last executing test programs:

20m36.125077081s ago: executing program 32 (id=916):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x5e9, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x20000050)
munlockall()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x80000001, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}]})
open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4)

20m31.904065429s ago: executing program 33 (id=917):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20m31.057044604s ago: executing program 34 (id=921):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ioprio_set$pid(0x1, 0x0, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0xfffd, 0x7, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x4b0, 0x4, 0x0, 0x0, 0x0, {0x4, 0x4}, {0x0, 0x2}, {0x0, 0x4000004}, {0x0, 0x2, 0x8}, 0x1, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x100, 0x3, 0xc})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700001000000000000000000070000", @ANYRES32=r6, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xf3a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc0702, 0x0)
readv(r7, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/11, 0xb}], 0x1)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e)

19m57.403175631s ago: executing program 3 (id=971):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

19m56.190032883s ago: executing program 3 (id=975):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x408, 0x7)

19m55.895643419s ago: executing program 3 (id=976):
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
r5 = gettid()
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2)

19m54.767430065s ago: executing program 2 (id=980):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x34, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc1, 0x0, 0xc}, 0x300, 0x1, 0x3}}, @link_id={0x65, 0x12, {@random="1c68fb74f3d3", @device_a, @device_b}}]}, @chandef_params]}, 0x5c}}, 0x0)

19m54.618896616s ago: executing program 3 (id=981):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r0 = getpid()
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000002c0))
r2 = syz_pidfd_open(r0, 0x0)
setns(r2, 0x24020000)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
r7 = socket(0x10, 0x80003, 0x0)
write(r7, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24)
socket$inet6(0xa, 0x80002, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

19m53.139071704s ago: executing program 2 (id=982):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
socket(0x1e, 0x4, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008"], 0x98}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)

19m50.887269926s ago: executing program 2 (id=983):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0)

19m50.450436664s ago: executing program 2 (id=984):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c", 0x30}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0)

19m50.181445619s ago: executing program 2 (id=985):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1380, &(0x7f0000003700)=ANY=[])

19m49.068760221s ago: executing program 3 (id=986):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1], 0x118)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)

19m48.710601716s ago: executing program 3 (id=987):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

19m45.033536452s ago: executing program 2 (id=988):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00'})
socket$phonet(0x23, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x10)

19m26.956898022s ago: executing program 35 (id=989):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x4dae5bc9e349e70d, 0xa, 0x10, "929b24164195cd478104fd281bdc4556"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19m22.305071828s ago: executing program 36 (id=988):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00'})
socket$phonet(0x23, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x10)

19m21.951592815s ago: executing program 37 (id=987):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

17m32.30547476s ago: executing program 6 (id=1216):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e01000000000000000000850000007d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x4]}, 0x8)

17m31.911835052s ago: executing program 6 (id=1220):
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9, 0x7, 0x5, 0x10004a1f5aa7, 0x7fff, 0x1000, 0x8086}, &(0x7f0000002b80)={0x2, 0x5, 0x6, 0x0, 0x6, 0x49a2, 0x1, 0x8}, 0x0, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r1, &(0x7f0000000200)={0x8, 0x2d, 0x200, 0x3a, 0x3ff, 0x2c}, 0x48)

17m31.53119288s ago: executing program 6 (id=1224):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

17m30.925176848s ago: executing program 6 (id=1229):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17m29.755823371s ago: executing program 6 (id=1236):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={<r3=>r2})
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r2, r0})
writev(r2, &(0x7f0000000540)=[{&(0x7f00000001c0)="8e01", 0x2}], 0x1)

17m28.12962581s ago: executing program 6 (id=1241):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, 'a#\bY'}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0)

17m12.856928024s ago: executing program 38 (id=1241):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, 'a#\bY'}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0)

16m21.016950872s ago: executing program 8 (id=1399):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$inet(0xa, 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet(0xa, 0x801, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

16m20.189541469s ago: executing program 8 (id=1401):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000800010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c00000014"], 0xe0}}, 0x0)

16m19.956790969s ago: executing program 8 (id=1404):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r1, 0x1)

16m18.815804965s ago: executing program 8 (id=1405):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x560f, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000100)="d8", 0x1, r4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480))
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000023c0), 0xffffffffffffffff)

16m16.55484314s ago: executing program 8 (id=1410):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

16m15.84932018s ago: executing program 8 (id=1414):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet(0x2, 0x3, 0x9)
pipe2$watch_queue(&(0x7f0000000480), 0x80)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf772")
sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)

15m59.398347149s ago: executing program 39 (id=1414):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet(0x2, 0x3, 0x9)
pipe2$watch_queue(&(0x7f0000000480), 0x80)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf772")
sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)

15m52.257787654s ago: executing program 0 (id=1453):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000006c0)='rss_stat\x00', r0, 0x0, 0x800002}, 0x18)
pipe2$9p(&(0x7f0000001900), 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}})

15m52.016527912s ago: executing program 0 (id=1454):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffbfef}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
poll(0x0, 0x0, 0x10000)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xf58)

15m51.013784652s ago: executing program 0 (id=1458):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

15m49.229689213s ago: executing program 0 (id=1461):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x7e32c2, 0x24)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"d404000000001b783bef820f0500df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000009b80)=""/102384, 0x18ff0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81, 0xff, 0x0, 0x0, 0x1, 0x80000001}}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x28, 0x40, 0x107, 0x70bd29, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@typed={0x4, 0xf, 0x0, 0x0, @binary}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
mount$overlay(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), 0x1000, &(0x7f0000000500)={[{@volatile}, {@nfs_export_off}, {@metacopy_off}], [{@seclabel}, {@uid_lt}, {@dont_measure}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$/-'}}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000002040)={0x2, &(0x7f0000002000)=[{0x8, 0x3, 0x0, 0x8}, {0x2, 0x7, 0x48, 0x8001}]})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0)

15m47.120677464s ago: executing program 0 (id=1468):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$usbip_server(r3, &(0x7f0000001600)=@ret_submit={{0x3, 0x2, 0x0, 0x1, 0x6}, 0xa86f, 0x23, 0x0, 0x0, 0x6, 0x0, "a765dbb92e95e37168d50a1a110bb840ade99da1f7d07155093c48e97726d9f16999b2"}, 0x53)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)

15m44.93001807s ago: executing program 0 (id=1473):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet(0x2, 0x3, 0x9)
pipe2$watch_queue(&(0x7f0000000480), 0x80)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf772")
sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202)
socket$nl_route(0x10, 0x3, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)

15m28.771673951s ago: executing program 40 (id=1473):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet(0x2, 0x3, 0x9)
pipe2$watch_queue(&(0x7f0000000480), 0x80)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf772")
sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202)
socket$nl_route(0x10, 0x3, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)

15.21142169s ago: executing program 9 (id=4151):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400)
syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba801020301090227"], 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x1})

15.13585733s ago: executing program 7 (id=4152):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"})
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
r4 = gettid()
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2f7e, &(0x7f0000000180)=""/171)
splice(r2, 0x0, r5, 0x0, 0xaf4, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
socket$netlink(0x10, 0x3, 0xc)

11.978147533s ago: executing program 9 (id=4160):
socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r3, 0x6, 0x25, 0x0, &(0x7f0000000000))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0x0)
fchmodat(r6, &(0x7f0000000000)='.\x00', 0xe0)

10.994203593s ago: executing program 4 (id=4161):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
fcntl$getownex(r2, 0x10, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

10.818185783s ago: executing program 7 (id=4162):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGREP(r2, 0x80084522, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)

9.95591889s ago: executing program 4 (id=4163):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"})
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
r4 = gettid()
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2f7e, &(0x7f0000000180)=""/171)
splice(r2, 0x0, r5, 0x0, 0xaf4, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socket$netlink(0x10, 0x3, 0xc)

9.905365405s ago: executing program 7 (id=4164):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
fcntl$getownex(r2, 0x10, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

9.816440584s ago: executing program 5 (id=4165):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
mkdir(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18)
r1 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000340), {0x2a}, &(0x7f0000000400)=""/73, 0x49, &(0x7f0000000480)=""/215, &(0x7f0000000580)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x62001)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0), 0xfffffffffffffffd, 0x0, 0x10010, 0x2, 0x0})
r6 = socket(0x1000000000000010, 0x80802, 0x0)
sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)

8.868225246s ago: executing program 7 (id=4166):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"})
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
r4 = gettid()
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2f7e, &(0x7f0000000180)=""/171)
splice(r2, 0x0, r5, 0x0, 0xaf4, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socket$netlink(0x10, 0x3, 0xc)

7.88114564s ago: executing program 5 (id=4168):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
timer_create(0x2, &(0x7f0000000100)={0x0, 0x2f}, &(0x7f0000000300))
timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000002c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x7)

7.526368691s ago: executing program 9 (id=4169):
socket(0x1e, 0x4, 0x0)
close(0x3)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='macvlan0\x00', 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x2}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002cbd7010f5ffffff040000000800090002"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

7.419620005s ago: executing program 5 (id=4170):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shutdown(0xffffffffffffffff, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x3c}}, 0x0)

7.156356646s ago: executing program 9 (id=4171):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
timer_create(0x2, &(0x7f0000000100)={0x0, 0x2f}, &(0x7f0000000300))
timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000002c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0)

6.269528421s ago: executing program 5 (id=4173):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"})
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
r4 = gettid()
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2f7e, &(0x7f0000000180)=""/171)
splice(r2, 0x0, r5, 0x0, 0xaf4, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0xc)

5.886351813s ago: executing program 1 (id=4174):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={@map=0x1, 0x1f, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xc216, 0x9, 0x2, 0xe, r0, r0, 0x4})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="380000005500e50128bd70000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030100e08152020000000000000000000000000800"], 0x38}, 0x1, 0x0, 0x0, 0x14004054}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file6\x00', 0x104)
landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)

5.848322925s ago: executing program 4 (id=4175):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0)
link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00')
open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x16}, @window={0x3, 0x8000, 0xfffc}, @sack_perm], 0x7)

5.829667382s ago: executing program 9 (id=4176):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89e1, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74f", 0x3a, r5)
openat$dir(0xffffffffffffff9c, 0x0, 0x51f180, 0x100)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host})
ioctl$SIOCAX25DELUID(r0, 0x89e2, 0x0)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x0)

4.920360536s ago: executing program 1 (id=4177):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)

4.389007515s ago: executing program 7 (id=4178):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)

4.238331838s ago: executing program 4 (id=4179):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"})
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
r4 = gettid()
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)

3.632672443s ago: executing program 9 (id=4180):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000440)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_io_uring_setup(0x24f8, &(0x7f0000000500)={0x0, 0x0, 0x20, 0x1, 0xfffffffd}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x18})
io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r4, 0x0, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
munlockall()
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r5, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

3.615372217s ago: executing program 1 (id=4181):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
timer_create(0x2, &(0x7f0000000100)={0x0, 0x2f}, &(0x7f0000000300))
timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000002c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0)

2.938073291s ago: executing program 5 (id=4182):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_accept_list_size={{0x9}, {0x8, 0x4}}}}, 0x8)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
futex(0x0, 0x6, 0x4, 0x0, 0x0, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x39, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0)
fallocate(r8, 0x10, 0x17e, 0x7)
accept4(r8, 0x0, 0x0, 0x0)

2.877926232s ago: executing program 7 (id=4183):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet(0x2, 0x3, 0x9)
pipe2$watch_queue(&(0x7f0000000480), 0x80)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf772")
sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}]}, 0x154}}, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r7, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)

2.68181729s ago: executing program 4 (id=4184):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"})
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
r4 = gettid()
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r2, 0x0, r5, 0x0, 0xaf4, 0x0)

1.788084476s ago: executing program 1 (id=4185):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
dup(0xffffffffffffffff)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.781523123s ago: executing program 5 (id=4186):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x2, 0xc9, @none, 0x0, 0xb, 0x1, 0x4, 0x6, 0x1}}}, 0x14)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r2, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r3, r2, 0x0, 0x578410eb)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)}}, &(0x7f0000000100))

230.317611ms ago: executing program 1 (id=4187):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0)

163.996753ms ago: executing program 1 (id=4188):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"})
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
r4 = gettid()
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)

0s ago: executing program 4 (id=4189):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$rtc(0x0, 0x7ff, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0)

kernel console output (not intermixed with test programs):

