172.373956][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'.
[  172.409105][    T9] usb 2-1: device descriptor read/8, error -71
[  172.547320][    T9] usb usb2-port1: unable to enumerate USB device
[  172.670210][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.261'.
[  172.903736][ T7025] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  172.926991][ T7023] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.185230][ T6004] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  174.185401][ T6004] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config
[  174.245524][ T6004] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  174.384104][ T6004] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  174.414015][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.431123][ T6004] usb 4-1: Product: syz
[  174.436284][ T6004] usb 4-1: Manufacturer: syz
[  174.443093][ T6004] usb 4-1: SerialNumber: syz
[  174.459933][ T6004] usb 4-1: config 0 descriptor??
[  174.746048][ T7043] 9pnet_fd: Insufficient options for proto=fd
[  176.208741][ T6025] usb 4-1: USB disconnect, device number 12
[  177.656517][ T7085] binder: 7078:7085 ioctl c0306201 200000000040 returned -14
[  178.585402][ T7092] netlink: 32 bytes leftover after parsing attributes in process `syz.4.278'.
[  178.904448][ T7090] vfat: Bad value for 'umask'
[  180.042193][ T7099] evm: overlay not supported
[  180.243206][ T7105] binder: 7101:7105 ioctl c0306201 200000000040 returned -14
[  180.375486][ T7080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.004482][ T7114] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  181.035129][ T7114] EXT4-fs (loop1): unable to read superblock
[  181.362570][ T7125] 9pnet_fd: Insufficient options for proto=fd
[  181.916443][ T7122] mmap: syz.2.289 (7122) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  182.296469][ T7135] vfat: Bad value for 'umask'
[  183.885023][ T6004] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  184.045035][ T6004] usb 4-1: Using ep0 maxpacket: 16
[  184.057416][ T6004] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.093533][ T6004] usb 4-1: config 0 interface 0 has no altsetting 0
[  184.135204][ T6004] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  184.171870][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.208067][ T6004] usb 4-1: config 0 descriptor??
[  184.642634][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.651742][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.849496][ T7165] 9pnet_fd: Insufficient options for proto=fd
[  184.864708][ T6004] usbhid 4-1:0.0: can't add hid device: -71
[  184.872394][ T6004] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  184.954576][ T6004] usb 4-1: USB disconnect, device number 13
[  184.998344][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.013409][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.026294][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.036597][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.072946][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.098103][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.116926][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.136512][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.155315][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.170297][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  185.639494][ T7183] netlink: 'syz.1.307': attribute type 4 has an invalid length.
[  185.865187][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  186.025079][    T9] usb 4-1: Using ep0 maxpacket: 16
[  186.032477][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  186.041670][    T9] usb 4-1: config 11 has an invalid interface number: 92 but max is 0
[  186.050050][    T9] usb 4-1: config 11 has no interface number 0
[  186.056530][    T9] usb 4-1: config 11 interface 92 altsetting 255 endpoint 0x5 has an invalid bInterval 51, changing to 9
[  186.068069][    T9] usb 4-1: config 11 interface 92 altsetting 255 endpoint 0x5 has invalid wMaxPacketSize 0
[  186.078859][    T9] usb 4-1: config 11 interface 92 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  186.093288][    T9] usb 4-1: config 11 interface 92 has no altsetting 0
[  186.103922][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice=80.e2
[  186.105073][ T6004] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  186.113232][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.130211][    T9] usb 4-1: Product: syz
[  186.134655][    T9] usb 4-1: Manufacturer: syz
[  186.139932][    T9] usb 4-1: SerialNumber: syz
[  186.308430][ T6004] usb 2-1: unable to get BOS descriptor or descriptor too short
[  186.318998][ T6004] usb 2-1: not running at top speed; connect to a high speed hub
[  186.328745][ T6004] usb 2-1: config 13 has an invalid interface number: 120 but max is 0
[  186.337382][ T6004] usb 2-1: config 13 has no interface number 0
[  186.343979][ T6004] usb 2-1: config 13 interface 120 has no altsetting 0
[  186.354597][ T6004] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=a1.c9
[  186.368809][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.377039][ T6004] usb 2-1: Product: syz
[  186.381489][ T6004] usb 2-1: Manufacturer: syz
[  186.386202][ T6004] usb 2-1: SerialNumber: syz
[  186.552968][    T9] appletouch 4-1:11.92: Could not find int-in endpoint
[  186.562094][    T9] appletouch 4-1:11.92: probe with driver appletouch failed with error -5
[  186.572924][    T9] usbhid 4-1:11.92: couldn't find an input interrupt endpoint
[  186.590396][    T9] usb 4-1: USB disconnect, device number 14
[  186.675484][ T6004] usb 2-1: USB disconnect, device number 12
[  186.727016][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.120/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.963626][ T7213] 9pnet_fd: Insufficient options for proto=fd
[  187.353044][ T7224] vfat: Bad value for 'umask'
[  187.463918][ T7229] 9pnet_fd: Insufficient options for proto=fd
[  187.513005][ T7225] EXT4-fs: Ignoring removed mblk_io_submit option
[  187.563526][ T7225] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  187.615862][ T7225] EXT4-fs (loop3): unable to read superblock
[  188.862931][ T7256] 9pnet_fd: Insufficient options for proto=fd
[  190.165581][ T7279] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  190.336359][ T7291] input: syz0 as /devices/virtual/input/input9
[  190.674990][ T5968] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  190.885724][ T5968] usb 5-1: unable to get BOS descriptor or descriptor too short
[  190.904621][ T5968] usb 5-1: not running at top speed; connect to a high speed hub
[  190.933314][ T7311] __nla_validate_parse: 55 callbacks suppressed
[  190.933336][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[  190.955121][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'.
[  191.196358][ T5968] usb 5-1: config 1 has an invalid interface number: 138 but max is 0
[  191.213396][ T7311] netlink: 'syz.0.341': attribute type 5 has an invalid length.
[  191.226132][ T7311] netlink: 'syz.0.341': attribute type 11 has an invalid length.
[  191.233258][ T5968] usb 5-1: config 1 has no interface number 0
[  191.255072][ T5968] usb 5-1: config 1 interface 138 altsetting 252 endpoint 0x5 has an invalid bInterval 0, changing to 4
[  191.302390][ T5968] usb 5-1: config 1 interface 138 altsetting 252 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.331472][ T7300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.345108][ T5968] usb 5-1: config 1 interface 138 has no altsetting 0
[  191.465177][ T5968] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  191.474638][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.482782][ T5968] usb 5-1: Product: syz
[  191.489025][ T5968] usb 5-1: Manufacturer: syz
[  191.493729][ T5968] usb 5-1: SerialNumber: syz
[  191.802766][ T7315] 9pnet_fd: Insufficient options for proto=fd
[  191.811848][ T5968] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  192.456273][ T7319] netlink: 'syz.4.343': attribute type 3 has an invalid length.
[  192.576260][ T5968] usb 5-1: USB disconnect, device number 13
[  192.576441][ T7320] netlink: 'syz.4.343': attribute type 3 has an invalid length.
[  192.736697][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.028919][ T7330] sctp: [Deprecated]: syz.2.346 (pid 7330) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.028919][ T7330] Use struct sctp_sack_info instead
[  193.106321][ T7333] vfat: Bad value for 'umask'
[  194.345031][ T6025] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  194.566254][ T6025] usb 4-1: Using ep0 maxpacket: 16
[  194.573492][ T6025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.625271][ T6025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.645976][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout
[  194.715015][ T6025] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  194.724225][ T6025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.804633][ T6025] usb 4-1: config 0 descriptor??
[  194.981388][ T7359] sg_write: data in/out 91/10 bytes for SCSI command 0xc0-- guessing data in;
[  194.981388][ T7359]    program syz.0.353 not setting count and/or reply_len properly
[  195.536771][ T6025] usbhid 4-1:0.0: can't add hid device: -71
[  195.555347][ T6025] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  195.559317][ T7364] 9pnet_fd: Insufficient options for proto=fd
[  195.586206][ T6025] usb 4-1: USB disconnect, device number 15
[  196.341270][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'.
[  196.686242][ T5968] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  196.827887][ T7384] vfat: Bad value for 'umask'
[  196.875215][ T5968] usb 5-1: Using ep0 maxpacket: 32
[  196.890958][ T5968] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.919796][ T5968] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  196.955660][ T5968] usb 5-1: config 0 interface 0 has no altsetting 0
[  196.962469][ T5968] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[  197.003282][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.222705][ T5968] usb 5-1: config 0 descriptor??
[  197.240385][   T30] kauditd_printk_skb: 47 callbacks suppressed
[  197.240402][   T30] audit: type=1326 audit(1758451487.624:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33a4b8ec29 code=0x0
[  197.554220][ T5968] usbhid 5-1:0.0: can't add hid device: -71
[  197.567340][ T5968] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  197.592314][ T5968] usb 5-1: USB disconnect, device number 14
[  198.079221][ T7407] tmpfs: Bad value for 'mpol'
[  198.322036][ T7411] 9pnet_fd: Insufficient options for proto=fd
[  198.335124][ T5945] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  198.615502][ T5945] usb 2-1: Using ep0 maxpacket: 16
[  198.865014][ T5945] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  198.946247][ T5945] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.977494][ T7414] netlink: 'syz.4.369': attribute type 11 has an invalid length.
[  198.985399][ T5945] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  199.029034][ T5945] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  199.065893][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.074231][ T5945] usb 2-1: Product: syz
[  199.122508][ T5945] usb 2-1: Manufacturer: syz
[  199.135210][ T5945] usb 2-1: SerialNumber: syz
[  199.904681][ T5945] usb 2-1: 0:2 : does not exist
[  199.911769][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  199.928910][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  199.973470][ T7419] Process accounting resumed
[  200.475313][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  200.680086][    T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  200.707258][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.718359][ T5945] usb 2-1: USB disconnect, device number 13
[  200.797867][    T9] usb 5-1: Product: syz
[  200.833214][    T9] usb 5-1: Manufacturer: syz
[  200.891524][    T9] usb 5-1: SerialNumber: syz
[  200.901953][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  200.919733][    T9] usb 5-1: config 0 descriptor??
[  201.411138][    T9] usb 5-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4)
[  201.614421][    T9] usb 5-1: failed to fetch extended address, random address set
[  201.652362][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'.
[  201.686237][    T9] usb 5-1: USB disconnect, device number 15
[  201.766020][ T7453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'.
[  201.866389][ T7453] netlink: 48 bytes leftover after parsing attributes in process `syz.0.378'.
[  202.117277][ T7459] 9pnet_fd: Insufficient options for proto=fd
[  202.226009][ T7461] fuse: Bad value for 'fd'
[  203.891513][ T7498] netlink: 'syz.1.387': attribute type 16 has an invalid length.
[  203.910562][ T7498] netlink: 'syz.1.387': attribute type 3 has an invalid length.
[  203.920558][ T7498] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.387'.
