last executing test programs:

10m10.974553018s ago: executing program 32 (id=170):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m8.189883527s ago: executing program 33 (id=176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580030008"], 0x4a)

8m49.022925146s ago: executing program 34 (id=602):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket(0x848000000015, 0x805, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902)

8m46.423821487s ago: executing program 35 (id=611):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0x8, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
chmod(&(0x7f0000002200)='./file0\x00', 0x0)
write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x0, 0x8, 0xfff}}, 0x20)
syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x2000, 0xbca4, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r1, 0x0, 0x20000)

8m21.852582011s ago: executing program 2 (id=742):
r0 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef1761610000010203010902300001010080320904000003020200000524001001042402020705810340001007058202000200070503020002"], 0x0)
syz_usb_connect$midi(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0)
brk(0x6)
syz_usb_connect$uac1(0x6, 0x81, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4244, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x7, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x19}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x200, 0x5, 0x4, 0x4}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x3, 'U'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x7fe, 0x3, 0xf, 0x5, {0x7, 0x25, 0x1, 0xc, 0x3, 0xffff}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x311, 0x1, 0x5, 0xff, 0x10, 0x97}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_ep_write(r1, 0x81, 0xfea5, &(0x7f00000001c0)="0e00000000000000")

8m18.669353087s ago: executing program 2 (id=756):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
renameat2(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2)
renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2)

8m18.566643976s ago: executing program 2 (id=758):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x400000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

8m18.062423257s ago: executing program 2 (id=761):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x81900)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(r2, &(0x7f0000000640)='\x00', 0x89901)

8m17.093849616s ago: executing program 2 (id=764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @llc={@llc={0x0, 0xff, "b2a4", "c02d2bd53c1fefe9b933987a9203485a416abf47a91a3fdce4a70162515eedcf00000000b308"}}}}, 0x38)

8m16.798858292s ago: executing program 2 (id=765):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x25d13}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

8m16.372841245s ago: executing program 36 (id=765):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x25d13}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

4m50.490062205s ago: executing program 7 (id=1928):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901)
umount2(&(0x7f0000000200)='./file0\x00', 0x2)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

4m49.349618067s ago: executing program 7 (id=1936):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

4m48.785223913s ago: executing program 7 (id=1939):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4m48.628069522s ago: executing program 7 (id=1940):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000180)='./file0\x00', 0x0)

4m47.613501694s ago: executing program 7 (id=1951):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000080)={0x1, 0x2}, 0x0)
close(r0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}}, 0x84)

4m46.948023299s ago: executing program 7 (id=1955):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
recvmmsg(r0, &(0x7f0000008580)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x4e}], 0x2, 0x1100, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

4m46.768198221s ago: executing program 37 (id=1955):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
recvmmsg(r0, &(0x7f0000008580)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x4e}], 0x2, 0x1100, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

4m39.866694187s ago: executing program 4 (id=1956):
read$nci(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x88)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x4d9b6eaf)
write(r0, &(0x7f0000000280)='0', 0x1)