49.041769][T18548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3206'.
[ 1149.600783][ T5945] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[ 1149.770599][ T5945] usb 10-1: Using ep0 maxpacket: 16
[ 1149.959419][ T5945] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1149.980578][ T5945] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1149.990413][ T5945] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1150.079278][T18564] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1150.418884][ T5945] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1150.430904][ T5945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.449854][ T5945] usb 10-1: config 0 descriptor??
[ 1150.962915][ T5945] HID 045e:07da: Invalid code 65791 type 1
[ 1150.978850][ T5945] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0014/input/input26
[ 1151.497529][ T5945] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1151.531006][ T5945] usb 10-1: USB disconnect, device number 45
[ 1151.603254][T18577] fido_id[18577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1152.327668][T18586] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3218'.
[ 1152.701536][T18596] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1153.676972][T18605] netlink: 'syz.9.3223': attribute type 4 has an invalid length.
[ 1155.280581][   T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1155.621593][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1155.762108][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1155.777586][T18626] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1155.785257][   T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1155.809195][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.837858][   T10] usb 5-1: Product: syz
[ 1155.854277][   T10] usb 5-1: Manufacturer: syz
[ 1155.869080][   T10] usb 5-1: SerialNumber: syz
[ 1155.885683][   T10] usb 5-1: config 0 descriptor??
[ 1155.983133][T18633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3231'.
[ 1156.124835][T18634] hub 9-0:1.0: USB hub found
[ 1156.130811][T18634] hub 9-0:1.0: 1 port detected
[ 1156.321561][T18636] overlayfs: failed to resolve './file1': -2
[ 1157.272855][T18649] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1157.891907][T18647] hub 9-0:1.0: USB hub found
[ 1157.897133][T18647] hub 9-0:1.0: 1 port detected
[ 1158.158533][   T10] usb 5-1: USB disconnect, device number 30
[ 1158.350561][T18654] netlink: 'syz.1.3237': attribute type 4 has an invalid length.
[ 1158.471200][T12992] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 1159.875125][T12992] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1159.905560][T12992] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1159.926171][T12992] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1160.030536][T12992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.046601][T12992] usb 10-1: Product: syz
[ 1160.051494][T12992] usb 10-1: Manufacturer: syz
[ 1160.056176][T12992] usb 10-1: SerialNumber: syz
[ 1160.075394][T12992] usb 10-1: config 0 descriptor??
[ 1160.090850][T12992] adutux 10-1:0.0: interrupt endpoints not found
[ 1160.357634][T18670] netlink: 'syz.1.3240': attribute type 10 has an invalid length.
[ 1160.365794][T18670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3240'.
[ 1162.219539][ T5945] usb 10-1: USB disconnect, device number 46
[ 1163.841491][T12992] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1164.078402][   T10] usb 10-1: new full-speed USB device number 47 using dummy_hcd
[ 1164.154220][T12992] usb 5-1: Using ep0 maxpacket: 32
[ 1164.199588][T12992] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1164.218387][T12992] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1164.239260][T12992] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1164.256776][T12992] usb 5-1: Product: syz
[ 1164.268019][T12992] usb 5-1: Manufacturer: syz
[ 1164.272833][T12992] usb 5-1: SerialNumber: syz
[ 1164.302161][T12992] usb 5-1: config 0 descriptor??
[ 1164.426403][T18703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1164.464172][T12992] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1164.470098][T12992] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1164.740127][T18721] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1164.807415][   T10] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1164.821912][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1164.837736][   T10] usb 10-1: config 0 descriptor??
[ 1164.846509][   T10] cp210x 10-1:0.0: cp210x converter detected
[ 1165.264902][   T10] cp210x 10-1:0.0: failed to get vendor val 0x370c size 13: -71
[ 1165.290907][   T10] cp210x 10-1:0.0: GPIO initialisation failed: -71
[ 1165.327952][   T10] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1165.348161][   T10] usb 10-1: USB disconnect, device number 47
[ 1165.365786][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1165.418787][   T10] cp210x 10-1:0.0: device disconnected
[ 1165.478921][   T30] audit: type=1326 audit(1763624339.134:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1165.824211][   T30] audit: type=1326 audit(1763624339.134:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1165.869175][   T30] audit: type=1326 audit(1763624339.134:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1165.893384][   T30] audit: type=1326 audit(1763624339.134:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1165.921302][   T30] audit: type=1326 audit(1763624339.134:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1165.951488][   T30] audit: type=1326 audit(1763624339.164:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1165.987961][   T30] audit: type=1326 audit(1763624339.164:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1166.021048][   T30] audit: type=1326 audit(1763624339.164:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1166.051982][   T30] audit: type=1326 audit(1763624339.164:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1166.076319][   T30] audit: type=1326 audit(1763624339.164:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18731 comm="syz.7.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ae78f749 code=0x7ffc0000
[ 1166.181731][   T10] usb 5-1: USB disconnect, device number 31
[ 1166.236658][T18737] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3261'.
[ 1166.649039][T18747] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1168.641468][T18770] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1170.094672][   T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1170.102309][T12992] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[ 1170.441883][T12992] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1170.460861][T12992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1170.501147][T12992] usb 6-1: config 0 descriptor??
[ 1170.521945][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1170.552312][T12992] cp210x 6-1:0.0: cp210x converter detected
[ 1170.563910][   T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1170.590580][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.604623][   T10] usb 5-1: Product: syz
[ 1170.609182][   T10] usb 5-1: Manufacturer: syz
[ 1170.616891][   T10] usb 5-1: SerialNumber: syz
[ 1170.626382][   T10] usb 5-1: config 0 descriptor??
[ 1170.986459][T12992] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71
[ 1170.995705][T12992] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 1171.005756][T18786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3270'.
[ 1171.015456][T12992] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1171.071993][T12992] usb 6-1: USB disconnect, device number 29
[ 1171.109126][T12992] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1171.254613][T12992] cp210x 6-1:0.0: device disconnected
[ 1171.768777][   T10] usb 5-1: USB disconnect, device number 32
[ 1171.932847][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3277'.
[ 1172.288436][T18802] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1173.165371][T18812] netlink: 'syz.5.3282': attribute type 4 has an invalid length.
[ 1173.781684][T18820] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1175.671235][T18837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3290'.
[ 1175.686059][T18837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=18837 comm=syz.5.3290
[ 1176.705721][T18842] hub 9-0:1.0: USB hub found
[ 1176.712025][T18842] hub 9-0:1.0: 1 port detected
[ 1176.795078][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1176.801519][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.305941][   T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1178.921022][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1179.215482][T18864] vivid-007: kernel_thread() failed
[ 1179.294973][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1179.334258][   T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1179.382272][   T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1179.420585][   T10] usb 5-1: Product: syz
[ 1179.430860][   T10] usb 5-1: Manufacturer: syz
[ 1179.444648][   T10] usb 5-1: SerialNumber: syz
[ 1179.579477][   T10] usb 5-1: config 0 descriptor??
[ 1179.604313][T18852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1179.910080][   T10] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1179.917358][   T10] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1180.881830][   T10] usb 5-1: USB disconnect, device number 33
[ 1186.792687][T18953] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1186.885061][T18954] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1189.339720][T18972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=18972 comm=syz.1.3329
[ 1193.169026][T19006] netlink: 'syz.4.3337': attribute type 4 has an invalid length.
[ 1194.215133][T19033] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1195.351568][T19041] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1196.082498][T19046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=19046 comm=syz.5.3345
[ 1197.170947][   T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1197.874231][T19051] vivid-007: kernel_thread() failed
[ 1198.979290][   T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1198.988086][   T10] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1198.998695][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1199.017171][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1199.201545][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1199.215142][   T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1199.238624][   T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1199.876116][   T10] usb 5-1: Product: syz
[ 1199.942650][   T10] usb 5-1: Manufacturer: syz
[ 1200.102538][T19077] netlink: 'syz.7.3351': attribute type 4 has an invalid length.
[ 1200.244904][   T10] usb 5-1: can't set config #1, error -71
[ 1200.499765][   T10] usb 5-1: USB disconnect, device number 34
[ 1200.974589][T19085] hub 9-0:1.0: USB hub found
[ 1200.989342][T19085] hub 9-0:1.0: 1 port detected
[ 1201.086672][T19092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=19092 comm=syz.5.3356
[ 1202.073485][T19088] IPVS: Scheduler module ip_vs_sip not found
[ 1202.238551][T19099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1202.936117][   T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1203.190540][   T10] usb 5-1: Using ep0 maxpacket: 16
[ 1203.197306][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1203.211371][   T10] usb 5-1: config 15 has an invalid interface number: 174 but max is 0
[ 1203.219634][   T10] usb 5-1: config 15 has no interface number 0
[ 1203.241941][   T10] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1203.260518][   T10] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1203.278815][   T10] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1203.295037][   T10] usb 5-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1203.306855][   T10] usb 5-1: config 15 interface 174 has no altsetting 0
[ 1203.316372][   T10] usb 5-1: string descriptor 0 read error: -22
[ 1203.322824][   T10] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1203.331917][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.345412][   T10] sierra 5-1:15.174: Sierra USB modem converter detected
[ 1203.558947][   T10] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[ 1203.602229][   T10] usb 5-1: Sierra USB modem converter now attached to ttyUSB1
[ 1203.920253][   T10] usb 5-1: USB disconnect, device number 35
[ 1203.957768][   T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1204.003400][   T10] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1204.039093][   T10] sierra 5-1:15.174: device disconnected
[ 1204.393162][T19137] netlink: 'syz.1.3370': attribute type 10 has an invalid length.
[ 1204.401137][T19137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3370'.
[ 1204.895412][T19144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1205.076016][   T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 1205.310568][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1205.322962][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1205.346808][   T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1205.390584][   T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1205.423683][   T10] usb 5-1: Product: syz
[ 1205.511038][   T10] usb 5-1: Manufacturer: syz
[ 1205.515884][   T10] usb 5-1: SerialNumber: syz
[ 1205.527252][   T10] usb 5-1: config 0 descriptor??
[ 1205.539729][T19141] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1205.550142][   T10] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1205.590787][   T10] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1205.770546][T12992] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1205.891087][ T5945] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1206.120757][ T5945] usb 10-1: Using ep0 maxpacket: 32
[ 1206.160377][ T5945] usb 10-1: config 0 has an invalid interface number: 132 but max is 0
[ 1206.242219][ T5945] usb 10-1: config 0 has no interface number 0
[ 1206.296706][ T5945] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1206.421061][ T5945] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1206.520409][ T5945] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1206.592456][ T5945] usb 10-1: Product: syz
[ 1206.620105][ T5945] usb 10-1: Manufacturer: syz
[ 1206.646793][ T5945] usb 10-1: SerialNumber: syz
[ 1206.728874][ T5945] usb 10-1: config 0 descriptor??
[ 1206.841208][T12992] usb 2-1: Using ep0 maxpacket: 16
[ 1206.858594][T12992] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1206.878900][T12992] usb 2-1: config 15 has an invalid interface number: 174 but max is 1
[ 1206.907018][ T5945] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1206.926573][T12992] usb 2-1: config 15 has an invalid interface number: 5 but max is 1
[ 1206.934841][ T5945] em28xx 10-1:0.132: Video interface 132 found:
[ 1206.936954][T12992] usb 2-1: config 15 has an invalid interface descriptor of length 2, skipping
[ 1206.951589][T12992] usb 2-1: config 15 has no interface number 0
[ 1206.957764][T12992] usb 2-1: config 15 has no interface number 1
[ 1206.964165][T12992] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1207.292431][T12992] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1207.302839][T12992] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[ 1207.314073][T12992] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[ 1207.356536][T12992] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1207.383533][T12992] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1207.397610][T12992] usb 2-1: config 15 interface 5 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 1207.412851][T12992] usb 2-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[ 1207.644925][ T5945] em28xx 10-1:0.132: unknown em28xx chip ID (0)
[ 1207.654855][T12992] usb 2-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1207.708968][T12992] usb 2-1: config 15 interface 174 has no altsetting 0
[ 1207.719895][T12992] usb 2-1: config 15 interface 5 has no altsetting 0
[ 1207.736860][T12992] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1207.800841][T12992] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1207.891846][T12992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.895340][ T5945] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 1207.915880][T12992] usb 2-1: Product: syz
[ 1207.935922][ T5945] em28xx 10-1:0.132: board has no eeprom
[ 1208.020614][ T5945] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1208.034224][ T5945] em28xx 10-1:0.132: analog set to bulk mode.
[ 1208.050694][ T7271] em28xx 10-1:0.132: Registering V4L2 extension