[  204.154517][ T7506] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad)
[  204.195123][ T7506] PKCS7: Only support pkcs7_signedData type
[  204.603071][ T5183] Bluetooth: hci3: Unknown advertising packet type: 0x7f
[  204.603131][ T5183] Bluetooth: hci3: adv larger than maximum supported
[  204.610872][ T5183] Bluetooth: hci3: Malformed LE Event: 0x0d
[  204.992959][ T7523] 9pnet_fd: Insufficient options for proto=fd
[  205.731653][ T7534] EXT4-fs: Ignoring removed oldalloc option
[  205.763462][ T7534] ext4: Unknown parameter 'subj_type'
[  206.180494][ T7542] Bluetooth: MGMT ver 1.23
[  206.630186][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.745840][ T7567] 9pnet_fd: Insufficient options for proto=fd
[  208.973045][ T5968] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  209.413270][ T5968] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  209.436241][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.445982][ T5968] usb 2-1: Product: syz
[  209.450937][ T5968] usb 2-1: Manufacturer: syz
[  209.450967][ T5968] usb 2-1: SerialNumber: syz
[  209.518870][ T7577] tty tty26: ldisc open failed (-12), clearing slot 25
[  211.190039][ T5968] rtl8150 2-1:1.0: couldn't reset the device
[  211.196728][ T5968] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  211.265151][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'.
[  211.293575][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'.
[  212.846883][ T5932] usb 2-1: USB disconnect, device number 14
[  212.925862][ T7626] 9pnet_fd: Insufficient options for proto=fd
[  213.165025][ T6004] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  213.335014][ T6004] usb 4-1: Using ep0 maxpacket: 8
[  213.362295][ T6004] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  213.403838][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.439454][ T6004] usb 4-1: config 0 descriptor??
[  215.589011][ T7662] 9pnet_fd: Insufficient options for proto=fd
[  216.590257][ T6004] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  216.649333][ T6004] asix 4-1:0.0: probe with driver asix failed with error -71
[  216.725343][ T6004] usb 4-1: USB disconnect, device number 17
[  216.978697][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  217.097616][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[  217.135155][ T6004] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  217.162936][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  217.229689][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.248456][    T9] usb 2-1: Product: syz
[  217.252853][    T9] usb 2-1: Manufacturer: syz
[  217.277209][    T9] usb 2-1: SerialNumber: syz
[  217.716649][ T6004] usb 4-1: config 255 has an invalid interface number: 181 but max is 0
[  217.730526][ T6004] usb 4-1: config 255 has no interface number 0
[  217.775146][ T6004] usb 4-1: config 255 interface 181 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  217.786871][ T6004] usb 4-1: config 255 interface 181 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[  217.800416][ T6004] usb 4-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=43.b6
[  217.806634][ T7681] sp0: Synchronizing with TNC
[  217.831880][ T7680] [U] è
[  217.884941][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.893447][ T6004] usb 4-1: Product: syz
[  217.915234][ T6004] usb 4-1: Manufacturer: syz
[  217.919914][ T6004] usb 4-1: SerialNumber: syz
[  217.937651][ T7668] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  218.199112][ T6004] ti_usb_3410_5052 4-1:255.181: TI USB 3410 1 port adapter converter detected
[  218.240077][ T6004] ti_usb_3410_5052 4-1:255.181: missing endpoints
[  218.301802][ T6004] usb 4-1: USB disconnect, device number 18
[  218.658271][    T9] rtl8150 2-1:1.0: couldn't reset the device
[  218.673083][    T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  218.972741][ T7698] 9pnet_fd: Insufficient options for proto=fd
[  219.659313][  T984] usb 2-1: USB disconnect, device number 15
[  220.596949][ T7712] binder: 7705:7712 ioctl c0306201 200000000040 returned -14
[  221.406890][ T7726] libceph: resolve '4..' (ret=-3): failed
[  222.336083][ T7736] IPv6: NLM_F_REPLACE set, but no existing node found!
[  222.535076][ T5945] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  222.545025][  T918] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  222.694996][  T918] usb 2-1: Using ep0 maxpacket: 16
[  222.706610][  T918] usb 2-1: unable to get BOS descriptor or descriptor too short
[  222.715369][ T5945] usb 4-1: Using ep0 maxpacket: 16
[  222.716258][  T918] usb 2-1: config 1 has an invalid interface number: 206 but max is 0
[  222.723397][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  222.729247][  T918] usb 2-1: config 1 has no interface number 0
[  222.750124][  T918] usb 2-1: string descriptor 0 read error: -22
[  222.757093][  T918] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a
[  222.757623][ T5945] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  222.767352][  T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.786734][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.794787][ T5945] usb 4-1: Product: syz
[  222.801560][ T5945] usb 4-1: Manufacturer: syz
[  222.803396][  T918] uvcvideo 2-1:1.206: probe with driver uvcvideo failed with error -22
[  222.813681][ T5945] usb 4-1: SerialNumber: syz
[  222.836143][ T5945] usb 4-1: config 0 descriptor??
[  222.876094][ T5945] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  222.981950][  T918] IPVS: starting estimator thread 0...
[  223.021272][  T918] usb 2-1: USB disconnect, device number 16
[  223.114521][ T5945] usb 4-1: USB disconnect, device number 19
[  223.135022][ T7743] IPVS: using max 24 ests per chain, 57600 per kthread
[  223.188205][ T1150] usb 4-1: Failed to submit usb control message: -71
[  223.210647][ T1150] usb 4-1: unable to send the bmi data to the device: -71
[  223.225292][ T1150] usb 4-1: unable to get target info from device
[  223.254634][ T1150] usb 4-1: could not get target info (-71)
[  223.265539][ T1150] usb 4-1: could not probe fw (-71)
[  224.151178][ T7750] 9pnet_fd: Insufficient options for proto=fd
[  225.042719][ T7758] geneve2: entered promiscuous mode
[  225.047350][ T7756] vfat: Bad value for 'umask'
[  225.053514][ T7758] geneve2: entered allmulticast mode
[  226.607279][  T984] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  227.105239][  T984] usb 4-1: Using ep0 maxpacket: 8
[  227.136553][  T984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.155613][  T984] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  227.185961][  T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  227.223709][  T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  227.318717][  T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  227.657517][  T984] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  227.669204][  T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  227.678537][  T984] usb 4-1: Product: syz
[  227.682770][  T984] usb 4-1: Manufacturer: syz
[  227.689254][  T984] usb 4-1: SerialNumber: syz
[  227.702490][  T984] usb 4-1: config 0 descriptor??
[  227.757495][ T7791] 9pnet_fd: Insufficient options for proto=fd
[  227.787150][ T7791] binder: 7789:7791 unknown command 0
[  227.803304][ T7791] binder: 7789:7791 ioctl c0306201 200000000500 returned -22
[  227.956839][  T984] radio-si470x 4-1:0.0: DeviceID=0xd722 ChipID=0x76b4
[  228.157574][  T984] radio-si470x 4-1:0.0: software version 215, hardware version 34
[  228.253384][ T7787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.359914][ T7774] binder: 7773:7774 ioctl 5000940e 200000008340 returned -22
[  228.373699][ T7774] binder: 7773:7774 ioctl c0306201 200000000080 returned -14
[  229.151125][  T984] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110
[  229.173402][ T7774] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.355104][ T7774] MINIX-fs: unable to read superblock
[  229.388802][  T984] radio-si470x 4-1:0.0: submitting int urb failed (-90)
[  229.412941][ T7803] 9pnet_fd: Insufficient options for proto=fd
[  229.445860][  T984] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32
[  229.505306][  T984] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22
[  229.996480][  T984] usb 4-1: USB disconnect, device number 20
[  230.311166][ T7807] ufs: You didn't specify the type of your ufs filesystem
[  230.311166][ T7807] 
[  230.311166][ T7807] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  230.311166][ T7807] 
[  230.311166][ T7807] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  230.350087][ T7807] ufs: ufstype=old is supported read-only
[  230.360893][ T7807] I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  230.526402][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'.
[  230.724747][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'.
[  230.767132][ T7818] netlink: 'syz.3.479': attribute type 4 has an invalid length.
[  230.792111][ T7819] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  230.834440][ T7819] cramfs: wrong magic
[  230.913272][ T7824] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  230.935428][ T7818] netlink: 'syz.3.479': attribute type 4 has an invalid length.
[  230.943970][ T7827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  230.988817][ T7825] netlink: 'syz.3.479': attribute type 4 has an invalid length.
[  231.858885][ T7835] EXT4-fs: Ignoring removed bh option
[  231.867506][ T7835] EXT4-fs: Ignoring removed mblk_io_submit option
[  231.874491][ T7835] ext4: Unknown parameter 'fsuuid'
[  232.133059][ T7835] EXT4-fs: Ignoring removed nobh option
[  232.144708][ T7835] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  232.262325][ T7840] syz.2.484 uses obsolete (PF_INET,SOCK_PACKET)
[  232.682561][ T7832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.535926][ T7852] 9pnet_fd: Insufficient options for proto=fd
[  235.240295][ T6931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.366696][ T7871] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  235.555973][ T6931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.897877][ T6931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.314328][ T6931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.656736][ T7890] binder: 7884:7890 ioctl c0306201 200000000040 returned -14
[  236.697985][ T7894] 9pnet_fd: Insufficient options for proto=fd
[  237.990252][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.017432][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.052973][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.113401][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.130909][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.153981][ T7906] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.187716][ T7906] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32
[  239.902309][ T6931] bond0 (unregistering): Released all slaves
[  240.081119][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'.
[  240.161094][ T5183] Bluetooth: hci1: command tx timeout
[  240.330798][ T7931] overlayfs: missing 'lowerdir'
[  240.578794][ T6931] bond1 (unregistering): Released all slaves
[  240.986286][ T7950] 9pnet_fd: Insufficient options for proto=fd
[  241.011056][ T6931] tipc: Disabling bearer <eth:team0>
[  241.095006][ T5945] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  241.111902][ T6931] tipc: Left network mode
[  241.235632][ T7958] 9pnet_fd: Insufficient options for proto=fd
[  241.256878][ T5945] usb 4-1: Using ep0 maxpacket: 16
[  241.264419][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  241.277491][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  241.292351][ T5945] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  241.302872][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.323084][ T5945] usb 4-1: Product: syz
[  241.327536][ T5945] usb 4-1: Manufacturer: syz
[  241.332357][ T5945] usb 4-1: SerialNumber: syz
[  241.349006][ T5945] usb 4-1: config 0 descriptor??
[  241.357519][ T5945] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  241.367295][ T5945] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  241.570423][ T7966] binder: 7960:7966 ioctl c0306201 200000000040 returned -14
[  241.625796][ T5945] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  241.633047][ T5945] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  241.733762][ T7965] fuse: root generation should be zero
[  241.859640][ T7946] 9pnet_virtio: no channels available for device 127.0.0.1
[  241.970922][ T5945] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  241.999192][ T5945] em28xx 4-1:0.0: No AC97 audio processor
[  242.071893][ T5945] usb 4-1: USB disconnect, device number 21
[  242.080041][ T5945] em28xx 4-1:0.0: Disconnecting em28xx
[  242.145664][ T5945] em28xx 4-1:0.0: Freeing device
[  242.235801][ T5183] Bluetooth: hci1: command tx timeout
[  242.298818][ T6931] hsr_slave_0: left promiscuous mode
[  242.328675][ T6931] hsr_slave_1: left promiscuous mode
[  242.346467][   T30] audit: type=1326 audit(1758451532.714:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7976 comm="syz.3.520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff53c98ec29 code=0x0
[  242.422337][ T6931] veth1_macvtap: left promiscuous mode
[  242.455261][ T6931] veth0_macvtap: left promiscuous mode
[  242.461244][ T6931] veth1_vlan: left promiscuous mode
[  243.122030][ T6931] team0 (unregistering): Port device vlan0 removed
[  243.292728][ T7994] netlink: 48 bytes leftover after parsing attributes in process `syz.2.525'.