4m38.511563578s ago: executing program 4 (id=1990):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x200, 0x8, 0x2, 0x0, 0x7, 0x8, 0x61d6e0b8, 0x3, 0x6, 0xe, 0x1, 0xe9, 0x7, 0x10000, 0x5, 0x8, 0x3800000, 0x2, 0x2, 0x59b, 0x2, 0x7, 0x8, 0x7, 0x8001, 0x40, 0x401, 0x8, 0x0, 0x9, 0x6, 0x9, 0x9, 0x80000001, 0xa, 0x1ff, 0xffff7fff, 0x1, 0x8, 0xfffffffb, 0x2, 0xa05, 0x46e, 0x6, 0x1e6, 0x400, 0x6, 0x5, 0x8f, 0x0, 0x8, 0x3, 0x0, 0x642, 0x10, 0x9, 0x0, 0xd, 0x80000000, 0x10000, 0x10, 0x9, 0x200, 0x8001, 0x9, 0x800, 0x0, 0x1, 0xffffff81, 0x2, 0x400, 0x5, 0x4, 0x76, 0x1, 0x2, 0x96, 0x0, 0xffff, 0xc8de, 0xe851, 0xe29f, 0x0, 0x4, 0x2, 0x5, 0xff, 0x7, 0x2, 0x9, 0xb, 0x80, 0x1, 0x6c5, 0xe7, 0xd5a, 0x7, 0x5, 0xf663, 0x8, 0x4, 0x6, 0xc, 0x5, 0x3, 0x0, 0xd, 0x7, 0x6, 0x8, 0x8001, 0x3, 0xce, 0x30, 0x511, 0x8, 0x900000, 0x8, 0x8, 0x10, 0x3, 0x621b902a, 0x2, 0x8, 0x43, 0x3, 0x69, 0x4, 0x8f, 0xee, 0x800, 0xa22, 0x74, 0x0, 0x1, 0x6, 0xfffffff8, 0xa000000, 0x8, 0x2, 0x3b, 0xffff, 0xffffffbd, 0x3, 0x0, 0x200, 0x2, 0x1, 0x8000, 0xf87, 0x8, 0xfb24, 0x2, 0x5, 0x1, 0x6, 0x101, 0x855, 0x1, 0xeac, 0x4, 0x6, 0x2, 0x3, 0xffff, 0xd, 0x7d6, 0x6, 0x1, 0x2, 0x1, 0x8, 0xb, 0x7, 0x28000, 0x6, 0xa, 0x2, 0x9, 0x8, 0x4af, 0x3, 0x0, 0x2, 0x8001, 0x8, 0x7, 0xa4, 0x0, 0x7, 0x2ab0, 0x7ff, 0x1, 0x5, 0x440b, 0x11, 0x2, 0x1, 0x7, 0xc9, 0x9, 0x8, 0x200, 0x80000000, 0x9, 0x9, 0x87b3, 0x9, 0x1, 0x4, 0x400, 0x7fffffff, 0x88, 0x2, 0x3, 0x4, 0x6a0, 0x3, 0x4, 0x2, 0x0, 0x6, 0x4, 0xfffffffe, 0xffffa274, 0x0, 0x2, 0x7, 0xf, 0x3, 0x10000, 0x4, 0x7a, 0x1, 0x8, 0xed0, 0x80000000, 0x4, 0x8, 0x3, 0x8b9, 0x9, 0x5, 0x80, 0x8, 0x7, 0x8, 0x1, 0xfffff826, 0x7ff, 0x1, 0x9, 0x0, 0x6, 0x7]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x9, 0x0, 0x4, 0x2}, {0x4, 0x0, 0x6, 0x71f, 0x3, 0x7f}, 0x1, 0x1, 0x3f2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m38.204756925s ago: executing program 4 (id=1992):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'erspan0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip_vti0\x00'}}, 0x1e)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="6fc00801d778822a080004000005000008001b"], 0x30}}, 0x0)

4m37.827818516s ago: executing program 4 (id=1993):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

4m36.810057583s ago: executing program 4 (id=1997):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x80000001, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x10000008, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0xad2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

4m36.559890057s ago: executing program 4 (id=1999):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}], 0x10)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
write$P9_RVERSION(r2, &(0x7f0000000500)={0x15, 0x65, 0xffff, 0x61, 0x8, '9P2000.u'}, 0x15)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0xffe0)

4m35.85499855s ago: executing program 38 (id=1999):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}], 0x10)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
write$P9_RVERSION(r2, &(0x7f0000000500)={0x15, 0x65, 0xffff, 0x61, 0x8, '9P2000.u'}, 0x15)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0xffe0)

3m12.442957801s ago: executing program 3 (id=2407):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002980)={0x8, 0x0, &(0x7f0000000540)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})

3m12.351784287s ago: executing program 3 (id=2408):
r0 = socket(0x2, 0x80805, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="2b75b41936977d9430f18f4b", 0xc}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000080)}}], 0x3, 0x4050000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe)

3m10.937637962s ago: executing program 3 (id=2410):
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080)=0x9, 0x4)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0x40047438, &(0x7f0000000040))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)

3m10.66883199s ago: executing program 3 (id=2413):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00')
r2 = epoll_create(0x10000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x9000000d})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

3m10.505651629s ago: executing program 3 (id=2414):
r0 = syz_open_dev$video4linux(&(0x7f0000000e40), 0x3f, 0x8200)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc0405626, &(0x7f0000000040)={0x101, 0x0, 0x2001, 0x2, 0xff, 0xf, 0x10000a9f})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x0, 0xffffffff, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}, 0x1, 0x0, 0x0, 0x8840}, 0x4000090)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