[ 1208.057312][T12992] usb 2-1: Manufacturer: syz
[ 1208.089052][ T5945] usb 10-1: USB disconnect, device number 48
[ 1208.090086][T12992] usb 2-1: SerialNumber: syz
[ 1208.601848][ T5945] em28xx 10-1:0.132: Disconnecting em28xx
[ 1208.670699][T12992] usb 2-1: can't set config #15, error -71
[ 1208.716944][T12992] usb 2-1: USB disconnect, device number 25
[ 1209.073666][ T7271] em28xx 10-1:0.132: Config register raw data: 0xffffffed
[ 1209.084274][T19196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1209.552871][ T7271] em28xx 10-1:0.132: AC97 chip type couldn't be determined
[ 1209.560285][ T7271] em28xx 10-1:0.132: No AC97 audio processor
[ 1210.026453][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3385'.
[ 1210.066534][ T7271] usb 10-1: Decoder not found
[ 1210.081255][ T7271] em28xx 10-1:0.132: failed to create media graph
[ 1210.108325][ T7271] em28xx 10-1:0.132: V4L2 device video103 deregistered
[ 1210.228239][ T7271] em28xx 10-1:0.132: Remote control support is not available for this card.
[ 1210.237232][ T5945] em28xx 10-1:0.132: Closing input extension
[ 1210.364709][ T5945] em28xx 10-1:0.132: Freeing device
[ 1210.796745][T19206] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1211.676653][T19223] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1213.062646][ T9359] usb 5-1: USB disconnect, device number 36
[ 1214.511699][T19250] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1214.916659][T19256] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[ 1214.926562][T19256] batadv_slave_0: entered promiscuous mode
[ 1214.933333][T19256] batadv_slave_0: left promiscuous mode
[ 1214.941881][T19256] mac80211_hwsim hwsim32 wlan0: left promiscuous mode
[ 1217.288403][T19280] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1219.864747][T19303] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[ 1219.913796][T19303] batadv_slave_0: entered promiscuous mode
[ 1219.919872][T19303] batadv_slave_0: left promiscuous mode
[ 1219.945585][T19303] mac80211_hwsim hwsim32 wlan0: left promiscuous mode
[ 1221.434495][T19334] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1221.544630][T19340] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3423'.
[ 1223.698257][T19381] netlink: 'syz.5.3434': attribute type 4 has an invalid length.
[ 1225.745303][T19403] hub 9-0:1.0: USB hub found
[ 1225.751102][T19403] hub 9-0:1.0: 1 port detected
[ 1227.988862][T19421] IPVS: Scheduler module ip_vs_sip not found
[ 1228.513347][T19436] netlink: 'syz.7.3448': attribute type 10 has an invalid length.
[ 1228.521260][T19436] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3448'.
[ 1229.211898][T19441] netlink: 'syz.9.3450': attribute type 4 has an invalid length.
[ 1230.218632][T19446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1230.837196][ T5945] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1231.153705][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3451'.
[ 1231.204795][T19451] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3454'.
[ 1231.502025][ T5945] usb 10-1: Using ep0 maxpacket: 16
[ 1231.616487][T19463] 9pnet_virtio: no channels available for device syz
[ 1232.475475][ T5945] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1232.663935][ T5945] usb 10-1: config 15 has an invalid interface number: 174 but max is 0
[ 1233.034864][ T5945] usb 10-1: config 15 has no interface number 0
[ 1233.098495][ T5945] usb 10-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1233.145081][ T5945] usb 10-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1233.185198][ T5945] usb 10-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1233.287702][ T5945] usb 10-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1233.320038][ T5945] usb 10-1: config 15 interface 174 has no altsetting 0
[ 1233.349860][ T5945] usb 10-1: string descriptor 0 read error: -71
[ 1233.840537][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1233.840548][   T30] audit: type=1400 audit(1763624407.144:468): avc:  denied  { mount } for  pid=19470 comm="syz.7.3460" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 1234.027445][ T5945] usb 10-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1234.382473][ T5945] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.393806][   T30] audit: type=1326 audit(1763624407.714:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.1.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be7f8f749 code=0x7ffc0000
[ 1234.417537][ T5945] usb 10-1: can't set config #15, error -71
[ 1234.423575][   T30] audit: type=1326 audit(1763624407.714:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.1.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be7f8f749 code=0x7ffc0000
[ 1234.449827][   T30] audit: type=1326 audit(1763624407.714:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.1.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4be7f8f749 code=0x7ffc0000
[ 1234.452610][ T5945] usb 10-1: USB disconnect, device number 49
[ 1234.479654][   T30] audit: type=1326 audit(1763624407.714:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.1.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be7f8f749 code=0x7ffc0000
[ 1234.503617][   T30] audit: type=1326 audit(1763624407.714:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.1.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be7f8f749 code=0x7ffc0000
[ 1234.528507][   T30] audit: type=1326 audit(1763624407.714:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.1.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4be7f8f749 code=0x7ffc0000
[ 1234.595643][   T30] audit: type=1326 audit(1763624407.714:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.1.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be7f8f749 code=0x7ffc0000
[ 1234.628604][   T30] audit: type=1326 audit(1763624407.714:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.1.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be7f8f749 code=0x7ffc0000
[ 1234.942657][   T30] audit: type=1326 audit(1763624407.714:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.1.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4be7f8f749 code=0x7ffc0000
[ 1235.227961][T19495] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1235.278094][ T9359] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1235.431055][ T9359] usb 6-1: Using ep0 maxpacket: 32
[ 1235.448669][ T9359] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1235.490685][ T9359] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1235.537497][ T9359] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1235.562493][ T9359] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1235.661526][ T9359] usb 6-1: Product: syz
[ 1235.731997][ T9359] usb 6-1: Manufacturer: syz
[ 1235.754281][ T9359] hub 6-1:4.0: USB hub found
[ 1236.852689][ T9359] hub 6-1:4.0: 2 ports detected
[ 1237.024998][ T9359] hub 6-1:4.0: hub_hub_status failed (err = -71)
[ 1237.031527][ T9359] hub 6-1:4.0: config failed, can't get hub status (err -71)
[ 1237.091932][ T9359] usb 6-1: USB disconnect, device number 30
[ 1237.860563][ T5945] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1238.010530][ T5945] usb 5-1: Using ep0 maxpacket: 16
[ 1238.067417][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1238.101596][ T5945] usb 5-1: config 15 has an invalid interface number: 174 but max is 0
[ 1238.109866][ T5945] usb 5-1: config 15 has no interface number 0
[ 1238.234086][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.246071][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.445716][ T5945] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1238.532110][ T5945] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1238.583747][ T5945] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1238.622507][ T5945] usb 5-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1238.784861][ T5945] usb 5-1: config 15 interface 174 has no altsetting 0
[ 1238.813375][ T5945] usb 5-1: language id specifier not provided by device, defaulting to English
[ 1238.931459][ T5945] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1238.940989][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1238.949071][ T5945] usb 5-1: Product: syz
[ 1239.751027][ T5945] usb 5-1: Manufacturer: syz
[ 1239.755646][ T5945] usb 5-1: SerialNumber: syz
[ 1240.322047][ T5945] sierra 5-1:15.174: Sierra USB modem converter detected
[ 1240.426013][ T5945] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[ 1240.439449][ T5945] usb 5-1: Sierra USB modem converter now attached to ttyUSB1
[ 1240.485057][ T5945] usb 5-1: USB disconnect, device number 37
[ 1241.030662][ T9014] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[ 1241.354579][ T5945] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1241.433761][ T5945] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1241.481342][ T5945] sierra 5-1:15.174: device disconnected
[ 1241.562087][ T9014] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1241.590581][ T9014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.641003][ T9014] usb 6-1: config 0 descriptor??
[ 1241.668386][ T9014] cp210x 6-1:0.0: cp210x converter detected
[ 1242.145314][ T9014] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71
[ 1242.256889][ T9014] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 1242.320606][ T9014] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1242.325367][T19555] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1242.509012][ T9014] usb 6-1: USB disconnect, device number 31
[ 1242.612884][ T9014] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1242.736063][T19559] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1243.096858][ T9014] cp210x 6-1:0.0: device disconnected
[ 1243.507394][T19564] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1245.950780][   T30] kauditd_printk_skb: 20 callbacks suppressed
[ 1245.950818][   T30] audit: type=1326 audit(1763624418.624:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1247.104799][   T30] audit: type=1326 audit(1763624418.624:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1247.136175][   T30] audit: type=1326 audit(1763624418.624:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1247.160858][ T5945] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[ 1247.674919][   T30] audit: type=1326 audit(1763624418.624:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1247.759447][T19610] 9pnet_virtio: no channels available for device syz
[ 1247.809273][ T5945] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1247.930830][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1248.218205][   T30] audit: type=1326 audit(1763624418.624:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1248.218559][ T5945] usb 2-1: config 0 descriptor??
[ 1248.254205][ T5945] cp210x 2-1:0.0: cp210x converter detected
[ 1249.193586][   T30] audit: type=1326 audit(1763624418.624:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1249.235361][   T30] audit: type=1326 audit(1763624418.624:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1249.597177][T19627] netlink: 'syz.7.3500': attribute type 10 has an invalid length.
[ 1249.605124][T19627] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3500'.
[ 1249.647474][   T30] audit: type=1326 audit(1763624418.624:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1249.765741][   T30] audit: type=1326 audit(1763624418.624:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1249.779765][ T5945] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71
[ 1249.789666][   T30] audit: type=1326 audit(1763624418.624:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.5.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb18f749 code=0x7ffc0000
[ 1249.825113][ T5945] cp210x 2-1:0.0: GPIO initialisation failed: -71
[ 1249.852434][ T5945] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1249.874439][ T5945] usb 2-1: USB disconnect, device number 26
[ 1249.884519][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1249.893743][ T5945] cp210x 2-1:0.0: device disconnected
[ 1250.407528][T19639] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1252.067762][T19649] hub 9-0:1.0: USB hub found
[ 1252.080588][T19649] hub 9-0:1.0: 1 port detected
[ 1254.364822][T19677] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1255.680411][T19694] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1257.366703][T19709] netlink: 'syz.5.3526': attribute type 9 has an invalid length.
[ 1257.420514][T19709] netlink: 'syz.5.3526': attribute type 7 has an invalid length.
[ 1257.449922][T19709] netlink: 'syz.5.3526': attribute type 8 has an invalid length.
[ 1258.651297][T19724] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3522'.
[ 1259.189790][T19738] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1262.103462][T19763] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1262.288569][T19764] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3541'.
[ 1265.100398][T19794] netlink: 'syz.9.3548': attribute type 10 has an invalid length.
[ 1265.108433][T19794] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3548'.
[ 1266.362581][T19813] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1267.004584][T19820] IPVS: Scheduler module ip_vs_sip not found
[ 1267.157528][T19823] netlink: 'syz.4.3558': attribute type 9 has an invalid length.
[ 1267.188006][T19823] netlink: 'syz.4.3558': attribute type 7 has an invalid length.
[ 1267.200186][T19823] netlink: 'syz.4.3558': attribute type 8 has an invalid length.
[ 1267.505503][T19832] netlink: 'syz.9.3559': attribute type 10 has an invalid length.
[ 1267.514329][T19832] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3559'.
[ 1270.167469][T19849] IPVS: Scheduler module ip_vs_sip not found
[ 1271.291251][T19863] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1276.424872][T19913] hub 9-0:1.0: USB hub found
[ 1276.430249][T19913] hub 9-0:1.0: 1 port detected
[ 1278.556456][T19936] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1281.499996][T19975] hub 9-0:1.0: USB hub found
[ 1281.510684][T19975] hub 9-0:1.0: 1 port detected
[ 1283.353955][T19997] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1284.879106][T12992] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1285.504305][T12992] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1285.520570][T12992] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1285.599064][T12992] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1285.642510][T12992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.660541][ T5945] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1285.676023][T12992] usb 10-1: Product: syz
[ 1285.698449][T12992] usb 10-1: Manufacturer: syz
[ 1285.718180][T12992] usb 10-1: SerialNumber: syz
[ 1286.398809][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1286.705568][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1286.715621][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1286.731314][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1286.743285][ T5945] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1286.755103][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1286.763174][ T5945] usb 5-1: Product: syz
[ 1286.767448][ T5945] usb 5-1: Manufacturer: syz
[ 1286.772125][ T5945] usb 5-1: SerialNumber: syz
[ 1286.811291][T12992] usb 10-1: config 0 descriptor??
[ 1286.828203][T12992] usb 10-1: can't set config #0, error -71
[ 1286.838354][ T5945] usb 5-1: config 0 descriptor??
[ 1286.875012][T12992] usb 10-1: USB disconnect, device number 50
[ 1287.300836][T20023] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1287.373870][ T5945] adutux 5-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1288.109859][ T5945] usb 5-1: USB disconnect, device number 38
[ 1290.195479][   T30] kauditd_printk_skb: 18 callbacks suppressed
[ 1290.195497][   T30] audit: type=1326 audit(1763624463.504:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1290.253147][   T30] audit: type=1326 audit(1763624463.504:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1290.277142][   T30] audit: type=1326 audit(1763624463.514:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1290.306267][   T30] audit: type=1326 audit(1763624463.514:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1290.341097][   T30] audit: type=1326 audit(1763624463.514:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1290.365167][   T30] audit: type=1326 audit(1763624463.514:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1290.560871][   T30] audit: type=1326 audit(1763624463.514:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1290.586602][   T30] audit: type=1326 audit(1763624463.514:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1291.326940][   T30] audit: type=1326 audit(1763624463.514:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1291.419005][   T30] audit: type=1326 audit(1763624463.804:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20041 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01398f749 code=0x7ffc0000