[  244.319449][ T5183] Bluetooth: hci1: command tx timeout
[  244.568654][ T7904] chnl_net:caif_netlink_parms(): no params data found
[  244.902365][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.917645][ T5968] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  244.946826][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.983011][ T7904] bridge_slave_0: entered allmulticast mode
[  245.013000][ T7904] bridge_slave_0: entered promiscuous mode
[  245.029591][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'.
[  245.030613][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.066772][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.075919][ T7904] bridge_slave_1: entered allmulticast mode
[  245.077838][ T5968] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  245.086572][ T7904] bridge_slave_1: entered promiscuous mode
[  245.105060][ T5968] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  245.116726][ T5968] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  245.128938][ T5968] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  245.138162][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.151729][ T8006] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  245.188316][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.203031][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  245.232524][ T6931] IPVS: stop unused estimator thread 0...
[  245.337368][ T7904] team0: Port device team_slave_0 added
[  245.351765][ T7904] team0: Port device team_slave_1 added
[  245.501293][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.558267][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  245.607256][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.635954][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.649968][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.657704][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  245.690437][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.707999][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.826909][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.862786][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.927641][   T30] audit: type=1326 audit(1758451536.314:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff53c98ec29 code=0x0
[  246.036371][ T7904] hsr_slave_0: entered promiscuous mode
[  246.045699][ T7904] hsr_slave_1: entered promiscuous mode
[  246.053302][ T7904] debugfs: 'hsr0' already exists in 'hsr'
[  246.060226][ T7904] Cannot create hsr debugfs directory
[  246.087311][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  246.186662][ T8035] binder: 8031:8035 ioctl c0306201 200000000040 returned -14
[  246.305300][    T9] usb 2-1: Using ep0 maxpacket: 16
[  246.327425][    T9] usb 2-1: config 0 has an invalid interface number: 174 but max is 0
[  246.395294][ T5183] Bluetooth: hci1: command tx timeout
[  246.397757][    T9] usb 2-1: config 0 has no interface number 0
[  246.491295][    T9] usb 2-1: New USB device found, idVendor=5050, idProduct=0100, bcdDevice=4a.9d
[  246.520826][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.557806][    T9] usb 2-1: config 0 descriptor??
[  246.589628][    T9] ftdi_sio 2-1:0.174: FTDI USB Serial Device converter detected
[  246.628566][    T9] ftdi_sio ttyUSB0: unknown device type: 0x4a9d
[  246.786083][    T9] usb 2-1: USB disconnect, device number 17
[  246.869631][    T9] ftdi_sio 2-1:0.174: device disconnected
[  247.141494][ T7904] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  247.161464][ T7904] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  247.199724][ T7904] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  247.230212][ T7904] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  247.521328][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.594049][ T7904] 8021q: adding VLAN 0 to HW filter on device team0
[  247.629613][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.637124][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.720260][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.727590][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.927052][ T5968] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  247.937819][ T5968] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input10
[  248.094579][ T7904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  248.149527][ T5968] usb 4-1: USB disconnect, device number 22
[  248.154837][ T7904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.155665][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  248.234548][ T8043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  248.754365][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.554313][ T8098] 9pnet_fd: Insufficient options for proto=fd
[  250.728123][   T43] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  250.952254][   T43] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  251.126368][ T7904] veth0_vlan: entered promiscuous mode
[  251.247885][ T7904] veth1_vlan: entered promiscuous mode
[  251.384695][ T7904] veth0_macvtap: entered promiscuous mode
[  251.411735][ T7904] veth1_macvtap: entered promiscuous mode
[  251.639377][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.680629][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.990068][ T6931] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.999046][ T6931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.008179][ T6931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.021202][ T6931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.263958][ T6931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.272082][ T6931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.285921][ T8110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.380367][ T6181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.402540][ T6181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.660081][ T8123] program syz.5.495 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  253.185125][ T8135] netlink: 277 bytes leftover after parsing attributes in process `syz.5.557'.
[  253.253475][ T8135] netlink: 92 bytes leftover after parsing attributes in process `syz.5.557'.
[  253.505059][ T8124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.654991][   T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  254.015122][   T43] usb 6-1: device descriptor read/64, error -71
[  254.255092][   T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  254.405005][   T43] usb 6-1: device descriptor read/64, error -71
[  254.516312][   T43] usb usb6-port1: attempt power cycle
[  254.615639][ T8132] netlink: 'syz.3.555': attribute type 13 has an invalid length.
[  254.640537][ T8132] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  254.685284][  T918] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  254.854130][ T8167] netlink: 'syz.2.565': attribute type 11 has an invalid length.
[  254.865046][  T918] usb 2-1: Using ep0 maxpacket: 16
[  254.876866][  T918] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023
[  254.901610][  T918] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  254.917229][   T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  255.153365][  T918] usb 2-1: config 1 interface 0 has no altsetting 0
[  255.173899][  T918] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  255.184592][   T43] usb 6-1: device descriptor read/8, error -71
[  255.191466][  T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  255.200236][  T918] usb 2-1: SerialNumber: syz
[  255.209110][ T8152] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  255.548151][ T8152] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  255.665035][   T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  255.686370][   T43] usb 6-1: device descriptor read/8, error -71
[  255.743697][ T8168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.286017][   T43] usb usb6-port1: unable to enumerate USB device
[  256.292997][  T918] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  256.534453][ T8182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.728258][   T43] usb 2-1: USB disconnect, device number 18
[  256.818949][ T8190] 9pnet_fd: Insufficient options for proto=fd
[  258.243886][ T8203] cgroup: subsys name conflicts with all
[  258.380528][ T8210] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  258.461002][ T8210] CIFS mount error: No usable UNC path provided in device string!
[  258.461002][ T8210] 
[  258.473689][ T8210] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  258.705000][ T6004] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  258.767053][ T8236] vfat: Bad value for 'umask'
[  258.868445][ T6004] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  258.895025][   T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  258.993843][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.019400][ T6004] usb 4-1: config 0 descriptor??
[  259.034015][ T6004] gspca_main: cpia1-2.14.0 probing 0813:0001
[  259.159433][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.173836][   T43] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  259.186890][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.227896][   T43] usb 2-1: config 0 descriptor??
[  259.442875][ T6004] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  259.644678][ T6004] gspca_cpia1: usb_control_msg 01, error -32
[  259.653579][ T8215] netlink: 'syz.3.577': attribute type 4 has an invalid length.
[  259.674323][ T6004] gspca_cpia1: usb_control_msg 01, error -71
[  259.701675][   T43] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0
[  259.743421][ T6004] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  259.825271][   T43] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0
[  259.832661][   T43] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0
[  259.849854][ T6004] usb 4-1: USB disconnect, device number 23
[  259.898480][   T43] waterforce 0003:1044:7A4D.0004: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.1-1/input0
[  260.019905][   T43] waterforce 0003:1044:7A4D.0004: fw version request failed with -38
[  260.094955][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  260.143065][   T43] usb 2-1: USB disconnect, device number 19
[  260.274953][    T9] usb 6-1: Using ep0 maxpacket: 16
[  260.282388][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.294821][    T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  260.331476][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.355785][    T9] usb 6-1: config 0 descriptor??
[  260.793786][    T9] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  261.045763][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  261.055425][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  261.181896][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.205001][   T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  261.215654][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.292036][   T24] usb 6-1: USB disconnect, device number 6
[  261.410963][   T43] usb 4-1: config 1 has an invalid interface number: 121 but max is 0
[  261.443364][   T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.479292][   T43] usb 4-1: config 1 has no interface number 0
[  261.487914][   T43] usb 4-1: config 1 interface 121 has no altsetting 0
[  261.506571][   T43] usb 4-1: New USB device found, idVendor=0421, idProduct=01f5, bcdDevice=57.da
[  261.520213][   T43] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  261.540429][   T43] usb 4-1: Manufacturer: syz
[  261.581505][   T43] usb 4-1: bad CDC descriptors
[  261.781306][ T5945] usb 4-1: USB disconnect, device number 24
[  262.679599][ T8310] nilfs2: Bad value for 'cp'
[  264.168532][ T8306] ntfs3(loop0): try to read out of volume at offset 0x0
[  265.063922][ T8337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'.
[  265.688593][ T8316] netlink: 32 bytes leftover after parsing attributes in process `syz.2.607'.
[  265.708430][ T8368] 9pnet_fd: Insufficient options for proto=fd
[  265.719044][ T8366] vfat: Bad value for 'umask'
[  265.812360][ T8369] 9pnet_fd: Insufficient options for proto=fd
[  267.280236][ T8379] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.316993][ T8379] hfs: can't find a HFS filesystem on dev loop0
[  268.399798][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.624'.
[  268.683285][ T8403] EXT4-fs: Ignoring removed nomblk_io_submit option
[  268.705043][   T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  268.733583][ T8404] EXT4-fs: Ignoring removed nomblk_io_submit option
[  268.751921][ T8403] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  268.769101][ T8404] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  268.876636][   T24] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[  268.902809][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  268.907934][ T8406] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  268.938045][ T8406] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  268.946035][   T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  268.959316][ T8406] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  268.960108][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  268.988343][ T8406] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  268.995313][   T24] usb 6-1: SerialNumber: syz
[  269.022677][ T8406] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  269.061878][ T8406] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  269.082292][ T8406] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  269.098539][ T8406] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  269.109882][ T8411] vfat: Bad value for 'umask'
[  269.125160][ T8406] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  269.143759][ T8406] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  269.195220][ T8406] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  269.273818][ T8398] ip6gretap2: entered promiscuous mode
[  269.343773][ T8398] ip6gretap2: entered allmulticast mode
[  269.583761][ T8418] 9pnet_fd: Insufficient options for proto=fd
[  269.613329][   T24] usb 6-1: 0:2 : does not exist
[  269.785640][ T5932] libceph: connect (1)[c::]:6789 error -101
[  269.800628][ T5932] libceph: mon0 (1)[c::]:6789 connect error
[  270.172275][ T8419] ceph: No mds server is up or the cluster is laggy
[  270.236471][ T5932] libceph: connect (1)[c::]:6789 error -101
[  270.295939][ T5932] libceph: mon0 (1)[c::]:6789 connect error
[  270.372338][   T24] usb 6-1: USB disconnect, device number 7
[  270.689534][ T8428] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  270.693463][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  270.726442][ T8428] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  270.738082][ T8428] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  271.646050][ T8428] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  271.659498][ T8428] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  271.666483][ T8428] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  271.710138][ T8428] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  271.811999][ T8443] binder: 8440:8443 ioctl c0306201 200000000040 returned -14
[  272.714963][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  272.795154][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  273.675544][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  273.684567][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout
[  273.782098][ T8473] 9pnet_fd: Insufficient options for proto=fd
[  274.661583][  T918] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  274.845495][  T918] usb 4-1: Using ep0 maxpacket: 32
[  274.858813][  T918] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  274.879646][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  274.889582][  T918] usb 4-1: config 0 has no interface number 0
[  274.930291][  T918] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  274.987105][  T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.021714][  T918] usb 4-1: Product: syz
[  275.038799][  T918] usb 4-1: Manufacturer: syz
[  275.059095][  T918] usb 4-1: SerialNumber: syz
[  275.072343][  T918] usb 4-1: config 0 descriptor??
[  275.131912][  T918] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  275.372905][  T918] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  275.653376][  T918] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  276.094988][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  276.106335][ T8480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.256685][ T8480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.375729][ T8480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.648'.