3m10.15093562s ago: executing program 3 (id=2417):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0})
sendmsg$key(0xffffffffffffffff, 0x0, 0x40004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}})

3m9.40176131s ago: executing program 39 (id=2417):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0})
sendmsg$key(0xffffffffffffffff, 0x0, 0x40004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}})

2m24.011555571s ago: executing program 9 (id=2607):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0)

2m23.730785521s ago: executing program 9 (id=2611):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

2m22.851663851s ago: executing program 9 (id=2613):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x20, 0x30}, 0xc)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000005c0)="1a", 0x1, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000640)="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", 0x34000, 0xbcff, 0x0, 0x0)
writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000a40)='^', 0xfdef}], 0x1)

2m22.142355733s ago: executing program 9 (id=2617):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0)
dup3(r2, r0, 0x80000)
r3 = syz_io_uring_setup(0x1cfd, &(0x7f0000000900)={0x0, 0x800, 0x10000, 0x1, 0x3d22}, &(0x7f0000000980)=<r4=>0x0, &(0x7f00000009c0)=<r5=>0x0, &(0x7f0000000a00)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000a40)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

2m21.768820936s ago: executing program 9 (id=2619):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000026c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4)

2m20.4395282s ago: executing program 9 (id=2623):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m19.67392986s ago: executing program 40 (id=2623):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m16.986023899s ago: executing program 6 (id=2909):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0xa, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}])
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x9d, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=""/4})

1m14.045651551s ago: executing program 6 (id=2911):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90)
listen(0xffffffffffffffff, 0xc)
openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)

1m13.695436065s ago: executing program 6 (id=2915):
socket$packet(0x11, 0x3, 0x300)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x24044080)

1m12.714195851s ago: executing program 6 (id=2917):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
syz_pidfd_open(0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
read(r1, &(0x7f0000002180)=""/257, 0x101)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {r2, r3+60000000}}, 0x0)

1m11.280501031s ago: executing program 8 (id=2924):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002000)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x1, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$packet(0x11, 0xa, 0x300)
write$tun(r0, &(0x7f0000000100)=ANY=[], 0xfdef)

1m10.131509972s ago: executing program 1 (id=2926):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
dup3(r1, r0, 0x80000)

1m9.957229955s ago: executing program 5 (id=2927):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000a40)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})

1m9.434038138s ago: executing program 8 (id=2928):
socket$packet(0x11, 0x3, 0x300)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x24044080)

1m9.325327784s ago: executing program 6 (id=2929):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000280)=0x6c, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x9, 0x11)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x4000)
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0)
write(r2, &(0x7f00000000c0)='Sy', 0x2)

1m8.946603428s ago: executing program 5 (id=2930):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42}}}}}}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x40100)
r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000000), 0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = dup(r1)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)

1m8.062154432s ago: executing program 0 (id=2931):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

1m7.663058518s ago: executing program 1 (id=2932):
syz_usb_connect(0x3, 0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff62"], 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040))
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m6.435941498s ago: executing program 5 (id=2933):
timer_create(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x542}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x885e, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x3, 0x244, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

1m6.420459025s ago: executing program 0 (id=2934):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0xa)
capset(0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)

1m5.905039078s ago: executing program 8 (id=2935):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

1m4.329877874s ago: executing program 0 (id=2936):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0xc, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x1004}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x203}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x9, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)

1m3.817196142s ago: executing program 1 (id=2937):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_rdma(0x10, 0x3, 0x14)
syz_ublk_setup_io_uring(0x1e, &(0x7f00000002c0)={0x0, 0x30b3, 0x40, 0x1, 0x158}, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)

1m3.666094224s ago: executing program 5 (id=2938):
mmap(&(0x7f0000670000/0x2000)=nil, 0x2000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000)
read(r0, &(0x7f0000000180)=""/145, 0x91)
r1 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000bcb000/0x4000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x4000})
lseek(0xffffffffffffffff, 0x73, 0x4)

1m2.707296057s ago: executing program 8 (id=2939):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xa100)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x4, 0x0, 0x2, 0x11})
read(r0, &(0x7f0000000100)=""/125, 0x7d)
preadv(r0, &(0x7f0000001d80)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1, 0x2, 0xd)
syz_io_uring_setup(0x231e, 0x0, 0x0, 0x0, 0x0)