[ 1291.751042][T20064] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1292.050636][ T9014] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1292.352250][ T9014] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1292.375680][ T9014] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1292.449575][T20072] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1292.824859][ T9014] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1292.836828][ T9014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1293.366613][ T9014] usb 5-1: Product: syz
[ 1293.786139][ T9014] usb 5-1: Manufacturer: syz
[ 1293.793805][ T9014] usb 5-1: SerialNumber: syz
[ 1293.821174][ T9014] usb 5-1: config 0 descriptor??
[ 1294.756699][T20080] hub 9-0:1.0: USB hub found
[ 1294.761578][T20080] hub 9-0:1.0: 1 port detected
[ 1294.867004][ T5945] usb 5-1: USB disconnect, device number 39
[ 1296.516183][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1296.516200][   T30] audit: type=1326 audit(1763624469.744:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1296.612185][   T30] audit: type=1326 audit(1763624469.744:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1296.639468][   T30] audit: type=1326 audit(1763624469.754:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1296.938579][T20116] hub 9-0:1.0: USB hub found
[ 1296.944025][T20116] hub 9-0:1.0: 1 port detected
[ 1297.171087][   T30] audit: type=1326 audit(1763624469.754:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1297.240922][   T30] audit: type=1326 audit(1763624469.754:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1297.264751][   T30] audit: type=1326 audit(1763624469.754:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1297.290751][   T30] audit: type=1326 audit(1763624469.754:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1297.315123][   T30] audit: type=1326 audit(1763624469.754:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1297.339263][   T30] audit: type=1326 audit(1763624469.754:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1297.372777][   T30] audit: type=1326 audit(1763624469.754:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20102 comm="syz.9.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1299.676733][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1299.687155][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1299.746930][T20139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3645'.
[ 1299.897992][T12992] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1300.680845][T12992] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1300.693396][T12992] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1300.705125][T12992] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1301.252645][T12992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.298177][T12992] usb 6-1: Product: syz
[ 1301.618263][T12992] usb 6-1: Manufacturer: syz
[ 1301.628213][T12992] usb 6-1: SerialNumber: syz
[ 1301.641482][T12992] usb 6-1: config 0 descriptor??
[ 1303.027250][ T9014] usb 6-1: USB disconnect, device number 32
[ 1303.606506][T20178] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1303.979052][T20176] hub 9-0:1.0: USB hub found
[ 1303.983873][T20176] hub 9-0:1.0: 1 port detected
[ 1304.040650][T12992] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 1304.372517][T20183] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1304.453362][T20186] overlayfs: failed to resolve './file0': -2
[ 1304.522055][T12992] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 1304.564451][T12992] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1304.608154][T12992] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[ 1305.623717][T12992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1305.913007][T12992] usb 10-1: config 0 descriptor??
[ 1306.278607][T12992] usbhid 10-1:0.0: can't add hid device: -71
[ 1306.333502][T12992] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1306.355719][T20202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1306.445764][T12992] usb 10-1: USB disconnect, device number 51
[ 1308.404298][T20234] hub 9-0:1.0: USB hub found
[ 1308.409028][T20234] hub 9-0:1.0: 1 port detected
[ 1312.020314][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1312.020344][   T30] audit: type=1326 audit(1763624485.414:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.373861][   T30] audit: type=1326 audit(1763624485.414:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.561248][   T30] audit: type=1326 audit(1763624485.424:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.625168][   T30] audit: type=1326 audit(1763624485.424:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.665284][ T9359] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1312.677053][   T30] audit: type=1326 audit(1763624485.424:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.718607][   T30] audit: type=1326 audit(1763624485.424:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.744106][   T30] audit: type=1326 audit(1763624485.424:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.767839][   T30] audit: type=1326 audit(1763624485.424:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.850645][   T30] audit: type=1326 audit(1763624485.424:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.905276][   T30] audit: type=1326 audit(1763624485.424:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.9.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1312.963960][ T9359] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1312.977808][ T9359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1312.987868][ T9359] usb 2-1: Product: syz
[ 1312.992251][ T9359] usb 2-1: Manufacturer: syz
[ 1313.318007][ T9359] usb 2-1: SerialNumber: syz
[ 1313.541455][ T9359] usb 2-1: config 0 descriptor??
[ 1313.878942][T20283] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1314.296508][ T5945] usb 2-1: USB disconnect, device number 27
[ 1314.956325][ T9359] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1315.197375][ T9359] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1315.246092][ T9359] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1315.335699][ T9359] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1315.363789][ T9359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1315.386369][ T9359] usb 5-1: Product: syz
[ 1315.401845][ T9359] usb 5-1: Manufacturer: syz
[ 1315.407109][ T9359] usb 5-1: SerialNumber: syz
[ 1316.050215][ T9359] hub 5-1:1.0: bad descriptor, ignoring hub
[ 1316.090667][ T9359] hub 5-1:1.0: probe with driver hub failed with error -5
[ 1317.307917][T20327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1317.342815][T20327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1317.351653][ T9359] usb 5-1: USB disconnect, device number 40
[ 1320.495904][T20356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1323.863266][T20386] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1325.632863][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 1325.632879][   T30] audit: type=1400 audit(1763624499.284:589): avc:  denied  { create } for  pid=20402 comm="syz.5.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1325.659679][   T30] audit: type=1400 audit(1763624499.284:590): avc:  denied  { bind } for  pid=20402 comm="syz.5.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1327.490529][   T10] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[ 1327.550529][T20420] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1327.655517][   T10] usb 6-1: config 0 has no interfaces?
[ 1327.896791][   T10] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1327.910716][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.938821][   T10] usb 6-1: config 0 descriptor??
[ 1328.306903][   T10] usb 6-1: USB disconnect, device number 33
[ 1329.334210][T20430] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3724'.
[ 1330.564177][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3730'.
[ 1331.592713][   T10] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 1331.752305][   T10] usb 10-1: Using ep0 maxpacket: 16
[ 1331.764250][   T10] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1331.782003][   T10] usb 10-1: config 15 has an invalid interface number: 174 but max is 0
[ 1331.804684][   T10] usb 10-1: config 15 has no interface number 0
[ 1331.819518][   T10] usb 10-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1331.850164][   T10] usb 10-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1331.863879][   T10] usb 10-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1331.875402][   T10] usb 10-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1331.887685][   T10] usb 10-1: config 15 interface 174 has no altsetting 0
[ 1331.898400][   T10] usb 10-1: language id specifier not provided by device, defaulting to English
[ 1331.914363][   T10] usb 10-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1331.924517][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.934839][   T10] usb 10-1: Product: syz
[ 1331.939115][   T10] usb 10-1: Manufacturer: syz
[ 1331.960262][T20456] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1332.025764][   T10] usb 10-1: SerialNumber: syz
[ 1332.268859][   T10] sierra 10-1:15.174: Sierra USB modem converter detected
[ 1332.281160][   T10] usb 10-1: Sierra USB modem converter now attached to ttyUSB0
[ 1332.292583][   T10] usb 10-1: Sierra USB modem converter now attached to ttyUSB1
[ 1332.317723][   T10] usb 10-1: USB disconnect, device number 52
[ 1332.358398][   T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1332.507513][   T10] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1332.700753][   T10] sierra 10-1:15.174: device disconnected
[ 1334.307663][T20489] hub 9-0:1.0: USB hub found
[ 1334.313268][T20489] hub 9-0:1.0: 1 port detected
[ 1335.428166][ T9359] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 1335.660873][ T9359] usb 10-1: Using ep0 maxpacket: 32
[ 1335.748029][ T9359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1335.956599][ T9359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1336.426367][ T9359] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1336.502434][ T9359] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1336.542292][ T9359] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.585637][ T9359] usb 10-1: config 0 descriptor??
[ 1336.941635][ T7271] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1337.743468][T20491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1337.802598][T20491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1337.837473][ T9359] usbhid 10-1:0.0: can't add hid device: -71
[ 1337.863531][ T9359] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1337.883144][ T7271] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1338.667037][ T7271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1338.792115][T20510] hub 9-0:1.0: USB hub found
[ 1338.796885][T20510] hub 9-0:1.0: 1 port detected
[ 1338.821948][ T9359] usb 10-1: USB disconnect, device number 53
[ 1338.867890][ T7271] usb 2-1: Product: syz
[ 1338.885575][ T7271] usb 2-1: Manufacturer: syz
[ 1338.890198][ T7271] usb 2-1: SerialNumber: syz
[ 1339.101711][T20516] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1339.477402][ T7271] usb 2-1: config 0 descriptor??
[ 1339.604214][ T7271] usb 2-1: USB disconnect, device number 28
[ 1339.764705][T14290] udevd[14290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1340.400562][ T5945] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[ 1340.574137][ T5945] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1340.617510][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1340.692131][ T5945] usb 6-1: config 0 descriptor??
[ 1340.729539][ T5945] cp210x 6-1:0.0: cp210x converter detected
[ 1341.180262][ T5945] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71
[ 1341.194691][T20539] IPVS: Scheduler module ip_vs_sip not found
[ 1341.200461][ T5945] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 1341.223883][ T5945] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1341.282930][ T5945] usb 6-1: USB disconnect, device number 34
[ 1341.307927][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1341.359397][ T5945] cp210x 6-1:0.0: device disconnected
[ 1343.543713][T20561] hub 9-0:1.0: USB hub found
[ 1343.550720][T20561] hub 9-0:1.0: 1 port detected
[ 1343.910297][T20571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1344.152726][ T5945] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1344.409616][ T5945] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1344.435233][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1344.652361][ T5945] usb 5-1: Product: syz
[ 1344.690179][ T5945] usb 5-1: Manufacturer: syz
[ 1345.132760][ T5945] usb 5-1: SerialNumber: syz
[ 1345.163123][ T5945] usb 5-1: config 0 descriptor??
[ 1346.160612][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3764'.
[ 1346.568524][ T5945] usb 5-1: USB disconnect, device number 41
[ 1347.553916][T20615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1347.691940][T20619] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1349.777319][ T5945] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1350.070588][ T5945] usb 6-1: Using ep0 maxpacket: 32
[ 1350.080813][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1350.096547][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1350.457038][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1350.470316][ T5945] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1350.479888][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.491357][ T5945] usb 6-1: config 0 descriptor??
[ 1351.285696][T20625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1351.704110][T20625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1352.395570][ T5945] usbhid 6-1:0.0: can't add hid device: -71
[ 1352.522515][ T5945] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1352.543938][ T5945] usb 6-1: USB disconnect, device number 35
[ 1353.453591][T20668] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1354.370754][   T10] usb 10-1: new full-speed USB device number 54 using dummy_hcd
[ 1354.612067][   T10] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1354.634367][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1354.664697][   T10] usb 10-1: config 0 descriptor??
[ 1355.164326][   T10] cp210x 10-1:0.0: cp210x converter detected
[ 1356.401763][T20696] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3799'.
[ 1356.432726][T20696] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3799'.
[ 1356.503284][   T10] cp210x 10-1:0.0: failed to get vendor val 0x370c size 13: -71
[ 1356.523839][   T10] cp210x 10-1:0.0: GPIO initialisation failed: -71
[ 1356.684705][   T10] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1356.857100][T20700] vlan2: entered promiscuous mode
[ 1356.866724][T20700] bridge0: entered promiscuous mode
[ 1356.872213][   T10] usb 10-1: USB disconnect, device number 54
[ 1356.878341][T20700] vlan2: entered allmulticast mode
[ 1356.886934][T20700] bridge0: entered allmulticast mode
[ 1356.917277][T20695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3802'.
[ 1356.917491][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1356.963011][   T10] cp210x 10-1:0.0: device disconnected
[ 1356.967093][T20695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3802'.
[ 1358.388849][T20721] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1360.028077][T20740] 9pnet_virtio: no channels available for device syz
[ 1361.113943][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.120249][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.369528][T20749] vlan2: entered promiscuous mode
[ 1361.374772][T20749] bridge0: entered promiscuous mode
[ 1361.381450][T20749] vlan2: entered allmulticast mode
[ 1361.386575][T20749] bridge0: entered allmulticast mode
[ 1362.667113][T20770] hub 9-0:1.0: USB hub found
[ 1362.671930][T20770] hub 9-0:1.0: 1 port detected
[ 1362.679392][T20766] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1362.690652][ T9014] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1362.860526][ T9014] usb 6-1: Using ep0 maxpacket: 16
[ 1363.000651][ T5945] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1363.010289][ T9014] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1363.024480][ T9014] usb 6-1: config 15 has an invalid interface number: 174 but max is 0