[  276.446791][ T8507]  nullb0: [POWERTEC]
[  276.476136][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  276.484357][ T6004] usb 4-1: USB disconnect, device number 25
[  276.512442][ T6004] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  276.577970][ T6004] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  276.628956][ T6004] quatech2 4-1:0.51: device disconnected
[  277.365685][ T8523] vfat: Bad value for 'umask'
[  277.918226][ T8528] 9pnet_fd: Insufficient options for proto=fd
[  278.160204][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  278.999567][ T8540] xt_l2tp: wrong L2TP version: 1
[  280.035080][ T6004] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  280.217082][ T6004] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.235855][ T8552] overlayfs: failed to clone upperpath
[  280.245509][ T6004] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  280.429494][ T6004] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  280.439025][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  280.463613][ T6004] usb 2-1: SerialNumber: syz
[  280.737829][ T6004] usb 2-1: 0:2 : does not exist
[  280.742878][ T6004] usb 2-1: unit 5: unexpected type 0x09
[  280.953847][ T8561] batadv1: entered promiscuous mode
[  280.971773][ T8561] 8021q: adding VLAN 0 to HW filter on device batadv1
[  280.978744][ T6004] usb 2-1: USB disconnect, device number 20
[  281.064685][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  281.469245][ T8556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.888050][ T8574] vfat: Bad value for 'umask'
[  283.020000][ T8578] 9pnet_fd: Insufficient options for proto=fd
[  284.052587][ T8587] netlink: 'syz.3.676': attribute type 39 has an invalid length.
[  284.167726][   T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  284.499593][ T8598] bridge_slave_0: left allmulticast mode
[  284.542894][ T8598] bridge_slave_0: left promiscuous mode
[  284.550435][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.564920][   T43] usb 2-1: config 0 has an invalid interface number: 253 but max is 0
[  284.573152][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  284.584359][   T43] usb 2-1: config 0 has no interface number 0
[  284.591127][   T43] usb 2-1: config 0 interface 253 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  284.605502][   T43] usb 2-1: config 0 interface 253 has no altsetting 0
[  284.690330][   T43] usb 2-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00
[  284.707017][ T8598] bridge_slave_1: left allmulticast mode
[  284.712945][ T8598] bridge_slave_1: left promiscuous mode
[  284.730538][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.751889][   T43] usb 2-1: Product: syz
[  284.757785][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.766865][   T43] usb 2-1: Manufacturer: syz
[  284.772986][   T43] usb 2-1: SerialNumber: syz
[  284.849809][   T43] usb 2-1: config 0 descriptor??
[  284.858388][ T8598] bond0: (slave bond_slave_0): Releasing backup interface
[  284.898444][ T8598] bond0: (slave bond_slave_1): Releasing backup interface
[  284.983189][ T8598] team0: Port device team_slave_0 removed
[  285.019690][   T43] usb-storage 2-1:0.253: USB Mass Storage device detected
[  285.074582][   T43] usb-storage 2-1:0.253: This device (04e6,0009,0200 S 04 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller)
[  285.074582][   T43]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  285.115700][ T8598] team0: Port device team_slave_1 removed
[  285.267222][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.345402][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.403270][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.420535][   T43] usb 2-1: USB disconnect, device number 21
[  285.465183][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.548132][ T8598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  287.020928][ T8618] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  287.447893][ T8598] team0: Mode changed to "activebackup"
[  287.726563][ T8623] vfat: Bad value for 'umask'
[  287.806745][ T8629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'.
[  287.855358][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'.
[  288.119820][ T8643] fuse: Unknown parameter ''
[  288.208745][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'.
[  288.423499][ T8661] mmap: syz.2.698 (8661): VmData 175878144 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data.
[  288.651581][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[  288.700062][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'.
[  288.805073][ T8664] netlink: 'syz.1.697': attribute type 11 has an invalid length.
[  289.140048][ T8675] overlayfs: failed to clone upperpath
[  291.497078][ T5945] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  291.551221][ T8674] syz.0.701 (8674): drop_caches: 2
[  291.684201][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout
[  291.782142][ T5945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.934982][ T5945] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  292.149572][ T5945] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  292.263299][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  292.388154][ T5945] usb 4-1: SerialNumber: syz
[  292.473820][   T30] audit: type=1326 audit(1758451582.814:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd6b8ec29 code=0x7fc00000
[  296.798285][ T5945] usb 4-1: 0:2 : does not exist
[  296.831416][ T5945] usb 4-1: USB disconnect, device number 26
[  297.699775][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.112661][ T8730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.780481][ T8753] bond0: (slave bond_slave_0): Releasing backup interface
[  298.939853][ T8753] bond0: (slave bond_slave_1): Releasing backup interface
[  298.988337][ T8753] team0: Port device team_slave_0 removed
[  299.050923][ T8753] team0: Port device team_slave_1 removed
[  299.096057][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.140592][ T8753] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.169121][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.199528][ T8753] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.211190][ T8753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  299.897769][ T5945] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  300.078274][ T5945] usb 2-1: Using ep0 maxpacket: 8
[  300.286172][ T5945] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  300.701355][ T5945] usb 2-1: config 0 has no interface number 0
[  301.139523][ T5945] usb 2-1: config 0 interface 1 has no altsetting 0
[  301.519539][ T5945] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a
[  301.533537][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.543681][ T5945] usb 2-1: Product: syz
[  301.552184][ T5945] usb 2-1: Manufacturer: syz
[  301.560233][ T5945] usb 2-1: SerialNumber: syz
[  301.569073][ T5945] usb 2-1: config 0 descriptor??
[  301.818366][ T8773] comedi comedi0: adq12b: I/O port conflict (0x4,16)
[  303.693112][ T8815] binder: 8808:8815 ioctl c0306201 200000000040 returned -14
[  303.814779][ T8807] netlink: 36 bytes leftover after parsing attributes in process `syz.5.732'.
[  304.733586][ T5945] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -22
[  304.756318][ T5945] usb 2-1: USB disconnect, device number 22
[  305.610936][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.698074][   T30] audit: type=1326 audit(1758451596.084:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.3.737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff53c98ec29 code=0x0
[  306.837207][ T8843] vfat: Bad value for 'umask'
[  306.856185][ T8845] 9pnet_fd: Insufficient options for proto=fd
[  307.004648][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'.
[  307.261823][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'.
[  307.265146][ T8849] 8021q: adding VLAN 0 to HW filter on device bond1
[  307.392144][ T8849] macvlan2: entered promiscuous mode
[  307.404412][ T8849] macvlan2: entered allmulticast mode
[  307.414324][ T8849] bond1: (slave macvlan2): Opening slave failed
[  308.689456][ T8869] 9pnet_fd: Insufficient options for proto=fd
[  310.098521][ T8892] 9pnet_fd: Insufficient options for proto=fd
[  310.138357][ T8893] binder: 8886:8893 ioctl c0306201 200000000040 returned -14
[  311.669392][ T8917] ip6gretap0: entered promiscuous mode
[  313.118568][ T8943] 9pnet_fd: Insufficient options for proto=fd
[  313.500065][ T8947] 9pnet_fd: Insufficient options for proto=fd
[  314.603854][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.772'.
[  314.628225][ T8960] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  314.759405][ T8967] vlan1: mtu less than device minimum
[  315.058836][ T8973] vfat: Bad value for 'umask'
[  315.095827][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'.
[  315.819153][ T8981] binder: 8978:8981 ioctl c0306201 200000000040 returned -14
[  316.134368][ T5932] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  316.201079][ T5932] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  316.480363][ T8985] fido_id[8985]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  317.815037][   T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  317.870850][ T9003] 9pnet_fd: Insufficient options for proto=fd
[  318.090588][   T52] Bluetooth: hci3: unexpected event for opcode 0x2011
[  318.117244][   T43] usb 4-1: Using ep0 maxpacket: 32
[  318.128381][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.162005][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.208384][   T43] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  318.225010][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.246551][ T9006] netlink: 100 bytes leftover after parsing attributes in process `syz.0.784'.
[  318.249479][   T43] usb 4-1: config 0 descriptor??
[  318.265704][ T9009] netlink: 100 bytes leftover after parsing attributes in process `syz.0.784'.
[  318.308721][ T9012] syz_tun: entered allmulticast mode
[  318.524585][ T9023] ext4: Unknown parameter ''
[  318.882570][ T9028] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer.
[  319.602157][   T43] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x7
[  319.633809][ T9029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.690886][   T43] hid-led 0003:27B8:01ED.0007: probe with driver hid-led failed with error -71
[  319.703872][   T43] usb 4-1: USB disconnect, device number 27
[  319.955257][   T24] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  321.504958][   T43] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  321.675315][   T43] usb 4-1: Using ep0 maxpacket: 8
[  321.691560][   T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  321.703332][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.771121][   T43] pvrusb2: Hardware description: Terratec Grabster AV400
[  321.809883][   T43] pvrusb2: **********
[  321.813934][   T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  321.860950][   T43] pvrusb2: Important functionality might not be entirely working.
[  321.894889][   T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  321.936978][   T43] pvrusb2: **********
[  321.946949][ T2346] pvrusb2: Invalid write control endpoint
[  322.151647][ T9049] pvrusb2: Invalid write control endpoint
[  322.159435][ T5183] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  322.169116][ T5183] Bluetooth: hci3: Injecting HCI hardware error event
[  322.177764][ T5183] Bluetooth: hci3: hardware error 0x00
[  322.220947][   T43] usb 4-1: USB disconnect, device number 28
[  322.237561][ T2346] pvrusb2: Invalid write control endpoint
[  322.410609][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  322.515530][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  322.522038][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  322.663189][ T5945] libceph: connect (1)[c::]:6789 error -101
[  323.040977][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  323.048664][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  323.058702][ T2346] pvrusb2: Device being rendered inoperable
[  323.066026][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  323.073149][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  323.081674][ T9086] ceph: No mds server is up or the cluster is laggy
[  323.082831][ T2346] pvrusb2: Attached sub-driver cx25840
[  323.125478][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  323.145543][ T5945] libceph: mon0 (1)[c::]:6789 connect error
[  323.161084][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  323.176060][ T5968] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  323.349864][ T9094] 9pnet_fd: Insufficient options for proto=fd
[  323.477810][ T5968] usb 2-1: Using ep0 maxpacket: 32
[  323.492059][ T5968] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.872078][ T5968] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  323.884336][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.907499][ T5968] usb 2-1: Product: syz
[  324.240772][ T5183] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  324.348385][ T5968] usb 2-1: Manufacturer: syz
[  324.353284][ T5968] usb 2-1: SerialNumber: syz
[  324.376005][ T5968] usb 2-1: config 0 descriptor??
[  324.395024][ T9102] CIFS: iocharset name too long
[  324.411898][ T5968] usb 2-1: bad CDC descriptors
[  324.430145][ T5968] usb 2-1: unsupported MDLM descriptors
[  324.430292][ T9096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.806'.
[  325.204250][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'.
[  325.215782][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'.
[  325.588678][ T9127] overlayfs: failed to clone upperpath
[  325.628510][ T9130] vfat: Bad value for 'umask'
[  326.021437][ T9141] 9pnet_fd: Insufficient options for proto=fd
[  327.134480][  T984] usb 2-1: USB disconnect, device number 24
[  327.954655][ T5932] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  328.081129][ T9172] 9pnet_fd: Insufficient options for proto=fd
[  328.167147][ T5932] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  328.204296][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.225614][ T5932] usb 2-1: Product: syz
[  328.246616][ T5932] usb 2-1: Manufacturer: syz
[  328.248158][ T9177] netlink: 'syz.0.835': attribute type 1 has an invalid length.