1m2.606334607s ago: executing program 6 (id=2940):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x8000, 0x4, 0x3, 0x10, 0xfffffffb, 0xe8b, 0x8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1m0.791010966s ago: executing program 1 (id=2941):
r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='proto\x00', &(0x7f0000000200)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f0000000300)='2049\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountport\x00', &(0x7f0000000380)='2049\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='nconnect\x00', &(0x7f0000000400)='2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000440)={0x2}, 0x0)

1m0.43983908s ago: executing program 0 (id=2942):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x14, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793cdab0da77ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "2a8bfe1406584ae7be4af14e1df82d000001000000000000000074b000", [0x20007a, 0x9]})
write(r0, &(0x7f00000004c0)="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", 0x223)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x4c0400, 0x8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002ac0)={0x0, ""/256, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "cbda627192ec30"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001ac0)={r4, 0x0, "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", "9ed15a86c85594ffb8146384e9bf6142763883fd0a433a1955b945a8420439af304b9607b54f0291b43a68c9824db7102d611ed59d1146ae729f8bbdd49bb7451601a660ce2219ee1a664c76e19df851bd8452989f3b133eda1846a6e157751c007311534a1a5ede05319dd58aa205cff79806cc5d1535be49ac6922dee714d1523fb010ddc286d1447caf63657c11e7b3d6265682c4008e31c5657308f257dc1767e02aa15a1319a5f1851173385fe0a306be9e7cab952bb32c2b33554b128133d09f7224f2a8b6254514ec97b6b0b97609bd6bd97090b6ad004096dab4656ffe1c5d79a006bc79fb01ab2dc632b30b8c290b88ac1c2c6b9ea9a200cd2540aba068b290820dce0a8832aedf74199162194d74e8215463164ad872d01f541503366120320fda7aa874c9f13ebe3078b6b1ce553009d28faa4875413f89a679aef9acd5a4be745c0275d11d5798370c493247f7a73d53789e135dbb11d1ff21f8e17b9864c73f6a78dd007d05ddabfc7822ddecefa457e64ef03d489b256f0779644cf12109ae7db4bc294b40206b9a519f5875f64e657d383a5eaa7c47fb83b821e94b28b488fd2edfa2b8f729a493e2e9e73e52a55fbda7baf8d5c0209742fa15ab34491bee23c50c852507494326f9804750b142c450bd7bdcbfe3bf350677179ba3f1f8a86a6fb24b14f669a1fefbf39246bb880a6274f5cc9382a6ee01a629b5cd26f42268561d7768996177a7950cde98bbd86ce781ca41584135de4b6a900d5138aebed6e09db6403de6c333c1a76790b096d8ebc7565f1f612a47732fd729af3bd578fb2f57385b99073e407732bc825f7e42cc9cd06757b387a825aa1a8ccdbffdd15231b277e2a5d0334197316579a3a80159bf3122a9bf0a165b2cc4b8e4a23fa6e89a895907cae8dd7f34da83218f324f5def5447e71fdbd7b0b05245b943186854989f86d48b193f4c413c7482eb63c7c7d84726489a4f9ec19455fa3b886d043dc3d858ce5f63266739931b78925f50ac6d7276a803ee5e15793830582e73c99694392a402460d01dba4