[ 1363.032971][ T9014] usb 6-1: config 15 has no interface number 0
[ 1363.039237][ T9014] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1363.049323][ T9014] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1363.060548][ T9014] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1363.071776][ T9014] usb 6-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1363.083741][ T9014] usb 6-1: config 15 interface 174 has no altsetting 0
[ 1363.095102][ T9014] usb 6-1: language id specifier not provided by device, defaulting to English
[ 1363.106120][ T9014] usb 6-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1363.118935][ T9014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1363.128470][ T9014] usb 6-1: Product: syz
[ 1363.132849][ T9014] usb 6-1: Manufacturer: syz
[ 1363.137686][ T9014] usb 6-1: SerialNumber: syz
[ 1363.164470][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1363.174547][ T5945] usb 5-1: config 2 has an invalid interface number: 34 but max is 2
[ 1363.185256][ T5945] usb 5-1: config 2 has an invalid interface number: 6 but max is 2
[ 1363.193954][ T5945] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1363.204674][ T5945] usb 5-1: config 2 has no interface number 0
[ 1363.211542][ T5945] usb 5-1: config 2 has no interface number 2
[ 1363.217860][ T5945] usb 5-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1363.229033][ T5945] usb 5-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping
[ 1363.240332][ T5945] usb 5-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1363.253486][ T5945] usb 5-1: config 2 interface 1 has no altsetting 0
[ 1363.260196][ T5945] usb 5-1: config 2 interface 34 has no altsetting 0
[ 1363.267159][ T5945] usb 5-1: config 2 interface 6 has no altsetting 0
[ 1363.278258][ T5945] usb 5-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4
[ 1363.288675][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1363.296716][ T5945] usb 5-1: Product: syz
[ 1363.300998][ T5945] usb 5-1: Manufacturer: syz
[ 1363.305580][ T5945] usb 5-1: SerialNumber: syz
[ 1363.357969][T20763] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3821'.
[ 1363.375538][ T9014] sierra 6-1:15.174: Sierra USB modem converter detected
[ 1363.408238][ T9014] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[ 1363.419601][ T9014] usb 6-1: Sierra USB modem converter now attached to ttyUSB1
[ 1363.432330][ T9014] usb 6-1: USB disconnect, device number 36
[ 1363.447570][ T9014] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1363.459489][ T9014] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1363.468831][ T9014] sierra 6-1:15.174: device disconnected
[ 1363.511092][ T7271] usb 10-1: new full-speed USB device number 55 using dummy_hcd
[ 1363.603382][ T5945] usb 5-1: selecting invalid altsetting 0
[ 1363.614166][ T5945] hub 5-1:2.6: Invalid hub with more than one config or interface
[ 1363.622388][ T5945] hub 5-1:2.6: probe with driver hub failed with error -22
[ 1363.643985][ T5945] usb 5-1: USB disconnect, device number 42
[ 1363.663782][ T7271] usb 10-1: config 0 has no interfaces?
[ 1363.669381][ T7271] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1363.701271][ T7271] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.735226][ T7271] usb 10-1: config 0 descriptor??
[ 1363.974835][T20779] loop2: detected capacity change from 0 to 7
[ 1363.986438][T20779] Dev loop2: unable to read RDB block 7
[ 1363.993562][T20779]  loop2: AHDI p1 p2 p3
[ 1363.997745][T20779] loop2: partition table partially beyond EOD, truncated
[ 1364.007976][T20779] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1364.021669][T20779] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1364.034854][ T9014] usb 10-1: USB disconnect, device number 55
[ 1364.937385][T20805] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1365.076905][T20802] hub 9-0:1.0: USB hub found
[ 1365.081749][T20802] hub 9-0:1.0: 1 port detected
[ 1365.834879][T20814] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3840'.
[ 1366.891224][T20823] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1367.248199][T20834] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1368.724354][T20846] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1374.112916][T20895] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1374.854873][T20904] 9pnet_virtio: no channels available for device syz
[ 1375.749253][T20902] hub 9-0:1.0: USB hub found
[ 1375.755532][T20902] hub 9-0:1.0: 1 port detected
[ 1378.178982][T20921] hub 9-0:1.0: USB hub found
[ 1378.184630][T20921] hub 9-0:1.0: 1 port detected
[ 1379.324499][   T10] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 1379.721864][ T5945] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1379.953605][   T10] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1379.962993][ T5945] usb 5-1: Using ep0 maxpacket: 16
[ 1379.969363][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.021114][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1380.039379][   T10] usb 10-1: Product: syz
[ 1380.044836][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1380.046697][   T10] usb 10-1: Manufacturer: syz
[ 1380.065665][ T5945] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1380.077711][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1380.149885][ T5945] usb 5-1: config 0 descriptor??
[ 1380.309978][   T10] usb 10-1: SerialNumber: syz
[ 1380.387846][   T10] usb 10-1: config 0 descriptor??
[ 1380.660065][T20957] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1380.749819][T20960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3871'.
[ 1380.892355][ T5945] usbhid 5-1:0.0: can't add hid device: -71
[ 1380.898385][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1380.913073][T20959] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1380.930833][ T5945] usb 5-1: USB disconnect, device number 43
[ 1380.972946][   T10] usb 10-1: USB disconnect, device number 56
[ 1382.355353][T20991] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1384.708161][T21018] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1386.095746][T21025] hub 9-0:1.0: USB hub found
[ 1386.100700][T21025] hub 9-0:1.0: 1 port detected
[ 1386.232492][   T30] audit: type=1326 audit(1763624559.874:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1386.274791][   T30] audit: type=1326 audit(1763624559.874:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1386.609236][   T30] audit: type=1326 audit(1763624559.884:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1386.890582][   T30] audit: type=1326 audit(1763624559.884:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1387.036346][   T30] audit: type=1326 audit(1763624559.884:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1387.108415][   T30] audit: type=1326 audit(1763624559.884:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1387.520852][   T30] audit: type=1326 audit(1763624559.884:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1387.545124][   T30] audit: type=1326 audit(1763624559.884:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1387.568789][   T30] audit: type=1326 audit(1763624559.884:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1387.642322][   T30] audit: type=1326 audit(1763624559.884:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.9.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979438f749 code=0x7ffc0000
[ 1388.216607][T21056] vlan2: entered promiscuous mode
[ 1388.221951][T21056] bridge0: entered promiscuous mode
[ 1388.228517][T21056] vlan2: entered allmulticast mode
[ 1388.233824][T21056] bridge0: entered allmulticast mode
[ 1388.447427][T21054] IPVS: Scheduler module ip_vs_sip not found
[ 1389.729167][T21075] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1390.444249][T17724] syz_tun (unregistering): left allmulticast mode
[ 1391.435569][T21080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3916'.
[ 1391.447228][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1391.457036][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1391.464947][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1391.476185][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1391.484157][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1392.012679][   T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1392.196070][T21084] lo speed is unknown, defaulting to 1000
[ 1392.272246][   T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.063699][   T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.372294][   T36] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.590571][ T5828] Bluetooth: hci3: command tx timeout
[ 1394.162275][T21125] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1394.543764][T21084] chnl_net:caif_netlink_parms(): no params data found
[ 1395.670596][ T5828] Bluetooth: hci3: command tx timeout
[ 1397.150884][ T7271] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1397.260152][   T36] bond0 (unregistering): Released all slaves
[ 1397.344328][T21146] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3928'.
[ 1397.390623][ T7271] usb 5-1: Using ep0 maxpacket: 8
[ 1397.750531][ T5828] Bluetooth: hci3: command tx timeout
[ 1397.820130][ T7271] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1397.833983][ T7271] usb 5-1: config 0 has no interface number 0
[ 1397.841298][ T7271] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1397.853612][ T7271] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1397.863620][ T7271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1397.874056][T21084] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1397.883401][ T7271] usb 5-1: config 0 descriptor??
[ 1397.892641][T21084] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1397.908241][ T7271] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1397.922896][T21084] bridge_slave_0: entered allmulticast mode
[ 1397.936087][T21084] bridge_slave_0: entered promiscuous mode
[ 1397.952942][T21084] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1397.964307][T21084] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1397.971675][T21084] bridge_slave_1: entered allmulticast mode
[ 1397.979428][T21084] bridge_slave_1: entered promiscuous mode
[ 1398.180187][T21173] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1398.291013][ T7271] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1398.530857][ T7271] usb 2-1: Using ep0 maxpacket: 16
[ 1398.573080][ T7271] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1398.584402][ T7271] usb 2-1: config 15 has an invalid interface number: 174 but max is 1
[ 1398.597383][T21084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1398.606539][ T7271] usb 2-1: config 15 has an invalid interface number: 5 but max is 1
[ 1398.606563][ T7271] usb 2-1: config 15 has an invalid interface descriptor of length 2, skipping
[ 1398.606581][ T7271] usb 2-1: config 15 has no interface number 0
[ 1398.606596][ T7271] usb 2-1: config 15 has no interface number 1
[ 1398.606640][ T7271] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1398.606661][ T7271] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1398.606683][ T7271] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[ 1398.606704][ T7271] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1398.606728][ T7271] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1398.606760][ T7271] usb 2-1: config 15 interface 5 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 1398.606784][ T7271] usb 2-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[ 1398.606803][ T7271] usb 2-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1398.606828][ T7271] usb 2-1: config 15 interface 174 has no altsetting 0
[ 1398.631719][T21084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1398.648939][ T7271] usb 2-1: config 15 interface 5 has no altsetting 0
[ 1398.756217][ T7271] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1398.774924][ T7271] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1398.791653][ T7271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1398.805368][ T7271] usb 2-1: Product: syz
[ 1398.820851][ T7271] usb 2-1: Manufacturer: syz
[ 1398.825440][ T7271] usb 2-1: SerialNumber: syz
[ 1398.858182][T21084] team0: Port device team_slave_0 added
[ 1398.904588][T21084] team0: Port device team_slave_1 added
[ 1399.282683][   T36] hsr_slave_0: left promiscuous mode
[ 1399.288734][   T36] hsr_slave_1: left promiscuous mode
[ 1399.295298][   T36] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1399.310973][   T36] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1399.341558][   T36] veth1_macvtap: left promiscuous mode
[ 1399.348036][   T36] veth0_macvtap: left promiscuous mode
[ 1399.355177][   T36] veth1_vlan: left promiscuous mode
[ 1399.363142][   T36] veth0_vlan: left promiscuous mode
[ 1399.513201][   T36] pimreg (unregistering): left allmulticast mode
[ 1399.840565][ T5828] Bluetooth: hci3: command tx timeout
[ 1401.457885][T21084] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1401.469734][T21084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1401.506302][T21084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1401.541813][T21084] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1401.556910][ T7271] sierra 2-1:15.174: Sierra USB modem converter detected
[ 1401.569092][T21084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1401.596352][ T7271] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[ 1401.628670][ T7271] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[ 1401.662634][ T7271] sierra 2-1:15.5: Sierra USB modem converter detected
[ 1401.681902][T21084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1401.702400][ T7271] usb 2-1: Sierra USB modem converter now attached to ttyUSB2
[ 1401.758395][ T7271] usb 2-1: USB disconnect, device number 29
[ 1401.844831][ T7271] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1401.951873][ T7271] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1401.986248][ T7271] sierra 2-1:15.174: device disconnected
[ 1402.046686][ T7271] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[ 1402.059514][ T7271] sierra 2-1:15.5: device disconnected
[ 1402.443405][ T7271] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1402.465432][T21084] hsr_slave_0: entered promiscuous mode
[ 1402.484599][T21084] hsr_slave_1: entered promiscuous mode
[ 1402.494073][T21084] debugfs: 'hsr0' already exists in 'hsr'
[ 1402.515805][T21084] Cannot create hsr debugfs directory
[ 1402.708670][ T7271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1402.795334][ T7271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1402.910938][ T7271] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1402.967912][ T7271] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1402.985716][ T7271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1403.028237][ T7271] usb 2-1: config 0 descriptor??
[ 1403.038362][   T36] IPVS: stop unused estimator thread 0...
[ 1403.044226][T21230] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3944'.
[ 1404.171442][ T7271] usbhid 2-1:0.0: can't add hid device: -71
[ 1404.177443][ T7271] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1404.197865][ T5945] usb 5-1: USB disconnect, device number 44
[ 1404.325475][ T7271] usb 2-1: USB disconnect, device number 30
[ 1405.753037][T21259] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1408.236799][T21084] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1408.273042][T21084] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1408.291381][   T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1408.315041][T21084] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1408.336712][T21084] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1408.474768][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 1408.535274][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1408.581362][T21084] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1408.624016][   T10] usb 6-1: config 15 has an invalid interface number: 174 but max is 1
[ 1408.650387][   T10] usb 6-1: config 15 has an invalid interface number: 5 but max is 1
[ 1408.659017][   T10] usb 6-1: config 15 has an invalid interface descriptor of length 2, skipping
[ 1408.679824][T21084] 8021q: adding VLAN 0 to HW filter on device team0
[ 1408.693692][   T10] usb 6-1: config 15 has no interface number 0
[ 1408.716928][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1408.724073][ T2122] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1408.739717][   T10] usb 6-1: config 15 has no interface number 1