[  328.251290][ T5932] usb 2-1: SerialNumber: syz
[  328.274112][ T9177] netlink: 'syz.0.835': attribute type 2 has an invalid length.
[  329.958057][ T9174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.981987][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'.
[  329.990929][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'.
[  329.999865][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'.
[  330.230607][ T5932] rtl8150 2-1:1.0: couldn't reset the device
[  330.243231][ T9188] fuse: Bad value for 'fd'
[  330.425368][ T5932] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  330.931947][ T9198] trusted_key: syz.2.840 sent an empty control message without MSG_MORE.
[  330.936917][ T9200] CIFS mount error: No usable UNC path provided in device string!
[  330.936917][ T9200] 
[  330.951771][ T9200] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  331.080888][ T9204] 9pnet_fd: Insufficient options for proto=fd
[  331.259779][ T9209] netlink: 'syz.2.844': attribute type 62 has an invalid length.
[  331.797136][ T9201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.000846][   T24] usb 2-1: USB disconnect, device number 25
[  333.196376][ T9223] bond0: entered promiscuous mode
[  333.201633][ T9223] bond_slave_0: entered promiscuous mode
[  333.208066][ T9223] bond_slave_1: entered promiscuous mode
[  334.395119][   T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  334.901799][ T9230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.124206][   T24] usb 2-1: Using ep0 maxpacket: 32
[  335.174966][   T24] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.189159][   T24] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  335.205010][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  335.214066][ T9246] 9pnet_fd: Insufficient options for proto=fd
[  335.239820][   T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=08b9, bcdDevice= 0.00
[  335.263198][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.826321][   T24] usb 2-1: config 0 descriptor??
[  335.924037][ T9249] netlink: 'syz.2.855': attribute type 1 has an invalid length.
[  335.984525][ T9249] netlink: 'syz.2.855': attribute type 4 has an invalid length.
[  336.025545][ T9249] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.855'.
[  336.083682][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  336.453430][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  336.510508][   T24] usb 2-1: USB disconnect, device number 26
[  336.564262][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'.
[  337.384954][ T5945] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  337.601457][ T5945] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  337.770955][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.781361][ T5945] usb 2-1: Product: syz
[  337.786178][ T5945] usb 2-1: Manufacturer: syz
[  337.793030][ T5945] usb 2-1: SerialNumber: syz
[  339.835778][ T5945] rtl8150 2-1:1.0: couldn't reset the device
[  339.850131][ T5945] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  340.598342][ T9292] 9pnet_fd: Insufficient options for proto=fd
[  341.787806][ T9304] sit0: entered promiscuous mode
[  341.800606][ T9304] netlink: 'syz.0.870': attribute type 1 has an invalid length.
[  341.824080][ T9304] netlink: 1 bytes leftover after parsing attributes in process `syz.0.870'.
[  341.977090][ T5945] usb 2-1: USB disconnect, device number 27
[  342.513919][ T9299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.845099][ T5968] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  344.035242][ T5968] usb 4-1: Using ep0 maxpacket: 32
[  344.073226][ T5968] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  344.102569][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.122801][ T5968] usb 4-1: Product: syz
[  344.133673][ T5968] usb 4-1: Manufacturer: syz
[  344.165324][ T5968] usb 4-1: SerialNumber: syz
[  344.182962][ T5968] usb 4-1: config 0 descriptor??
[  344.556854][ T9342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.877'.
[  345.185259][ T9351] netlink: 44 bytes leftover after parsing attributes in process `syz.5.882'.
[  345.579562][ T9357] netlink: 'syz.5.883': attribute type 1 has an invalid length.
[  346.055641][ T9366] 9pnet_fd: Insufficient options for proto=fd
[  346.349733][ T5968] mdc800 4-1:0.0: probe fails -> wrong Number of Configuration
[  346.459398][ T5968] usb 4-1: USB disconnect, device number 29
[  346.868173][ T9365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.965266][   T30] audit: type=1326 audit(1758451637.254:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.594981][   T30] audit: type=1326 audit(1758451637.254:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.635057][ T9375] netlink: 'syz.3.890': attribute type 1 has an invalid length.
[  347.665197][   T30] audit: type=1326 audit(1758451637.254:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.693963][   T30] audit: type=1326 audit(1758451637.254:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.716690][   T30] audit: type=1326 audit(1758451637.254:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.739709][   T30] audit: type=1326 audit(1758451637.254:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.764146][   T30] audit: type=1326 audit(1758451637.254:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.820732][   T30] audit: type=1326 audit(1758451637.254:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.880228][   T30] audit: type=1326 audit(1758451637.254:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.923492][   T30] audit: type=1326 audit(1758451637.254:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d898ec29 code=0x7ffc0000
[  347.949770][ T9382] netlink: 'syz.5.892': attribute type 1 has an invalid length.
[  348.207472][ T9387] QAT: failed to copy from user.
[  348.475582][ T9387] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  348.485478][ T9387] I/O error, dev loop3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  348.494934][ T9387] Mount JFS Failure: -5
[  348.499824][ T9387] jfs_mount failed w/return code = -5
[  348.760052][ T9394] binder: 9384:9394 ioctl c0306201 200000000040 returned -14
[  348.846858][ T9400] overlay: Unknown parameter '\ÿ'
[  349.109514][ T9408] 9pnet_fd: Insufficient options for proto=fd
[  349.310732][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'.
[  349.339523][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'.
[  349.355102][ T9418] netlink: 'syz.3.903': attribute type 6 has an invalid length.
[  349.478382][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'.
[  349.675576][ T9424] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  350.110410][ T9413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.584455][ T9425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.813841][ T9445] overlayfs: failed to clone upperpath
[  350.894972][ T9448] 9pnet_fd: Insufficient options for proto=fd
[  350.925168][ T5945] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  351.426759][ T5945] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  351.542980][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.560907][ T5945] usb 4-1: Product: syz
[  351.578490][ T5945] usb 4-1: Manufacturer: syz
[  351.583451][ T5945] usb 4-1: SerialNumber: syz
[  352.695525][ T5945] rtl8150 4-1:1.0: couldn't reset the device
[  352.710505][ T5945] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  352.793676][ T9470] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  352.820930][ T9470] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  352.843842][ T9470] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  352.947498][ T9496] 9pnet_fd: Insufficient options for proto=fd
[  353.097754][ T9481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.614920][ T9490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.742795][ T5932] usb 4-1: USB disconnect, device number 30
[  354.046919][ T9513] rdma_op ffff888028bf89f0 conn xmit_rdma 0000000000000000
[  354.058270][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'.
[  354.067306][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'.
[  354.076683][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'.
[  354.220024][ T5183] Bluetooth: hci2: command 0x0c1a tx timeout
[  354.439010][ T9522] overlayfs: failed to clone upperpath
[  354.482742][ T9525] 9pnet_fd: Insufficient options for proto=fd
[  354.584653][ T9531] overlayfs: failed to clone upperpath
[  354.731798][ T9529] kvm: pic: non byte write
[  354.785586][ T9545] 9pnet_fd: Insufficient options for proto=fd
[  354.875793][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout
[  354.882082][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  355.093497][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.945'.
[  355.136726][ T9556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.945'.
[  355.784258][ T5932] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  355.933443][ T9574] 9pnet_fd: Insufficient options for proto=fd
[  355.968380][ T9558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.994949][ T5932] usb 2-1: Using ep0 maxpacket: 16
[  356.017527][ T5932] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  356.033617][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.043059][ T5932] usb 2-1: Product: syz
[  356.050765][ T5932] usb 2-1: Manufacturer: syz
[  356.058700][ T5932] usb 2-1: SerialNumber: syz
[  356.074356][ T5932] usb 2-1: config 0 descriptor??
[  356.088369][ T5932] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  356.121012][ T9581] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  356.143981][ T9583] 9pnet_fd: Insufficient options for proto=fd
[  356.154286][ T9581] EXT4-fs (loop3): unable to read superblock
[  356.229303][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  356.229323][   T30] audit: type=1326 audit(1758451646.614:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.267798][   T30] audit: type=1326 audit(1758451646.644:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.295652][   T30] audit: type=1326 audit(1758451646.654:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.319417][   T30] audit: type=1326 audit(1758451646.654:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.342373][   T30] audit: type=1326 audit(1758451646.654:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.369026][   T30] audit: type=1326 audit(1758451646.674:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.430845][   T30] audit: type=1326 audit(1758451646.674:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.453269][   T30] audit: type=1326 audit(1758451646.674:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.477074][   T30] audit: type=1326 audit(1758451646.674:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.508563][   T30] audit: type=1326 audit(1758451646.674:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a4b8ec29 code=0x7ffc0000
[  356.654945][   T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  356.805064][   T43] usb 4-1: Using ep0 maxpacket: 16
[  356.812277][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.823578][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.833693][   T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  356.847342][   T43] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  356.856642][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.867551][   T43] usb 4-1: config 0 descriptor??
[  357.291992][   T43] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  357.342603][   T43] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  357.381824][   T43] microsoft 0003:045E:07DA.0008: no inputs found
[  357.397992][   T43] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  357.465418][ T5932] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110
[  357.590780][   T43] usb 4-1: USB disconnect, device number 31
[  357.754301][ T9617] 9pnet_fd: Insufficient options for proto=fd
[  358.360054][ T5968] usb 2-1: USB disconnect, device number 28
[  359.629524][ T9625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.705522][ T9632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.665066][ T9657] tmpfs: Unknown parameter 'u~ö/ØusÕ'
[  361.858245][ T9667] overlayfs: failed to clone upperpath
[  361.894689][ T9669] netlink: 'syz.0.978': attribute type 2 has an invalid length.
[  361.959941][ T9669] netlink: 'syz.0.978': attribute type 1 has an invalid length.
[  362.354969][  T984] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  362.495205][  T984] usb 4-1: device descriptor read/64, error -71
[  362.744970][  T984] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  363.483442][ T9686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.754974][  T984] usb 4-1: device descriptor read/64, error -71
[  364.006033][  T984] usb usb4-port1: attempt power cycle
[  364.965109][  T984] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  364.997536][  T984] usb 4-1: device descriptor read/8, error -71
[  365.308461][ T9720] 9pnet_fd: Insufficient options for proto=fd
[  365.420025][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'.
[  365.547693][ T9734] 9pnet_fd: Insufficient options for proto=fd
[  365.629191][ T9737] macvtap1: entered promiscuous mode
[  365.634567][ T9737] vlan0: entered promiscuous mode
[  365.656219][ T9737] macvtap1: entered allmulticast mode
[  365.661679][ T9737] vlan0: entered allmulticast mode
[  365.667648][ T9737] veth0_vlan: entered allmulticast mode
[  365.691579][ T9737] macvtap2: entered promiscuous mode
[  365.700508][ T9737] macvtap2: entered allmulticast mode
[  367.039431][ T9745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.436582][ T9749] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1000'.
[  367.452630][ T9759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1002'.
[  367.903768][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  367.999373][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'.
[  368.455263][ T9791] vfat: Bad value for 'umask'
[  369.141817][ T9811] 9pnet_fd: Insufficient options for proto=fd
[  370.222007][ T9832] netlink: 784 bytes leftover after parsing attributes in process `syz.5.1022'.
[  370.273314][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1022'.
[  370.303202][ T9832] tipc: Started in network mode
[  370.330232][ T9832] tipc: Node identity 917f, cluster identity 183
[  370.359203][ T9832] tipc: Node number set to 37247
[  370.375509][ T9832] tipc: Cannot configure node identity twice
[  370.944867][ T9844] tipc: Started in network mode
[  370.950034][ T9844] tipc: Node identity ac14140f, cluster identity 4711
[  370.961197][ T9844] tipc: New replicast peer: 255.255.255.255
[  370.969243][ T9844] tipc: Enabled bearer <udp:syz2>, priority 10
[  371.985208][   T43] tipc: Node number set to 2886997007
[  373.112076][ T9855] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1030'.
[  375.170250][ T9873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1035'.
[  375.353202][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'.
[  375.695070][ T5945] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  376.240919][ T9890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.261614][ T5945] usb 4-1: Using ep0 maxpacket: 16
[  376.310253][ T5945] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  376.310328][ T5945] usb 4-1: config 1 has no interface number 0
[  376.310683][ T5945] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  376.310749][ T5945] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  376.310815][ T5945] usb 4-1: config 1 interface 105 has no altsetting 0
[  376.646292][ T5945] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08
[  376.646327][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.646347][ T5945] usb 4-1: Product: syz
[  376.646362][ T5945] usb 4-1: Manufacturer: syz
[  376.646377][ T5945] usb 4-1: SerialNumber: syz
[  376.693751][ T9888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  376.693923][ T9888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  376.756767][ T9903] vfat: Bad value for 'umask'
[  377.446441][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  377.446462][   T30] audit: type=1326 audit(1758451667.814:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.2.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12358ec29 code=0x0
[  378.332555][ T9905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.489013][ T9888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  378.489161][ T9888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  378.960109][ T5945] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0
[  378.960414][ T5945] aqc111 4-1:1.105: probe with driver aqc111 failed with error -61
[  379.618194][   T43] usb 4-1: USB disconnect, device number 36
[  379.717948][   T30] audit: type=1326 audit(1758451670.104:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53c98ec29 code=0x7ffc0000
[  379.831182][   T30] audit: type=1326 audit(1758451670.104:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53c98ec29 code=0x7ffc0000
[  379.875804][   T30] audit: type=1326 audit(1758451670.104:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff53c98ec29 code=0x7ffc0000
[  379.930651][   T30] audit: type=1326 audit(1758451670.104:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53c98ec29 code=0x7ffc0000
[  379.959178][   T30] audit: type=1326 audit(1758451670.104:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff53c98ec29 code=0x7ffc0000
[  379.981984][   T30] audit: type=1326 audit(1758451670.104:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53c98ec29 code=0x7ffc0000
[  380.006086][   T30] audit: type=1326 audit(1758451670.104:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff53c98ec29 code=0x7ffc0000
[  380.060574][   T30] audit: type=1326 audit(1758451670.104:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53c98ec29 code=0x7ffc0000
[  380.083336][   T43] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  380.111441][   T30] audit: type=1326 audit(1758451670.104:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff53c98ec29 code=0x7ffc0000
[  380.258579][   T43] usb 4-1: config index 0 descriptor too short (expected 65069, got 45)
[  380.270534][   T43] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  380.310811][   T43] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  380.370196][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.416362][   T43] usb 4-1: config 0 has no interfaces?
[  380.439630][   T43] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  380.484916][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.559798][   T43] usb 4-1: config 0 descriptor??
[  380.841168][ T9933] usb usb8: usbfs: process 9933 (syz.3.1048) did not claim interface 0 before use
[  380.908420][  T918] usb 4-1: USB disconnect, device number 37
[  381.489357][ T9949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.144061][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.783993][ T9967] 9pnet_fd: Insufficient options for proto=fd
[  382.891226][ T9970] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1058'.
[  383.932065][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  383.941869][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  384.350663][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'.
[  385.210995][ T9999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.286811][T10014] 9pnet_fd: Insufficient options for proto=fd
[  385.420730][T10016] 9pnet_fd: Insufficient options for proto=fd
[  386.593508][T10045] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1073'.
[  386.624182][T10045] unsupported nlmsg_type 40
[  386.804907][   T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  387.055322][   T24] usb 4-1: Using ep0 maxpacket: 32
[  387.063295][   T24] usb 4-1: config 2 has an invalid interface number: 194 but max is 0
[  387.082500][   T24] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  387.154578][   T24] usb 4-1: config 2 has no interface number 0
[  387.181429][   T24] usb 4-1: config 2 interface 194 altsetting 0 bulk endpoint 0xA has invalid maxpacket 7
[  387.237825][   T24] usb 4-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  387.299123][   T24] usb 4-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  387.412644][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.463803][T10049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  387.739444][T10049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.752220][T10070] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  388.177037][T10081] tipc: Can't bind to reserved service type 0
[  388.431326][T10049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.633202][   T24] usb 4-1: string descriptor 0 read error: -71
[  388.649018][   T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  389.028156][   T24] usb 4-1: USB disconnect, device number 38
[  389.265686][    T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  389.447402][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  389.463729][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  389.480562][    T9] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2
[  389.497832][    T9] usb 2-1: config 219 interface 0 has no altsetting 0
[  389.514588][    T9] usb 2-1: config 219 interface 0 has no altsetting 1
[  389.573179][    T9] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e
[  389.585803][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.715229][    T9] usb 2-1: Product: syz
[  389.719461][    T9] usb 2-1: Manufacturer: syz
[  389.724921][    T9] usb 2-1: SerialNumber: syz
[  389.989827][    T9] usb 2-1: selecting invalid altsetting 0
[  390.009728][    T9] usb 2-1: selecting invalid altsetting 0
[  390.111388][    T9] usb 2-1: USB disconnect, device number 29
[  390.306684][ T9959] udevd[9959]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  390.772660][T10118] 9pnet_fd: Insufficient options for proto=fd
[  391.035178][T10114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1100'.
[  393.003069][T10141] 9pnet_fd: Insufficient options for proto=fd
[  393.746411][T10158] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1112'.
[  394.765814][T10177] 9pnet_fd: Insufficient options for proto=fd
[  395.884403][T10185] syz.5.1118 (10185) used greatest stack depth: 17336 bytes left
[  396.369225][T10194] 9pnet_fd: Insufficient options for proto=fd
[  397.449573][T10196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.950760][T10219] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1130'.
[  398.186301][T10226] QAT: Device 6 not found
[  398.218998][T10225] netlink: 'syz.2.1131': attribute type 2 has an invalid length.
[  398.245683][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'.
[  399.229943][   T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  399.347834][T10236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.404947][   T24] usb 2-1: Using ep0 maxpacket: 32
[  399.451449][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024
[  399.524544][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  399.563953][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.629169][   T24] usb 2-1: config 0 descriptor??
[  399.684110][T10242] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  399.728781][   T24] hub 2-1:0.0: USB hub found
[  400.028702][   T24] hub 2-1:0.0: 1 port detected
[  400.258377][   T24] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  400.925341][T10255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  400.985067][   T24] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  401.008685][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  401.014758][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  401.095830][   T24] usb 2-1: USB disconnect, device number 30
[  402.663554][T10295] binder: 10291:10295 ioctl c0306201 200000000040 returned -14
[  404.109347][T10310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.564943][   T43] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  404.804990][   T43] usb 4-1: Using ep0 maxpacket: 8
[  404.826125][   T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  404.836427][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.844560][   T43] usb 4-1: Product: syz
[  404.849570][   T43] usb 4-1: Manufacturer: syz
[  404.854221][   T43] usb 4-1: SerialNumber: syz
[  404.866029][   T43] usb 4-1: config 0 descriptor??
[  405.192196][   T43] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  405.269290][T10342] 9pnet_fd: Insufficient options for proto=fd
[  407.162808][   T43] usb write operation failed. (-71)
[  407.176540][   T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  407.187637][   T43] dvbdev: DVB: registering new adapter (Terratec H7)
[  407.194649][   T43] usb 4-1: media controller created
[  407.203607][   T43] usb read operation failed. (-71)
[  407.209724][   T43] usb write operation failed. (-71)
[  408.204648][   T43] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  408.499375][   T43] usb 4-1: USB disconnect, device number 39
[  408.908939][T10360] program syz.3.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  409.166159][T10351] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1167'.
[  409.701207][T10366] netlink: 'syz.3.1171': attribute type 29 has an invalid length.
[  411.058390][T10372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.338191][T10381] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1174'.
[  411.427341][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1175'.
[  414.540742][T10416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.819586][T10414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1186'.
[  415.062661][T10428] affs: No valid root block on device loop3
[  415.219571][T10427] affs: No valid root block on device loop3
[  415.422234][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'.
[  415.795104][  T984] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  415.841478][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1193'.
[  415.965417][  T984] usb 4-1: device descriptor read/64, error -71
[  416.168310][T10448] netlink: 'syz.2.1195': attribute type 10 has an invalid length.
[  416.212366][T10449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1197'.
[  416.216785][T10448] hsr0: entered promiscuous mode
[  416.234917][  T984] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  416.281209][T10448] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  416.311634][T10448] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  416.394490][T10448] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  416.405511][T10456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1197'.
[  416.485621][  T984] usb 4-1: device descriptor read/64, error -71
[  416.595587][  T984] usb usb4-port1: attempt power cycle
[  416.945030][  T984] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  416.985639][  T984] usb 4-1: device descriptor read/8, error -71
[  417.093439][ T9879] udevd[9879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  417.255057][  T984] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  417.312462][  T984] usb 4-1: device descriptor read/8, error -71
[  417.429171][  T984] usb usb4-port1: unable to enumerate USB device
[  417.481597][T10463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.284632][T10508] kvm: vcpu 0: requested 56 ns lapic timer period limited to 200000 ns
[  419.463615][T10511] tmpfs: Unknown parameter 'GPL'
[  419.493590][T10511] tmpfs: Unknown parameter 'GPL'
[  419.550641][T10511] tmpfs: Unknown parameter 'GPL'
[  419.724996][  T984] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  420.017164][  T984] usb 2-1: device descriptor read/64, error -71
[  420.412730][T10531] 9pnet_fd: Insufficient options for proto=fd
[  420.425089][  T984] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  420.624921][  T984] usb 2-1: device descriptor read/64, error -71
[  420.687304][T10523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.785964][  T984] usb usb2-port1: attempt power cycle
[  420.956192][T10540] netlink: 'syz.0.1219': attribute type 10 has an invalid length.
[  420.971606][T10540] dummy0: left promiscuous mode
[  420.980453][T10540] dummy0: left allmulticast mode
[  421.024365][T10540] dummy0: entered promiscuous mode
[  421.047291][T10540] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  421.154944][  T984] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  421.178213][  T984] usb 2-1: device descriptor read/8, error -71
[  421.306143][T10544] overlayfs: failed to clone upperpath
[  421.424973][  T984] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  421.465714][  T984] usb 2-1: device descriptor read/8, error -71
[  421.752555][  T984] usb usb2-port1: unable to enumerate USB device
[  422.027527][T10552] overlayfs: failed to clone upperpath
[  422.936457][T10578] vfat: Bad value for 'umask'
[  424.266923][T10584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.124916][ T5945] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  425.202866][T10589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.284880][ T5945] usb 2-1: Using ep0 maxpacket: 32
[  425.326747][ T5945] usb 2-1: config index 0 descriptor too short (expected 16411, got 27)
[  425.342085][ T5945] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  425.418240][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  425.474973][ T5945] usb 2-1: config 0 has no interface number 0
[  425.508497][ T5945] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  425.530126][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.544890][ T5945] usb 2-1: Product: syz
[  425.549120][ T5945] usb 2-1: Manufacturer: syz
[  425.557241][ T5945] usb 2-1: SerialNumber: syz
[  425.575972][ T5945] usb 2-1: config 0 descriptor??