[ 1408.758491][   T10] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1408.783695][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1408.790783][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1408.802880][   T10] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1408.857450][   T10] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[ 1408.882493][   T10] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[ 1408.894731][   T10] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1408.906119][   T10] usb 6-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1408.918911][   T10] usb 6-1: config 15 interface 5 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 1408.941639][   T10] usb 6-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[ 1409.032182][   T10] usb 6-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1409.049185][   T10] usb 6-1: config 15 interface 174 has no altsetting 0
[ 1409.054260][T21084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1409.066862][   T10] usb 6-1: config 15 interface 5 has no altsetting 0
[ 1409.074206][T21084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1409.085234][   T10] usb 6-1: language id specifier not provided by device, defaulting to English
[ 1409.546206][   T10] usb 6-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1409.573087][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.598315][   T10] usb 6-1: Product: syz
[ 1409.621559][   T10] usb 6-1: Manufacturer: syz
[ 1409.626226][   T10] usb 6-1: SerialNumber: syz
[ 1409.894027][T21084] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1409.940487][ T9359] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1409.974175][   T10] sierra 6-1:15.174: Sierra USB modem converter detected
[ 1410.014144][   T10] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[ 1410.043407][   T10] usb 6-1: Sierra USB modem converter now attached to ttyUSB1
[ 1410.062777][   T10] sierra 6-1:15.5: Sierra USB modem converter detected
[ 1410.091281][   T10] usb 6-1: Sierra USB modem converter now attached to ttyUSB2
[ 1410.119452][   T10] usb 6-1: USB disconnect, device number 37
[ 1410.202109][ T9359] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1410.205889][   T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1410.225857][ T9359] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1410.270505][ T9359] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1410.586236][   T10] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1410.698292][ T9359] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1410.710875][ T9359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.718877][ T9359] usb 5-1: Product: syz
[ 1410.740480][ T9359] usb 5-1: Manufacturer: syz
[ 1410.752806][   T10] sierra 6-1:15.174: device disconnected
[ 1410.755869][ T9359] usb 5-1: SerialNumber: syz
[ 1410.768613][   T10] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[ 1410.792642][   T10] sierra 6-1:15.5: device disconnected
[ 1410.794256][ T9359] hub 5-1:1.0: bad descriptor, ignoring hub
[ 1410.845589][ T9359] hub 5-1:1.0: probe with driver hub failed with error -5
[ 1411.025490][ T9359] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1411.145620][T21084] veth0_vlan: entered promiscuous mode
[ 1411.183856][T21084] veth1_vlan: entered promiscuous mode
[ 1411.247719][   T30] kauditd_printk_skb: 26 callbacks suppressed
[ 1411.247735][   T30] audit: type=1400 audit(1763624584.884:627): avc:  denied  { read write } for  pid=21327 comm="syz.4.3962" name="lp0" dev="devtmpfs" ino=4307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 1411.744818][   T30] audit: type=1400 audit(1763624584.884:628): avc:  denied  { open } for  pid=21327 comm="syz.4.3962" path="/dev/usb/lp0" dev="devtmpfs" ino=4307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 1411.833925][T21084] veth0_macvtap: entered promiscuous mode
[ 1411.859775][T21084] veth1_macvtap: entered promiscuous mode
[ 1411.878433][T21084] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1411.890974][T21084] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1412.000578][T15325] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1412.038749][T15325] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1412.086503][ T1157] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1412.103642][ T1157] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1412.264878][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1412.281135][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1413.161440][T15325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1413.220825][T15325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1413.307865][T21390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3971'.
[ 1413.493797][   T30] audit: type=1400 audit(1763624587.154:629): avc:  denied  { mounton } for  pid=21084 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 1416.613527][ T9359] usb 5-1: USB disconnect, device number 45
[ 1416.789769][ T9359] usblp0: removed
[ 1419.670563][T12992] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1419.876681][T12992] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1419.937185][T12992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1420.014418][T12992] usb 10-1: Product: syz
[ 1420.051284][T12992] usb 10-1: Manufacturer: syz
[ 1420.080991][T12992] usb 10-1: SerialNumber: syz
[ 1420.178804][T12992] usb 10-1: config 0 descriptor??
[ 1420.475388][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1420.485013][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1420.493206][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1420.529683][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1420.537309][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1421.401388][T12992] usb 10-1: USB disconnect, device number 57
[ 1421.708989][T21469] chnl_net:caif_netlink_parms(): no params data found
[ 1421.959527][T21489] usb usb1: check_ctrlrecip: process 21489 (syz.4.3998) requesting ep 01 but needs 81
[ 1421.969502][T21489] usb usb1: usbfs: process 21489 (syz.4.3998) did not claim interface 0 before use
[ 1422.625473][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.651596][ T5822] Bluetooth: hci4: command tx timeout
[ 1422.847058][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.879164][T21469] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1422.933321][T21469] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1422.992399][T21469] bridge_slave_0: entered allmulticast mode
[ 1423.063824][T21469] bridge_slave_0: entered promiscuous mode
[ 1423.179417][T21469] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1423.245750][T21469] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1423.328426][T21469] bridge_slave_1: entered allmulticast mode
[ 1423.468232][T21469] bridge_slave_1: entered promiscuous mode
[ 1423.643501][ T9018] syz_tun (unregistering): left allmulticast mode
[ 1424.720799][ T5822] Bluetooth: hci4: command tx timeout
[ 1425.992535][T21522] hub 9-0:1.0: USB hub found
[ 1425.998364][T21522] hub 9-0:1.0: 1 port detected
[ 1426.090492][T19183] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1426.801628][ T5822] Bluetooth: hci4: command tx timeout
[ 1426.811515][T15325] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1426.835633][T15325] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1426.922877][T21469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1427.164224][T21529] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1427.404970][T19183] usb 6-1: Using ep0 maxpacket: 32
[ 1427.422402][T19183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1427.434603][T19183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1427.444960][T19183] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1427.458072][T19183] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1428.070437][T21534] 9pnet_virtio: no channels available for device syz
[ 1428.425069][T19183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1428.435925][T15325] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1428.450681][T15325] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1428.461896][T19183] usb 6-1: config 0 descriptor??
[ 1429.264050][T21537] 9pnet_virtio: no channels available for device syz
[ 1429.417149][ T5822] Bluetooth: hci4: command tx timeout
[ 1429.438901][T21469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1429.493869][T15325] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1429.722490][T21521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1429.977731][T21540] 9pnet_virtio: no channels available for device syz
[ 1430.535176][T15325] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1430.683502][T21521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1430.696991][T19183] usbhid 6-1:0.0: can't add hid device: -71
[ 1430.718704][T19183] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1431.862543][T19183] usb 6-1: USB disconnect, device number 38
[ 1432.450593][T21469] team0: Port device team_slave_0 added
[ 1432.468237][T21469] team0: Port device team_slave_1 added
[ 1432.977533][T21469] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1432.987346][T21469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1433.468886][T21469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1433.497912][T15325] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1433.520511][ T9359] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1433.593241][T15325] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1433.759267][T21469] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1433.772484][ T9359] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1433.785388][ T9359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1433.794020][T21469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1433.819978][ T9359] usb 5-1: Product: syz
[ 1433.824422][ T9359] usb 5-1: Manufacturer: syz
[ 1433.829018][ T9359] usb 5-1: SerialNumber: syz
[ 1433.847123][ T9359] usb 5-1: config 0 descriptor??
[ 1433.857174][T21469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1434.184547][T21469] hsr_slave_0: entered promiscuous mode
[ 1434.216280][T21469] hsr_slave_1: entered promiscuous mode
[ 1434.222304][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4013'.
[ 1434.244866][T21469] debugfs: 'hsr0' already exists in 'hsr'
[ 1434.251653][T21469] Cannot create hsr debugfs directory
[ 1434.320546][ T9359] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1434.928557][ T9014] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1434.943691][T21316] usb 5-1: USB disconnect, device number 46
[ 1434.961877][ T9359] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1434.977966][ T9359] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1434.992716][ T9359] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1435.004279][ T9359] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1435.015422][ T9359] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1435.073099][ T9359] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1435.082909][ T9359] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1435.100686][ T9014] usb 2-1: Using ep0 maxpacket: 32
[ 1435.118888][ T9359] usb 6-1: Product: syz
[ 1435.133400][ T9359] usb 6-1: Manufacturer: syz
[ 1435.149685][ T9014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1435.164545][ T9359] cdc_wdm 6-1:1.0: skipping garbage
[ 1435.193254][ T9359] cdc_wdm 6-1:1.0: skipping garbage
[ 1435.209129][ T9014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1435.232032][ T9359] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1435.235052][ T9014] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1435.237956][ T9359] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1435.324443][ T9014] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1435.350195][ T9014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1435.379169][ T9014] usb 2-1: config 0 descriptor??
[ 1435.729521][T21587] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1435.967107][   T30] audit: type=1400 audit(1763624609.614:630): avc:  denied  { read write } for  pid=21565 comm="syz.5.4018" name="cdc-wdm0" dev="devtmpfs" ino=4335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[ 1436.065858][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE
[ 1436.086478][   T30] audit: type=1400 audit(1763624609.684:631): avc:  denied  { open } for  pid=21565 comm="syz.5.4018" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[ 1436.262778][T21574] usb 6-1: USB disconnect, device number 39
[ 1436.292735][ T9014] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0015/input/input27
[ 1436.376911][ T9014] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0015/input/input28
[ 1436.439796][T21570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1436.489658][T21570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1436.520959][ T9014] kye 0003:0458:5011.0015: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[ 1436.587066][ T9014] usb 2-1: USB disconnect, device number 31
[ 1436.635432][T21597] fido_id[21597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[ 1436.761813][T21574] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[ 1437.119471][T21603] overlayfs: missing 'lowerdir'
[ 1437.368260][T21574] usb 5-1: config 0 has no interfaces?
[ 1437.375294][T21574] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1437.384417][T21574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1437.540939][T21574] usb 5-1: config 0 descriptor??
[ 1437.692019][T21615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1437.774070][T21596] loop2: detected capacity change from 0 to 7
[ 1437.793963][T14305] Dev loop2: unable to read RDB block 7
[ 1437.807575][T14305]  loop2: unable to read partition table
[ 1437.819756][T14305] loop2: partition table beyond EOD, truncated
[ 1437.840472][ T9014] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 1437.857193][T21596] Dev loop2: unable to read RDB block 7
[ 1437.866801][T21596]  loop2: unable to read partition table
[ 1437.880983][T21596] loop2: partition table beyond EOD, truncated
[ 1437.895112][T21596] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1437.914340][T19183] usb 5-1: USB disconnect, device number 47
[ 1438.002086][ T9014] usb 10-1: Using ep0 maxpacket: 32
[ 1438.019014][ T9014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1438.061579][ T9014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1438.113737][T15325] bond0 (unregistering): Released all slaves
[ 1438.212363][T15325] tipc: Left network mode
[ 1438.353596][ T9014] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1438.549212][ T9014] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1438.655489][ T9014] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1438.688929][ T9014] usb 10-1: config 0 descriptor??
[ 1438.908332][T15325] hsr_slave_0: left promiscuous mode
[ 1438.941718][T15325] hsr_slave_1: left promiscuous mode
[ 1438.970768][T21574] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1438.982890][T15325] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1439.004754][T15325] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1439.056921][T15325] veth1_macvtap: left promiscuous mode
[ 1439.082076][T15325] veth0_macvtap: left promiscuous mode
[ 1439.097955][T15325] veth1_vlan: left promiscuous mode
[ 1439.108024][T15325] veth0_vlan: left promiscuous mode
[ 1439.191042][T21574] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1439.355275][T21574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1439.398308][ T9014] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.0016/input/input29
[ 1439.424465][T21612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1439.430440][T21574] usb 5-1: Product: syz
[ 1439.520308][T21612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1439.561006][T21574] usb 5-1: Manufacturer: syz
[ 1439.565637][T21574] usb 5-1: SerialNumber: syz
[ 1439.692859][T21574] usb 5-1: config 0 descriptor??
[ 1439.786432][T21641] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1440.137320][ T9014] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.0016/input/input30
[ 1440.167317][T15325] pimreg (unregistering): left allmulticast mode
[ 1440.259337][T21643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4029'.
[ 1440.297213][ T9014] kye 0003:0458:5011.0016: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.9-1/input0
[ 1440.401337][ T9014] usb 10-1: USB disconnect, device number 58
[ 1440.506403][T21644] fido_id[21644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[ 1440.750473][T21574] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1440.922148][T21574] usb 2-1: Using ep0 maxpacket: 32