[  425.588909][ T5945] quatech2 2-1:0.4: Quatech 2nd gen USB to Serial Driver converter detected
[  425.857906][T10599] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[  425.965456][T10614] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[  425.976783][ T5945] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  425.984103][ T5945] quatech2 2-1:0.4: probe with driver quatech2 failed with error -8
[  426.036635][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1241'.
[  426.172637][T10619] netlink: 'syz.5.1241': attribute type 4 has an invalid length.
[  426.484258][T10622] vfat: Bad value for 'umask'
[  426.761013][   T24] usb 2-1: USB disconnect, device number 35
[  426.933709][T10630] 9pnet_fd: Insufficient options for proto=fd
[  428.641898][T10632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.389983][T10647] 9pnet_fd: Insufficient options for proto=fd
[  429.623212][T10653] 9pnet_fd: Insufficient options for proto=fd
[  431.685722][T10681] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  432.459074][T10689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.619324][T10694] 9pnet_fd: Insufficient options for proto=fd
[  432.825574][T10700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  432.857122][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  432.857140][   T30] audit: type=1326 audit(1758451723.244:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.3.1263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff53c98ec29 code=0x0
[  432.962010][T10708] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  433.468455][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.485593][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.696078][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  433.841286][    T9] usb 2-1: device descriptor read/64, error -71
[  434.096084][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  434.254930][    T9] usb 2-1: device descriptor read/64, error -71
[  434.336612][T10723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1270'.
[  434.388320][    T9] usb usb2-port1: attempt power cycle
[  434.492467][T10732] 9pnet_fd: Insufficient options for proto=fd
[  434.536148][T10730] mkiss: ax0: crc mode is auto.
[  434.715690][T10736] vcan0: tx drop: invalid da for name 0x0000000000000001
[  434.958247][    T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  435.150471][    T9] usb 2-1: device descriptor read/8, error -71
[  435.654577][T10741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  435.783659][ T5968] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  435.815123][    T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  435.855865][    T9] usb 2-1: device descriptor read/8, error -71
[  435.955759][ T5968] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.968659][ T5968] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  435.975518][    T9] usb usb2-port1: unable to enumerate USB device
[  435.999186][ T5968] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  436.009632][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.018073][ T5968] usb 4-1: Product: syz
[  436.022548][ T5968] usb 4-1: Manufacturer: syz
[  436.028348][ T5968] usb 4-1: SerialNumber: syz
[  436.045554][ T5968] cdc_mbim 4-1:1.0: skipping garbage
[  436.265175][T10747] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  436.938534][T10747] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  436.988865][T10772] 9pnet_fd: Insufficient options for proto=fd
[  436.998821][ T5968] cdc_mbim 4-1:1.0: setting tx_max = 48
[  437.049022][ T5968] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  437.081110][ T5968] wwan wwan0: port wwan0mbim0 attached
[  437.111567][T10774] program syz.1.1287 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  437.124890][ T5968] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, ae:d6:a4:fc:6b:ce
[  437.212053][ T5968] usb 4-1: USB disconnect, device number 44
[  437.294995][ T5968] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  437.756761][ T5968] wwan wwan0: port wwan0mbim0 disconnected
[  438.252007][T10770] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1285'.
[  438.939988][T10788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  439.186109][T10795] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.211070][T10795] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.220815][T10795] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  439.232847][T10795] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.242443][T10795] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  439.252573][T10795] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  439.260417][T10795] UDF-fs: Scanning with blocksize 512 failed
[  439.271311][T10795] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.281208][T10795] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.291069][T10795] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  439.301328][T10795] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.310948][T10795] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  439.320808][T10795] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  439.329488][T10795] UDF-fs: Scanning with blocksize 1024 failed
[  439.336572][T10795] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.346515][T10795] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.356695][T10795] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  439.367630][T10795] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.377959][T10795] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  439.387741][T10795] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  439.395801][T10795] UDF-fs: Scanning with blocksize 2048 failed
[  439.402421][T10795] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.412225][T10795] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  439.422316][T10795] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  439.432916][T10795] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  439.441389][T10795] UDF-fs: Scanning with blocksize 4096 failed
[  439.447689][T10795] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  439.462815][T10795] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1292'.
[  439.472032][T10795] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1292'.
[  439.481090][T10795] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1292'.
[  439.685625][T10803] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1295'.
[  439.858389][ T5968] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  440.059413][ T5968] usb 4-1: config 0 has an invalid interface number: 84 but max is 0
[  440.160961][T10819] 9pnet_fd: Insufficient options for proto=fd
[  440.797586][ T5968] usb 4-1: config 0 has an invalid interface number: 66 but max is 0
[  440.806231][ T5968] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  440.817005][ T5968] usb 4-1: config 0 has no interface number 0
[  440.823145][ T5968] usb 4-1: config 0 has no interface number 1
[  440.829843][ T5968] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[  440.841054][ T5968] usb 4-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  440.855117][ T5968] usb 4-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  440.868700][ T5968] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[  440.879079][ T5968] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[  440.891854][ T5968] usb 4-1: config 0 interface 66 altsetting 153 has 2 endpoint descriptors, different from the interface descriptor's value: 216
[  440.913439][ T5968] usb 4-1: config 0 interface 66 has no altsetting 0
[  440.924966][ T5968] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  440.934560][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.942878][ T5968] usb 4-1: Product: syz
[  440.948177][ T5968] usb 4-1: Manufacturer: syz
[  440.952838][ T5968] usb 4-1: SerialNumber: syz
[  440.995922][ T5968] usb 4-1: config 0 descriptor??
[  441.017382][ T5968] ljca 4-1:0.84: bulk endpoints not found
[  441.111889][T10825] ip6tnl1: entered allmulticast mode
[  441.429614][T10830] netlink: 'syz.1.1302': attribute type 1 has an invalid length.
[  441.549862][T10834] netlink: 'syz.1.1302': attribute type 1 has an invalid length.
[  442.314592][T10832] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1303'.
[  443.689541][T10842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  444.245181][ T5932] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  444.379563][ T5968] ljca 4-1:0.66: bulk endpoints not found
[  444.426642][ T5968] usb 4-1: USB disconnect, device number 45
[  444.438786][ T5932] usb 2-1: Using ep0 maxpacket: 32
[  444.467319][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61
[  444.485536][ T5932] usb 2-1: can't read configurations, error -61
[  444.622939][T10857] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1310'.
[  444.637867][ T5932] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  444.648255][T10860] 9pnet_fd: Insufficient options for proto=fd
[  444.669095][T10858] binder: 10853:10858 ioctl c0306201 200000000040 returned -14
[  444.795667][ T5932] usb 2-1: Using ep0 maxpacket: 32
[  444.805372][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61
[  444.822764][ T5932] usb 2-1: can't read configurations, error -61
[  444.833065][ T5932] usb usb2-port1: attempt power cycle
[  445.175359][ T5932] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  445.196071][ T5932] usb 2-1: Using ep0 maxpacket: 32
[  445.203906][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61
[  445.211853][ T5932] usb 2-1: can't read configurations, error -61
[  445.362668][ T5932] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  445.372875][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  445.379616][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  445.406675][ T5932] usb 2-1: Using ep0 maxpacket: 32
[  445.414732][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61
[  445.422636][ T5932] usb 2-1: can't read configurations, error -61
[  445.430389][ T5932] usb usb2-port1: unable to enumerate USB device
[  446.114986][ T5968] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  446.334889][ T5968] usb 4-1: Using ep0 maxpacket: 32
[  446.347135][ T5968] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  446.378692][ T5968] usb 4-1: config 0 has no interface number 0
[  446.398775][ T5968] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  446.414934][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.439397][ T5968] usb 4-1: Product: syz
[  446.444116][ T5968] usb 4-1: Manufacturer: syz
[  446.449169][ T5968] usb 4-1: SerialNumber: syz
[  446.465571][ T5968] usb 4-1: config 0 descriptor??
[  446.476264][ T5968] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  446.549791][T10900] 9pnet_fd: Insufficient options for proto=fd
[  446.690451][ T5968] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  446.740983][ T5968] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  447.085423][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1317'.
[  447.107637][T10878] 8021q: VLANs not supported on ip_vti0
[  447.190111][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  447.206252][   T24] usb 4-1: USB disconnect, device number 46
[  447.235479][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  447.271549][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  447.317305][   T24] quatech2 4-1:0.51: device disconnected
[  447.733842][   T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  448.425239][   T24] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  448.923076][T10945] 9pnet_fd: Insufficient options for proto=fd
[  449.664259][T10959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1342'.
[  449.716794][T10959] team0: Mode changed to "loadbalance"
[  449.734638][T10959] netlink: 'syz.3.1342': attribute type 10 has an invalid length.
[  449.759238][T10959] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.781980][T10959] team0: Port device bond0 added
[  449.789682][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'.
[  449.906502][T10964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1343'.
[  450.013357][T10962] team0 (unregistering): Port device bond0 removed
[  450.025040][   T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  450.196555][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  450.267542][   T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  450.276854][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.337500][   T43] usb 2-1: Product: syz
[  450.351579][   T43] usb 2-1: Manufacturer: syz
[  450.368933][   T43] usb 2-1: SerialNumber: syz
[  450.405995][   T43] usb 2-1: config 0 descriptor??
[  450.678205][T10973] 9pnet_fd: Insufficient options for proto=fd
[  452.655547][    T9] usb 2-1: USB disconnect, device number 44
[  453.185821][T11021] 9pnet_fd: Insufficient options for proto=fd
[  453.888880][ T5968] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  453.949965][T11041] 9pnet_fd: Insufficient options for proto=fd
[  454.047542][ T5968] usb 2-1: Using ep0 maxpacket: 32
[  454.099080][T11046] 9pnet_fd: Insufficient options for proto=fd
[  454.108106][ T5968] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  454.118085][ T5968] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  454.140970][ T5968] usb 2-1: config 0 has no interface number 1
[  454.148149][ T5968] usb 2-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  454.233676][ T5968] usb 2-1: config 0 interface 2 has no altsetting 0
[  454.246982][ T5968] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  454.257480][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.265604][ T5968] usb 2-1: Product: syz
[  454.269797][ T5968] usb 2-1: Manufacturer: syz
[  454.274410][ T5968] usb 2-1: SerialNumber: syz
[  454.290387][ T5968] usb 2-1: config 0 descriptor??
[  454.439898][T11054] tipc: New replicast peer: 255.255.255.255
[  454.453160][T11054] tipc: Enabled bearer <udp:syz2>, priority 10
[  454.520665][ T5968] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  454.538282][ T5968] usb 2-1: invalid MIDI in EP 0
[  454.834350][T11059] overlayfs: unescaped trailing colons in lowerdir mount option.
[  454.856962][T11061] 9pnet_fd: Insufficient options for proto=fd
[  454.882199][ T5968] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22
[  454.987386][ T5968] usb 2-1: USB disconnect, device number 45
[  455.225641][T11068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1373'.
[  455.970540][T11071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1375'.
[  456.532791][T11089] tipc: Started in network mode
[  456.537775][T11089] tipc: Node identity 4, cluster identity 4711
[  456.543938][T11089] tipc: Node number set to 4
[  457.197974][T11093] 9pnet_fd: Insufficient options for proto=fd
[  458.278097][T11108] 9pnet_fd: Insufficient options for proto=fd
[  458.557606][T11111] IPVS: nq: FWM 3 0x00000003 - no destination available
[  460.855026][T11065] ------------[ cut here ]------------
[  460.860658][T11065] WARNING: kernel/nstree.c:115 at __ns_tree_remove+0x28d/0x330, CPU#1: syz.5.1372/11065
[  460.870843][T11065] Modules linked in:
[  460.875035][T11065] CPU: 1 UID: 0 PID: 11065 Comm: syz.5.1372 Not tainted syzkaller #0 PREEMPT(full) 
[  460.884587][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  460.894938][T11065] RIP: 0010:__ns_tree_remove+0x28d/0x330
[  460.900899][T11065] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 92 f9 09 e8 54 f5 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 46 f5 31 00 90 0f 0b 90 e9 ee fd ff ff
[  460.920989][T11065] RSP: 0018:ffffc9000cc27708 EFLAGS: 00010246
[  460.927271][T11065] RAX: ffffffff818de3cc RBX: ffff88801e2c2820 RCX: 0000000000080000
[  460.936618][T11065] RDX: ffffc9000dcc1000 RSI: 000000000007ffff RDI: 0000000000080000
[  460.944730][T11065] RBP: dffffc0000000000 R08: ffff88802f607533 R09: 1ffff11005ec0ea6
[  460.952848][T11065] R10: dffffc0000000000 R11: ffffed1005ec0ea7 R12: ffff88801e2c2820
[  460.961146][T11065] R13: 1ffff11003c58503 R14: ffff88801e2c2800 R15: ffffffff8e1ea3c0
[  460.969356][T11065] FS:  00007fc0d98386c0(0000) GS:ffff888125ae7000(0000) knlGS:0000000000000000
[  460.978487][T11065] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  460.985197][T11065] CR2: 00007ff12439bf98 CR3: 0000000043b0a000 CR4: 00000000003526f0
[  460.993258][T11065] Call Trace:
[  460.996626][T11065]  <TASK>
[  460.999593][T11065]  ? dec_ucount+0x15c/0x180
[  461.004179][T11065]  free_mnt_ns+0xd1/0x110
[  461.008661][T11065]  namespace_unlock+0x529/0x760
[  461.013589][T11065]  ? preempt_schedule_thunk+0x16/0x30
[  461.019154][T11065]  ? __pfx_namespace_unlock+0x10/0x10
[  461.024708][T11065]  ? copy_mnt_ns+0x19d/0x870
[  461.029445][T11065]  ? copy_tree+0x8eb/0x930
[  461.034521][T11065]  copy_mnt_ns+0x6e0/0x870
[  461.039501][T11065]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  461.045450][T11065]  ? create_new_namespaces+0x31/0x720
[  461.050981][T11065]  create_new_namespaces+0xd1/0x720
[  461.056466][T11065]  ? copy_namespaces+0x5c/0x4b0
[  461.061400][T11065]  ? bpf_lsm_capable+0x9/0x20
[  461.066194][T11065]  ? security_capable+0x7e/0x2e0
[  461.071313][T11065]  ? copy_namespaces+0x5c/0x4b0
[  461.076467][T11065]  ? copy_namespaces+0x5c/0x4b0
[  461.081654][T11065]  copy_namespaces+0x438/0x4b0
[  461.086618][T11065]  copy_process+0x1733/0x3c00
[  461.091370][T11065]  ? copy_process+0x97f/0x3c00
[  461.096259][T11065]  ? __pfx_copy_process+0x10/0x10
[  461.101458][T11065]  kernel_clone+0x21e/0x840
[  461.106205][T11065]  ? css_rstat_updated+0x23a/0x4f0
[  461.111394][T11065]  ? __pfx_kernel_clone+0x10/0x10
[  461.116557][T11065]  ? count_memcg_event_mm+0x21/0x260
[  461.121943][T11065]  __x64_sys_clone+0x18b/0x1e0
[  461.126815][T11065]  ? __pfx___x64_sys_clone+0x10/0x10
[  461.132192][T11065]  ? do_user_addr_fault+0xc85/0x1380
[  461.137960][T11065]  ? do_syscall_64+0xbe/0xfa0
[  461.142957][T11065]  do_syscall_64+0xfa/0xfa0
[  461.147561][T11065]  ? lockdep_hardirqs_on+0x9c/0x150
[  461.152812][T11065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.158984][T11065]  ? clear_bhb_loop+0x60/0xb0
[  461.163835][T11065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.169935][T11065] RIP: 0033:0x7fc0d898ec29
[  461.174433][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.194254][T11065] RSP: 002b:00007fc0d9837fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  461.203320][T11065] RAX: ffffffffffffffda RBX: 00007fc0d8bd6090 RCX: 00007fc0d898ec29
[  461.211458][T11065] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 498144ee5f62e049
[  461.219707][T11065] RBP: 00007fc0d8a11e41 R08: 0000000000000000 R09: 0000000000000000
[  461.228011][T11065] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  461.236117][T11065] R13: 00007fc0d8bd6128 R14: 00007fc0d8bd6090 R15: 00007ffcd4cdff88
[  461.244645][T11065]  </TASK>
[  461.248083][T11065] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  461.255497][T11065] CPU: 1 UID: 0 PID: 11065 Comm: syz.5.1372 Not tainted syzkaller #0 PREEMPT(full) 
[  461.265052][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  461.275348][T11065] Call Trace:
[  461.278640][T11065]  <TASK>
[  461.281589][T11065]  dump_stack_lvl+0x99/0x250
[  461.286193][T11065]  ? __asan_memcpy+0x40/0x70
[  461.290804][T11065]  ? __pfx_dump_stack_lvl+0x10/0x10
[  461.296013][T11065]  ? __pfx__printk+0x10/0x10
[  461.300655][T11065]  vpanic+0x237/0x6d0
[  461.304660][T11065]  ? __pfx_vpanic+0x10/0x10
[  461.309313][T11065]  ? is_bpf_text_address+0x292/0x2b0
[  461.314627][T11065]  ? is_bpf_text_address+0x26/0x2b0
[  461.319859][T11065]  panic+0xb9/0xc0
[  461.323636][T11065]  ? __pfx_panic+0x10/0x10
[  461.328089][T11065]  __warn+0x334/0x4c0
[  461.332091][T11065]  ? __ns_tree_remove+0x28d/0x330
[  461.337768][T11065]  ? __ns_tree_remove+0x28d/0x330
[  461.342823][T11065]  report_bug+0x2be/0x4f0
[  461.347176][T11065]  ? __ns_tree_remove+0x28d/0x330
[  461.352254][T11065]  ? __ns_tree_remove+0x28d/0x330
[  461.357441][T11065]  ? __ns_tree_remove+0x28f/0x330
[  461.362570][T11065]  handle_bug+0x84/0x160
[  461.366832][T11065]  exc_invalid_op+0x1a/0x50
[  461.371349][T11065]  asm_exc_invalid_op+0x1a/0x20
[  461.376241][T11065] RIP: 0010:__ns_tree_remove+0x28d/0x330
[  461.381900][T11065] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 92 f9 09 e8 54 f5 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 46 f5 31 00 90 0f 0b 90 e9 ee fd ff ff
[  461.401547][T11065] RSP: 0018:ffffc9000cc27708 EFLAGS: 00010246
[  461.407722][T11065] RAX: ffffffff818de3cc RBX: ffff88801e2c2820 RCX: 0000000000080000
[  461.415703][T11065] RDX: ffffc9000dcc1000 RSI: 000000000007ffff RDI: 0000000000080000
[  461.423684][T11065] RBP: dffffc0000000000 R08: ffff88802f607533 R09: 1ffff11005ec0ea6
[  461.431661][T11065] R10: dffffc0000000000 R11: ffffed1005ec0ea7 R12: ffff88801e2c2820
[  461.439661][T11065] R13: 1ffff11003c58503 R14: ffff88801e2c2800 R15: ffffffff8e1ea3c0
[  461.447684][T11065]  ? __ns_tree_remove+0x28c/0x330
[  461.452741][T11065]  ? __ns_tree_remove+0x28c/0x330
[  461.457806][T11065]  ? dec_ucount+0x15c/0x180
[  461.462329][T11065]  free_mnt_ns+0xd1/0x110
[  461.466669][T11065]  namespace_unlock+0x529/0x760
[  461.471531][T11065]  ? preempt_schedule_thunk+0x16/0x30
[  461.476913][T11065]  ? __pfx_namespace_unlock+0x10/0x10
[  461.482304][T11065]  ? copy_mnt_ns+0x19d/0x870
[  461.486908][T11065]  ? copy_tree+0x8eb/0x930
[  461.491376][T11065]  copy_mnt_ns+0x6e0/0x870
[  461.495811][T11065]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  461.501203][T11065]  ? create_new_namespaces+0x31/0x720
[  461.506676][T11065]  create_new_namespaces+0xd1/0x720
[  461.511888][T11065]  ? copy_namespaces+0x5c/0x4b0
[  461.516752][T11065]  ? bpf_lsm_capable+0x9/0x20
[  461.521460][T11065]  ? security_capable+0x7e/0x2e0
[  461.526429][T11065]  ? copy_namespaces+0x5c/0x4b0
[  461.531302][T11065]  ? copy_namespaces+0x5c/0x4b0
[  461.536241][T11065]  copy_namespaces+0x438/0x4b0
[  461.541024][T11065]  copy_process+0x1733/0x3c00
[  461.545742][T11065]  ? copy_process+0x97f/0x3c00
[  461.550597][T11065]  ? __pfx_copy_process+0x10/0x10
[  461.555671][T11065]  kernel_clone+0x21e/0x840
[  461.560207][T11065]  ? css_rstat_updated+0x23a/0x4f0
[  461.565348][T11065]  ? __pfx_kernel_clone+0x10/0x10
[  461.570393][T11065]  ? count_memcg_event_mm+0x21/0x260
[  461.575737][T11065]  __x64_sys_clone+0x18b/0x1e0
[  461.580545][T11065]  ? __pfx___x64_sys_clone+0x10/0x10
[  461.585862][T11065]  ? do_user_addr_fault+0xc85/0x1380
[  461.591167][T11065]  ? do_syscall_64+0xbe/0xfa0
[  461.595860][T11065]  do_syscall_64+0xfa/0xfa0
[  461.600680][T11065]  ? lockdep_hardirqs_on+0x9c/0x150
[  461.605912][T11065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.612186][T11065]  ? clear_bhb_loop+0x60/0xb0
[  461.616886][T11065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.622802][T11065] RIP: 0033:0x7fc0d898ec29
[  461.627234][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.646937][T11065] RSP: 002b:00007fc0d9837fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  461.655461][T11065] RAX: ffffffffffffffda RBX: 00007fc0d8bd6090 RCX: 00007fc0d898ec29
[  461.663467][T11065] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 498144ee5f62e049
[  461.671532][T11065] RBP: 00007fc0d8a11e41 R08: 0000000000000000 R09: 0000000000000000
[  461.679523][T11065] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  461.687603][T11065] R13: 00007fc0d8bd6128 R14: 00007fc0d8bd6090 R15: 00007ffcd4cdff88
[  461.695606][T11065]  </TASK>
[  461.699038][T11065] Kernel Offset: disabled
[  461.703411][T11065] Rebooting in 86400 seconds..