[ 1440.929015][T21574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1440.940377][ T9014] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[ 1440.951459][T21574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1440.962002][T21574] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1440.974952][T21574] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1440.984181][T21574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1440.994557][T21574] usb 2-1: config 0 descriptor??
[ 1441.104953][T21637] vlan2: entered promiscuous mode
[ 1441.110099][T21637] bridge0: entered promiscuous mode
[ 1441.116587][T21637] vlan2: entered allmulticast mode
[ 1441.126735][ T9014] usb 10-1: Using ep0 maxpacket: 16
[ 1441.131326][T21637] bridge0: entered allmulticast mode
[ 1441.134737][ T9014] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1441.150296][T12992] usb 5-1: USB disconnect, device number 48
[ 1441.180041][ T9014] usb 10-1: config 15 has an invalid interface number: 174 but max is 0
[ 1441.233525][ T9014] usb 10-1: config 15 has no interface number 0
[ 1441.239831][ T9014] usb 10-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1441.288481][ T9014] usb 10-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1441.301012][ T9014] usb 10-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1441.312643][ T9014] usb 10-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1441.346981][ T9014] usb 10-1: config 15 interface 174 has no altsetting 0
[ 1441.447108][T21469] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1441.631625][T21649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1441.701334][T21649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1441.848633][T21469] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1441.863182][T21574] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0017/input/input31
[ 1441.878228][ T9014] usb 10-1: language id specifier not provided by device, defaulting to English
[ 1441.889388][ T9014] usb 10-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1441.913018][T21469] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1441.914078][T21574] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0017/input/input32
[ 1441.933795][ T9014] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1441.952467][ T9014] usb 10-1: Product: syz
[ 1441.965655][T21469] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1441.972813][ T9014] usb 10-1: Manufacturer: syz
[ 1441.977502][ T9014] usb 10-1: SerialNumber: syz
[ 1442.083709][T21574] kye 0003:0458:5011.0017: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[ 1442.754179][T21574] usb 2-1: USB disconnect, device number 32
[ 1442.800183][ T9014] sierra 10-1:15.174: Sierra USB modem converter detected
[ 1442.995082][ T9014] usb 10-1: Sierra USB modem converter now attached to ttyUSB0
[ 1443.050845][T21683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4038'.
[ 1443.880878][ T9014] usb 10-1: Sierra USB modem converter now attached to ttyUSB1
[ 1443.965770][T15325] IPVS: stop unused estimator thread 0...
[ 1444.015929][T21469] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1444.023011][ T9014] usb 10-1: USB disconnect, device number 59
[ 1444.073294][ T9014] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1444.098997][T21469] 8021q: adding VLAN 0 to HW filter on device team0
[ 1444.164413][ T9014] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1444.194622][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1444.201772][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1444.216016][ T9014] sierra 10-1:15.174: device disconnected
[ 1444.283428][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1444.290529][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1444.349990][T21469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1445.879659][T21469] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1446.796915][T21469] veth0_vlan: entered promiscuous mode
[ 1446.824143][T21469] veth1_vlan: entered promiscuous mode
[ 1446.881822][T21469] veth0_macvtap: entered promiscuous mode
[ 1446.912467][ T9359] libceph: connect (1)[c::]:6789 error -101
[ 1446.918940][T21469] veth1_macvtap: entered promiscuous mode
[ 1446.969360][ T9359] libceph: mon0 (1)[c::]:6789 connect error
[ 1447.027715][ T9359] libceph: connect (1)[c::]:6789 error -101
[ 1447.039059][ T9359] libceph: mon0 (1)[c::]:6789 connect error
[ 1447.061711][T21469] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1447.126185][T21469] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1447.176018][ T3582] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.198167][ T3582] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.232412][ T3582] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.258269][ T3582] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.312316][ T7271] libceph: connect (1)[c::]:6789 error -101
[ 1447.354218][ T7271] libceph: mon0 (1)[c::]:6789 connect error
[ 1447.524155][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1447.561230][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1447.613157][T21746] ceph: No mds server is up or the cluster is laggy
[ 1447.734416][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1447.746227][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1448.880565][ T9359] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1449.000577][ T5945] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1449.060580][ T9359] usb 2-1: Using ep0 maxpacket: 16
[ 1449.067600][ T9359] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1449.176948][ T9359] usb 2-1: config 15 has an invalid interface number: 174 but max is 0
[ 1449.185350][ T5945] usb 5-1: Using ep0 maxpacket: 32
[ 1449.192313][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1449.207281][ T5945] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1449.270957][T21788] netlink: 'syz.7.4053': attribute type 10 has an invalid length.
[ 1449.278814][T21788] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4053'.
[ 1449.295210][T21788] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1449.301926][T21788] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1449.327586][T21788] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1449.576654][ T9359] usb 2-1: config 15 has no interface number 0
[ 1449.611222][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1449.722742][ T9359] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1449.733568][ T5945] usb 5-1: Product: syz
[ 1449.737842][ T5945] usb 5-1: Manufacturer: syz
[ 1449.744777][ T9359] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1449.756440][ T5945] usb 5-1: SerialNumber: syz
[ 1449.763441][ T9359] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1449.775271][ T5945] usb 5-1: config 0 descriptor??
[ 1449.781047][T21782] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1449.803814][ T5945] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1449.813934][ T5945] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1449.821457][ T9359] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1449.842741][ T9359] usb 2-1: config 15 interface 174 has no altsetting 0
[ 1449.870775][ T9359] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1450.022288][ T9359] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1450.040455][ T9359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.057750][ T9359] usb 2-1: Product: syz
[ 1450.068193][ T9359] usb 2-1: Manufacturer: syz
[ 1450.080530][ T9359] usb 2-1: SerialNumber: syz
[ 1450.397277][ T9359] sierra 2-1:15.174: Sierra USB modem converter detected
[ 1450.548631][ T9359] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[ 1450.896472][ T9359] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[ 1450.915053][ T9359] usb 2-1: USB disconnect, device number 33
[ 1450.950296][ T9359] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1451.004075][ T9359] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1451.013160][T11513] udevd[11513]: setting owner of /dev/ttyUSB1 to uid=0, gid=18 failed: No such file or directory
[ 1451.055964][ T9359] sierra 2-1:15.174: device disconnected
[ 1451.346871][T19183] raw-gadget.1 gadget.4: failed to queue suspend event
[ 1451.407153][T21796] raw-gadget.1 gadget.4: failed to queue disconnect event
[ 1451.560538][ T9359] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[ 1452.624378][ T9359] usb 2-1: config 0 has no interfaces?
[ 1452.641656][ T9359] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1452.671108][ T9359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.701289][ T9359] usb 2-1: config 0 descriptor??
[ 1453.835240][T21815] loop2: detected capacity change from 0 to 7
[ 1453.869536][T21815] Dev loop2: unable to read RDB block 7
[ 1453.898671][T21815]  loop2: unable to read partition table
[ 1453.922598][T21815] loop2: partition table beyond EOD, truncated
[ 1453.932504][T21815] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1454.069648][T21574] usb 2-1: USB disconnect, device number 34
[ 1455.166820][T21849] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1456.522781][T19183] usb 5-1: USB disconnect, device number 49
[ 1457.220461][T21574] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1457.521919][T21574] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 1457.561283][T21574] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1457.647261][T21574] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[ 1457.687409][T21574] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1457.719794][T21574] usb 10-1: config 0 descriptor??
[ 1458.071681][T21574] usbhid 10-1:0.0: can't add hid device: -71
[ 1458.086362][T21574] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1458.112626][T21574] usb 10-1: USB disconnect, device number 60
[ 1459.360526][T21905] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1460.146693][T21913] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1461.280489][ T5900] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1461.440809][ T5900] usb 2-1: Using ep0 maxpacket: 32
[ 1461.488201][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1462.037961][ T5900] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1462.375406][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1462.405713][ T5900] usb 2-1: Product: syz
[ 1463.382409][ T5900] usb 2-1: Manufacturer: syz
[ 1463.387042][ T5900] usb 2-1: SerialNumber: syz
[ 1463.632949][ T5900] usb 2-1: config 0 descriptor??
[ 1463.647928][T21916] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1463.692457][ T5900] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1463.718778][ T5900] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1464.058274][T21939] usb usb1: check_ctrlrecip: process 21939 (syz.9.4094) requesting ep 01 but needs 81
[ 1464.069801][T21939] usb usb1: usbfs: process 21939 (syz.9.4094) did not claim interface 0 before use
[ 1464.743846][T19183] raw-gadget.1 gadget.1: failed to queue suspend event
[ 1464.787014][T21948] hub 9-0:1.0: USB hub found
[ 1464.793004][T21948] hub 9-0:1.0: 1 port detected
[ 1464.911367][T21916] raw-gadget.1 gadget.1: failed to queue resume event
[ 1465.013293][T19183] raw-gadget.1 gadget.1: failed to queue suspend event
[ 1465.052340][T21941] raw-gadget.1 gadget.1: failed to queue disconnect event
[ 1465.085153][ T9359] usb 2-1: USB disconnect, device number 35
[ 1468.099440][T21975] usb usb1: check_ctrlrecip: process 21975 (syz.7.4100) requesting ep 01 but needs 81
[ 1468.109644][T21975] usb usb1: usbfs: process 21975 (syz.7.4100) did not claim interface 0 before use
[ 1469.568163][T21993] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1470.049188][T21997] usb usb1: check_ctrlrecip: process 21997 (syz.1.4104) requesting ep 01 but needs 81
[ 1470.059043][T21997] usb usb1: usbfs: process 21997 (syz.1.4104) did not claim interface 0 before use
[ 1471.251929][T22010] usb usb1: check_ctrlrecip: process 22010 (syz.7.4109) requesting ep 01 but needs 81
[ 1471.261639][T22010] usb usb1: usbfs: process 22010 (syz.7.4109) did not claim interface 0 before use
[ 1471.528664][T22016] usb usb1: check_ctrlrecip: process 22016 (syz.1.4110) requesting ep 01 but needs 81
[ 1471.543891][T22016] usb usb1: usbfs: process 22016 (syz.1.4110) did not claim interface 0 before use
[ 1473.133974][T22039] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1473.500326][T22040] usb usb1: check_ctrlrecip: process 22040 (syz.5.4116) requesting ep 01 but needs 81
[ 1473.510002][T22040] usb usb1: usbfs: process 22040 (syz.5.4116) did not claim interface 0 before use
[ 1475.439218][T22067] usb usb1: check_ctrlrecip: process 22067 (syz.7.4121) requesting ep 01 but needs 81
[ 1475.450176][T22067] usb usb1: usbfs: process 22067 (syz.7.4121) did not claim interface 0 before use
[ 1475.848148][T22069] usb usb1: check_ctrlrecip: process 22069 (syz.9.4112) requesting ep 01 but needs 81
[ 1475.862206][T22069] usb usb1: usbfs: process 22069 (syz.9.4112) did not claim interface 0 before use
[ 1477.040347][T21316] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1477.110637][ T5900] usb 10-1: new full-speed USB device number 61 using dummy_hcd
[ 1477.351385][T21316] usb 2-1: Using ep0 maxpacket: 16
[ 1477.368338][T22088] usb usb1: check_ctrlrecip: process 22088 (syz.5.4128) requesting ep 01 but needs 81
[ 1477.378463][T22088] usb usb1: usbfs: process 22088 (syz.5.4128) did not claim interface 0 before use
[ 1477.460238][ T5900] usb 10-1: config 0 has no interfaces?
[ 1477.466004][ T5900] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1477.475511][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1477.483971][T21316] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1477.493521][T21316] usb 2-1: config 15 has an invalid interface number: 174 but max is 0
[ 1477.515441][ T5900] usb 10-1: config 0 descriptor??
[ 1477.524020][T21316] usb 2-1: config 15 has no interface number 0
[ 1477.530228][T21316] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1477.550707][T21316] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1477.566515][T21316] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 1477.587694][T21316] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1477.602642][T21316] usb 2-1: config 15 interface 174 has no altsetting 0
[ 1477.611771][T21316] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1477.629639][T21316] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[ 1477.652719][T21316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.661102][T21316] usb 2-1: Product: syz
[ 1477.665335][T21316] usb 2-1: Manufacturer: syz
[ 1477.669974][T21316] usb 2-1: SerialNumber: syz
[ 1477.801246][T21574] usb 10-1: USB disconnect, device number 61
[ 1477.895196][T21316] sierra 2-1:15.174: Sierra USB modem converter detected
[ 1477.904700][T21316] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[ 1477.915503][T21316] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[ 1477.931568][T21316] usb 2-1: USB disconnect, device number 36
[ 1477.956728][T21316] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1477.968699][T21316] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1477.978142][ T5900] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[ 1477.986786][T21316] sierra 2-1:15.174: device disconnected
[ 1478.141769][ T5900] usb 5-1: config 0 has no interfaces?
[ 1478.147252][ T5900] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1478.156479][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1478.166402][ T5900] usb 5-1: config 0 descriptor??
[ 1478.381787][ T5900] usb 5-1: USB disconnect, device number 50
[ 1480.908820][T22130] usb usb1: check_ctrlrecip: process 22130 (syz.1.4142) requesting ep 01 but needs 81
[ 1480.920520][T22130] usb usb1: usbfs: process 22130 (syz.1.4142) did not claim interface 0 before use
[ 1481.073579][T22132] usb usb1: check_ctrlrecip: process 22132 (syz.4.4141) requesting ep 01 but needs 81
[ 1481.083497][T22132] usb usb1: usbfs: process 22132 (syz.4.4141) did not claim interface 0 before use
[ 1481.241178][ T5900] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[ 1481.382125][T22137] usb usb1: check_ctrlrecip: process 22137 (syz.9.4143) requesting ep 01 but needs 81
[ 1481.392112][T22137] usb usb1: usbfs: process 22137 (syz.9.4143) did not claim interface 0 before use
[ 1481.631447][ T5900] usb 6-1: config 0 has no interfaces?
[ 1481.644964][ T5900] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1481.675294][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.700531][ T5900] usb 6-1: config 0 descriptor??
[ 1481.980461][ T5900] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1482.232816][T22128] loop2: detected capacity change from 0 to 7
[ 1482.251685][T22128] Dev loop2: unable to read RDB block 7
[ 1482.257655][T22128]  loop2: unable to read partition table
[ 1482.265890][T22128] loop2: partition table beyond EOD, truncated
[ 1482.278116][T22128] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1482.290636][ T5945] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[ 1482.417751][ T9359] usb 6-1: USB disconnect, device number 40
[ 1482.485550][ T5945] usb 2-1: config 0 has no interfaces?
[ 1482.516030][ T5945] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1482.583716][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.676843][ T5945] usb 2-1: config 0 descriptor??
[ 1482.941056][ T5945] usb 2-1: USB disconnect, device number 37
[ 1483.331691][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1483.341290][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1483.351211][ T5900] usb 5-1: can't read configurations, error -71
[ 1484.095118][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.102620][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.531310][T22169] usb usb1: check_ctrlrecip: process 22169 (syz.7.4152) requesting ep 01 but needs 81
[ 1484.640219][T22170] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1484.997628][T22169] usb usb1: usbfs: process 22169 (syz.7.4152) did not claim interface 0 before use
[ 1484.998052][ T5945] usb 10-1: new full-speed USB device number 62 using dummy_hcd
[ 1485.489172][ T5945] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1485.678560][ T5945] usb 10-1: config 0 has no interfaces?
[ 1485.777833][T22177] 9pnet_virtio: no channels available for device syz
[ 1486.754543][ T5945] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1487.070948][ T5945] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.312319][ T5945] usb 10-1: Product: syz
[ 1487.327302][ T5945] usb 10-1: Manufacturer: syz
[ 1487.340987][ T5945] usb 10-1: SerialNumber: syz
[ 1487.361975][ T5945] usb 10-1: config 0 descriptor??
[ 1487.378316][ T5945] usb 10-1: can't set config #0, error -71
[ 1487.396902][T22180] usb usb1: check_ctrlrecip: process 22180 (syz.5.4156) requesting ep 01 but needs 81
[ 1487.406560][T22180] usb usb1: usbfs: process 22180 (syz.5.4156) did not claim interface 0 before use
[ 1487.434246][ T5945] usb 10-1: USB disconnect, device number 62
[ 1488.119931][T22192] usb usb1: check_ctrlrecip: process 22192 (syz.1.4159) requesting ep 01 but needs 81
[ 1488.129669][T22192] usb usb1: usbfs: process 22192 (syz.1.4159) did not claim interface 0 before use
[ 1490.239814][T22207] usb usb1: check_ctrlrecip: process 22207 (syz.4.4163) requesting ep 01 but needs 81
[ 1490.252161][T22207] usb usb1: usbfs: process 22207 (syz.4.4163) did not claim interface 0 before use
[ 1490.631481][T22215] usb usb1: check_ctrlrecip: process 22215 (syz.7.4166) requesting ep 01 but needs 81
[ 1490.641270][T22215] usb usb1: usbfs: process 22215 (syz.7.4166) did not claim interface 0 before use
[ 1491.086175][T22218] netlink: 'syz.5.4165': attribute type 10 has an invalid length.
[ 1491.094088][T22218] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4165'.
[ 1492.978492][T22235] vlan2: entered promiscuous mode
[ 1492.983755][T22235] bridge0: entered promiscuous mode
[ 1492.989889][T22235] vlan2: entered allmulticast mode
[ 1492.995139][T22235] bridge0: entered allmulticast mode
[ 1493.278832][T22241] usb usb1: check_ctrlrecip: process 22241 (syz.5.4173) requesting ep 01 but needs 81
[ 1493.288653][T22241] usb usb1: usbfs: process 22241 (syz.5.4173) did not claim interface 0 before use
[ 1495.959400][T22263] usb usb1: check_ctrlrecip: process 22263 (syz.4.4179) requesting ep 01 but needs 81
[ 1495.969238][T22263] usb usb1: usbfs: process 22263 (syz.4.4179) did not claim interface 0 before use
[ 1496.510577][ T5900] usb 10-1: new full-speed USB device number 63 using dummy_hcd
[ 1496.654449][ T5822] Bluetooth: hci1: unexpected event for opcode 0x200f
[ 1497.621723][ T5900] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1497.638678][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1497.766718][ T5900] usb 10-1: config 0 descriptor??
[ 1497.789783][ T5900] cp210x 10-1:0.0: cp210x converter detected
[ 1497.869738][T22286] 9pnet_virtio: no channels available for device syz
[ 1498.780064][ T5900] cp210x 10-1:0.0: failed to get vendor val 0x370c size 13: -71
[ 1499.120476][ T5900] cp210x 10-1:0.0: GPIO initialisation failed: -71
[ 1499.350449][    C0] ==================================================================
[ 1499.358539][    C0] BUG: KASAN: slab-use-after-free in rose_send_frame+0x29a/0x2c0
[ 1499.366264][    C0] Read of size 8 at addr ffff888041ac7c20 by task swapper/0/0
[ 1499.373708][    C0] 
[ 1499.376020][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1499.376033][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1499.376040][    C0] Call Trace:
[ 1499.376044][    C0]  <IRQ>
[ 1499.376048][    C0]  dump_stack_lvl+0x116/0x1f0
[ 1499.376062][    C0]  print_report+0xcd/0x630
[ 1499.376074][    C0]  ? __virt_addr_valid+0x81/0x610
[ 1499.376088][    C0]  ? __phys_addr+0xe8/0x180
[ 1499.376101][    C0]  ? rose_send_frame+0x29a/0x2c0
[ 1499.376113][    C0]  kasan_report+0xe0/0x110
[ 1499.376124][    C0]  ? rose_send_frame+0x29a/0x2c0
[ 1499.376135][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1499.376146][    C0]  rose_send_frame+0x29a/0x2c0
[ 1499.376157][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1499.376168][    C0]  rose_transmit_restart_request+0x1b8/0x240
[ 1499.376180][    C0]  rose_t0timer_expiry+0x1d/0x150
[ 1499.376191][    C0]  call_timer_fn+0x19a/0x620
[ 1499.376201][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1499.376212][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1499.376225][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1499.376236][    C0]  __run_timers+0x6ef/0x960
[ 1499.376246][    C0]  ? __pfx___run_timers+0x10/0x10
[ 1499.376259][    C0]  run_timer_base+0x114/0x190
[ 1499.376267][    C0]  ? __pfx_run_timer_base+0x10/0x10
[ 1499.376276][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1499.376289][    C0]  run_timer_softirq+0x1a/0x40
[ 1499.376297][    C0]  handle_softirqs+0x219/0x8e0
[ 1499.376311][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1499.376324][    C0]  __irq_exit_rcu+0x109/0x170
[ 1499.376336][    C0]  irq_exit_rcu+0x9/0x30
[ 1499.376347][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1499.376363][    C0]  </IRQ>
[ 1499.376366][    C0]  <TASK>
[ 1499.376370][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1499.376381][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1499.376398][    C0] Code: b7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 65 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1499.376408][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1499.376416][    C0] RAX: 000000000551398f RBX: 0000000000000000 RCX: ffffffff8b60c2a9
[ 1499.376423][    C0] RDX: 0000000000000000 RSI: ffffffff8da2c177 RDI: ffffffff8bf073c0
[ 1499.376429][    C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655
[ 1499.376436][    C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000
[ 1499.376441][    C0] R13: ffffffff8e097a00 R14: ffffffff908216d0 R15: 0000000000000000
[ 1499.376449][    C0]  ? ct_kernel_exit+0x139/0x190
[ 1499.376461][    C0]  default_idle+0x13/0x20
[ 1499.376472][    C0]  default_idle_call+0x6c/0xb0
[ 1499.376483][    C0]  do_idle+0x38d/0x500
[ 1499.376496][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1499.376508][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[ 1499.376520][    C0]  cpu_startup_entry+0x4f/0x60
[ 1499.376533][    C0]  rest_init+0x16b/0x2b0
[ 1499.376544][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1499.376559][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1499.376575][    C0]  start_kernel+0x3f6/0x4e0
[ 1499.376589][    C0]  x86_64_start_reservations+0x18/0x30
[ 1499.376603][    C0]  x86_64_start_kernel+0x130/0x190
[ 1499.376618][    C0]  common_startup_64+0x13e/0x148
[ 1499.376632][    C0]  </TASK>
[ 1499.376636][    C0] 
[ 1499.689036][    C0] Allocated by task 20303:
[ 1499.693418][    C0]  kasan_save_stack+0x33/0x60
[ 1499.698066][    C0]  kasan_save_track+0x14/0x30
[ 1499.702710][    C0]  __kasan_kmalloc+0xaa/0xb0
[ 1499.707265][    C0]  rose_rt_ioctl+0x880/0x2580
[ 1499.711917][    C0]  rose_ioctl+0x64d/0x7c0
[ 1499.716224][    C0]  sock_do_ioctl+0x118/0x280
[ 1499.720787][    C0]  sock_ioctl+0x227/0x6b0
[ 1499.725093][    C0]  __x64_sys_ioctl+0x18e/0x210
[ 1499.729835][    C0]  do_syscall_64+0xcd/0xfa0
[ 1499.734307][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.740172][    C0] 
[ 1499.742469][    C0] Freed by task 22279:
[ 1499.746501][    C0]  kasan_save_stack+0x33/0x60
[ 1499.751148][    C0]  kasan_save_track+0x14/0x30
[ 1499.755792][    C0]  __kasan_save_free_info+0x3b/0x60
[ 1499.760961][    C0]  __kasan_slab_free+0x5f/0x80
[ 1499.765691][    C0]  kfree+0x2b8/0x6d0
[ 1499.769558][    C0]  rose_timer_expiry+0x53f/0x630
[ 1499.774466][    C0]  call_timer_fn+0x19a/0x620
[ 1499.779089][    C0]  __run_timers+0x6ef/0x960
[ 1499.783573][    C0]  run_timer_base+0x114/0x190
[ 1499.788225][    C0]  run_timer_softirq+0x1a/0x40
[ 1499.792960][    C0]  handle_softirqs+0x219/0x8e0
[ 1499.797694][    C0]  __irq_exit_rcu+0x109/0x170
[ 1499.802340][    C0]  irq_exit_rcu+0x9/0x30
[ 1499.806555][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1499.812162][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1499.818117][    C0] 
[ 1499.820416][    C0] The buggy address belongs to the object at ffff888041ac7c00
[ 1499.820416][    C0]  which belongs to the cache kmalloc-512 of size 512
[ 1499.834446][    C0] The buggy address is located 32 bytes inside of
[ 1499.834446][    C0]  freed 512-byte region [ffff888041ac7c00, ffff888041ac7e00)
[ 1499.848123][    C0] 
[ 1499.850420][    C0] The buggy address belongs to the physical page:
[ 1499.856804][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41ac4
[ 1499.865530][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1499.874002][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1499.881532][    C0] page_type: f5(slab)
[ 1499.885486][    C0] raw: 00fff00000000040 ffff88813ffa6c80 ffffea0001035900 dead000000000002
[ 1499.894043][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 1499.902592][    C0] head: 00fff00000000040 ffff88813ffa6c80 ffffea0001035900 dead000000000002
[ 1499.911230][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 1499.919868][    C0] head: 00fff00000000002 ffffea000106b101 00000000ffffffff 00000000ffffffff
[ 1499.928506][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1499.937156][    C0] page dumped because: kasan: bad access detected
[ 1499.943533][    C0] page_owner tracks the page as allocated
[ 1499.949214][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9021, tgid 9021 (syz-executor), ts 356524367559, free_ts 356485591966
[ 1499.970725][    C0]  post_alloc_hook+0x1af/0x220
[ 1499.975478][    C0]  get_page_from_freelist+0x10a3/0x3a30
[ 1499.980997][    C0]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1499.986862][    C0]  alloc_pages_mpol+0x1fb/0x550
[ 1499.991682][    C0]  new_slab+0x24a/0x360
[ 1499.995809][    C0]  ___slab_alloc+0xd79/0x1a50
[ 1500.000457][    C0]  __slab_alloc.constprop.0+0x63/0x110
[ 1500.005895][    C0]  __kmalloc_noprof+0x501/0x880
[ 1500.010723][    C0]  fib6_info_alloc+0x40/0x160
[ 1500.015366][    C0]  ip6_route_info_create+0x14c/0x870
[ 1500.020626][    C0]  ip6_route_add.part.0+0x22/0x1d0
[ 1500.025713][    C0]  ip6_route_add+0x45/0x60
[ 1500.030101][    C0]  addrconf_add_mroute+0x1dd/0x350
[ 1500.035198][    C0]  addrconf_add_dev+0x14e/0x1c0
[ 1500.040014][    C0]  inet6_addr_add+0xfe/0x960
[ 1500.044573][    C0]  inet6_rtm_newaddr+0x1619/0x1c70
[ 1500.049653][    C0] page last free pid 42 tgid 42 stack trace:
[ 1500.055596][    C0]  __free_frozen_pages+0x7df/0x1160
[ 1500.060775][    C0]  __put_partials+0x130/0x170
[ 1500.065425][    C0]  qlist_free_all+0x4d/0x120
[ 1500.069980][    C0]  kasan_quarantine_reduce+0x195/0x1e0
[ 1500.075412][    C0]  __kasan_slab_alloc+0x69/0x90
[ 1500.080231][    C0]  kmem_cache_alloc_node_noprof+0x28a/0x770
[ 1500.086093][    C0]  __alloc_skb+0x2b2/0x380
[ 1500.090480][    C0]  mld_newpack.isra.0+0x18e/0xa20
[ 1500.095474][    C0]  add_grhead+0x299/0x340
[ 1500.099772][    C0]  add_grec+0x11b5/0x1720
[ 1500.104071][    C0]  mld_ifc_work+0x41f/0xbf0
[ 1500.108546][    C0]  process_one_work+0x9cf/0x1b70
[ 1500.113449][    C0]  worker_thread+0x6c8/0xf10
[ 1500.118010][    C0]  kthread+0x3c5/0x780
[ 1500.122045][    C0]  ret_from_fork+0x675/0x7d0
[ 1500.126614][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1500.131361][    C0] 
[ 1500.133659][    C0] Memory state around the buggy address:
[ 1500.139253][    C0]  ffff888041ac7b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1500.147280][    C0]  ffff888041ac7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1500.155306][    C0] >ffff888041ac7c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1500.163332][    C0]                                ^
[ 1500.168405][    C0]  ffff888041ac7c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1500.176430][    C0]  ffff888041ac7d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1500.184455][    C0] ==================================================================
[ 1500.192546][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1500.199723][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1500.208709][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1500.218746][    C0] Call Trace:
[ 1500.222004][    C0]  <IRQ>
[ 1500.224831][    C0]  dump_stack_lvl+0x3d/0x1f0
[ 1500.229393][    C0]  vpanic+0x640/0x6f0
[ 1500.233348][    C0]  panic+0xca/0xd0
[ 1500.237042][    C0]  ? __pfx_panic+0x10/0x10
[ 1500.241430][    C0]  ? check_panic_on_warn+0x1f/0xb0
[ 1500.246507][    C0]  check_panic_on_warn+0xab/0xb0
[ 1500.251411][    C0]  end_report+0x107/0x170
[ 1500.255712][    C0]  kasan_report+0xee/0x110
[ 1500.260096][    C0]  ? rose_send_frame+0x29a/0x2c0
[ 1500.265004][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1500.270604][    C0]  rose_send_frame+0x29a/0x2c0
[ 1500.275340][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1500.280941][    C0]  rose_transmit_restart_request+0x1b8/0x240
[ 1500.286892][    C0]  rose_t0timer_expiry+0x1d/0x150
[ 1500.291893][    C0]  call_timer_fn+0x19a/0x620
[ 1500.296467][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1500.301548][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1500.306282][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1500.311884][    C0]  __run_timers+0x6ef/0x960
[ 1500.316360][    C0]  ? __pfx___run_timers+0x10/0x10
[ 1500.321354][    C0]  run_timer_base+0x114/0x190
[ 1500.325999][    C0]  ? __pfx_run_timer_base+0x10/0x10
[ 1500.331165][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1500.335900][    C0]  run_timer_softirq+0x1a/0x40
[ 1500.340654][    C0]  handle_softirqs+0x219/0x8e0
[ 1500.345391][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1500.350649][    C0]  __irq_exit_rcu+0x109/0x170
[ 1500.355299][    C0]  irq_exit_rcu+0x9/0x30
[ 1500.359512][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1500.365121][    C0]  </IRQ>
[ 1500.368025][    C0]  <TASK>
[ 1500.370929][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1500.376880][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1500.382502][    C0] Code: b7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 65 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1500.402079][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1500.408118][    C0] RAX: 000000000551398f RBX: 0000000000000000 RCX: ffffffff8b60c2a9
[ 1500.416057][    C0] RDX: 0000000000000000 RSI: ffffffff8da2c177 RDI: ffffffff8bf073c0
[ 1500.423998][    C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655
[ 1500.431955][    C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000
[ 1500.439909][    C0] R13: ffffffff8e097a00 R14: ffffffff908216d0 R15: 0000000000000000
[ 1500.447851][    C0]  ? ct_kernel_exit+0x139/0x190
[ 1500.452674][    C0]  default_idle+0x13/0x20
[ 1500.456972][    C0]  default_idle_call+0x6c/0xb0
[ 1500.461705][    C0]  do_idle+0x38d/0x500
[ 1500.465746][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1500.470304][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[ 1500.475471][    C0]  cpu_startup_entry+0x4f/0x60
[ 1500.480205][    C0]  rest_init+0x16b/0x2b0
[ 1500.484418][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1500.489675][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1500.495195][    C0]  start_kernel+0x3f6/0x4e0
[ 1500.499670][    C0]  x86_64_start_reservations+0x18/0x30
[ 1500.505112][    C0]  x86_64_start_kernel+0x130/0x190
[ 1500.510196][    C0]  common_startup_64+0x13e/0x148
[ 1500.515104][    C0]  </TASK>
[ 1500.518298][    C0] Kernel Offset: disabled
[ 1500.522592][    C0] Rebooting in 86400 seconds..