d3df225b5f8379c3417bf1de9c07e1662d4bce8159b2407667bdd06bb06cfa5ade85449d2894e1c8348abbee474f9db66ab50bdae81220dc6de2deff8e598c1744e792ba93e7484e1dd4c1af24c3232dd05e031b75351e7c9018ce594dd52ff58e2b25b5702e49ad9f93828bf47eae0e0e44d056d4d4d55cf7f47cccd180b3ff78f75ef1460e89d09254801fae53677f95297887d23aace88236068ef82cc0dfb1ae8ee74ce513110ca989170618b79e0b028e0038f52d3c1719f8057e821e3f74aecf696910668f55a97a68a3b382ebdd5d94a2bcd40a4d8c42c25464b17e37142eae0e053532e0120f3f4cf6a9fcb86843d8140dc056996beb7c86f88afb4d2ae27a794f001d0f2e3a7871fe4893ea49966a6aeb327163eed0fe8c17ca267fda0276148d342df003b3bfe9efe01e451e1326f38f54f5aa1a850f4010b6d7922b75c9381fe3e9ee985c2ed25ff5db05d173f71d414ae27cff5d4b5bbf04726c523c1693c1ac747b35c8433d496847cb52609a67ec059011241939a9f66ddf6be79a0257254ce179727c17caa18839c4c49c724adeb41855349622ec52ea7dedf8a022e6168ea002da8858aaf62b2a336ab56be6770fda8696b64a0d0b0d8bd356210a723d02b223a192526297c923b70c50ae9c7e8c2b9dfd70068daccd36a933678814c858d71c78284363ca178dc9c56e42986c8eedc8708eadcd14e9e7a4ea71370d19dcb5ab17ede92a01f3902fa8bf1400fe989a057c76fc0c76c25c6b22784ca6e768b6f3d87875e878210f7623929946685961b38ce9b9e2505379400ca7491c0e563c2d14aac3e531784a6aa7be5d05c179278c929aa22bd42baaaee4f3df56a0bb0e23e8f12bd763a06a9fa810cd60561212dc291624039a43b31640a70db30ccdcdc4abdff780e994143a10f364ea7956195f6c517ba6243daf7ebc5747063216f2363a064547af76084e4c0bbba81b350b302ba8e196801620b85e907adc04b0ad7a2a29424e7ba91b9a282687df47026faa282e5f23e34bc8acae5b41e4ab086ccde27d9fa4e1044ccbc2bbef5a4f653159527ea73b808af74f6844458f8d7faffa720995b3d5cc87e2b768817ff23718dcb50fe357bc103314ce78187d116517efbef6efafc009ae29b8b71b097af1b643469accdaa9e6582394c1909e8b9b4973b2bc26a08c4d1bd193e4bb46dc64ef98088121bc702cc5654d2237ac15de8855c70b0c90646815e4454f6eba99222efd04e78d33a18a1034a21e354aa48402269fd90013e3a888d139679a8d17f277e859ab201837c1364fafea2b84de6334a1ab8b23cbabff3370e2a37488511493f1837561f44c11e25a8a52af8d448fa031087ee63b0ec7e17318f8f856d194d1d18363c338bc4b04f3243a8dad2c288bd2264fe900ac1d108d3920a61098c35d91641569e28f5ee2457bf59205e8ff781be1ab299d66bace5204c43abc8f680636a0cc0690c161afde13b1dabe82a46aba7f17627b20dfd73f656d1487094cf3156fb5748c6cf6a2e18130dbd352521e2e6b89fe96f237b01d81e769fd1d7953ba0260894b9a63f20652dae1d523920ff785e1bb23b0104c6e1461233634afe3f4dcc3177362c0d3485c91e656234015f7657acff564b0f043c73b649da406378f1049bb50676cf895787273a8d3441f8c832d905180823bee0e0cefed0e05ffc73c5db707f746ae1874c1fa15435f487cf2bf5cc594b6b19a7b47c2f59f676bd9573c72707eb1ee221a16abf514af697da17ae4bcdcd07525e6891506f33577e82391e60d3e5b9bcce48036e8379b0997a7a95d1958979d3e41379dad3ae42fa3b4d341a9b387632cf27fa03f7d3cd2305fe30a7249dd0bd804ab9121b0e25e92d8ce3b55c6e98c859ab741cf8f661ae592ff6a5590b9c2659d709b1b4883bb609d12b58f21e9771861d766e77ccd63d5c398146f081256a97ed44ad40c3c6eb4f769396743e3250ad63cde449b4c8fa2ebbc62d77d10ea8c0f779b6147d9935c82325579ebbcd4950567c9e028ed89fa4b46fa37ad834e8c7a23c9500db2ec180db4da107e45e7890035a8f5cb865bc6d248ee1b700d3ae367e37c8347625c4d547ff2fe4fb4fb53b8b0926779a19e0ba25740662907832799b493c3f79c87b328c1932c8e03101510121df37a37e72373476d920c71dc7e70591887fccb8c9d0d09ada92b4af22780f0b4d23ceb2538129b1e4071950a7c15eac681d44f0e5594232bb6cd4ed020029248bd4a3cb474d2c1dee772d776c5b640d7ea92ed077efafcd1e9b482ff3e5b3f86740ab09f9d0bc6a01c39e04b7bec9c93f64f82f41491ca38d5d0b7f07a6b5982cd8866f6dddc69d45a471b229a67eab3e7918e61ff585038dfce1ff27bccdb5afdb355f80ee680c947a19bda567c6f54e7698ca78c5ac48284abaf89a1575c08ece20daa6209b8d89a20cab40bea337beda5bf7b2889e9bc50ec434597754e39afd35d59b1c8247557af4ff8c29f1d4e467da120ae456db7b7c311ad0b9a1d6d671807190ae0c92313aeb9e12e12000f1bf969ff23712a4f54d8aa9a51307a7e5be745487f4c59df425fecd56d7f43e65449a8b47c64851b9cf25fc72492c1efeb214dccbfd078dff8873274b6b927a94bf2c214d816b8df1d330ea45b55ed290f759c74af1848063a7141b14065f8ecc1683a5454705d6053a3ad1d3dfb8cdc013311b353f7ac4c72b2dc800515fc7b43bfd6f9cfac07bf9b43c3a0bd51b9ba434dac63f4feb2b5d98980859ffc57e693716eb695119c1feb3128b44c3de346d1b4cd626b247f239aa70248f875a230052950c2a1cb43202c8d55c58a38c888073a355256e4ecb13961d6cf450f10bf817976b9dbf42d9e511473e50e2a690d7723f79b7bf54fa5653b01ae173f537d6b29f42f26cfbad9a1699642e163cb05da925520c16c6f45bf52139df234bd0db5ce4392acff3f582ef75b409e1e01bb5ff5d7a466d3a4fb34a4857760e92685e777b900f58163a56dfba75784c8c71b1373d9f5882f744adb8f1f7d24b47e7525db022981b8b5f13185637942312acb19ac9d6276ff8e9de1f8be193328b21eb05041774787235309c182fc82976ea9c570645bdc918aff2272ba8956fe29944d30452b6ee1d0ac6a5c78ced0cf72dbe154110bc25bb1b859db7ca490d8c1e99654a8d1f4356d54f442978cb442087fb87c102e9f0bafad6747aff03d74fcb029959c24bab72dcc8f4954429c105a0e62d77175906cbd754ffcfeda516d7f406703db83f63087c45104b4a3057338405f78c46628efa8550a6c1da23d24dfa8ab8a1d8daabb28b02202a7ab13307e5ce11317f56ad16496f77ef01ddfab6c4829011685f9c48b5cbe564181118e469d9dfe90c3e1bea4874417dcc56984d7e3147d730d76b27ed923861960bd9f32ca6c6b237165db87f8512e6ad0e886177f14c26109c6fc0b2b9041bfd2ac0518ad3ffe1cf147c0672bea4c4649a5ba30aaac87954c6295609832212705ef44273919d9a4f433a6f81b2dbc0db934d9ac34442bb8757c1fcc155bf6e8aa902db4c31ca8080cd99081e007c0c29c92a0bd5c2f8f75efdaa6bb3ae12ae86d41e72f4ffdd60981137d7cf7461fdef44ee406fd8fd19e06973c7ca8a668a13b1844b450f5346646b86564127b535dbd28b7a33d79a04b66316c0fc4d25021a7daf5ace6d2d0ec7462976c5221f8c1fcba23efffd657dcf3e9886fb5bb7b53fe3838b8e37c20ac927b3979f097cff468c074fbb1b7921db7839c8845e0ea6ace39348aa275699e3479d5f82e2b47140b957a9cf888a00dc060a533b6ffac6ef8feea417764ec66d7dd7bf74fc015b910bbd28af014f8ff0282bb65c5179193cb127cc5542e768d2d6bd6e03c2741ae4bca5db94d141bf326ace9a8399081354fea5f94c5e0d18e2f650aadae0e0a102bd3423c75236e1f5f940cf38bb19acd5534015a82dc93db427155a5edad9bb43f6b7b8b7c7042f16862e419e743cedebfc3b1cfe84190ed606258e4d674230d3213da2e4aa5ae066a8c15ba685502d001ff31276bb999deda71d119670c82505f2cd7a5d67c6ef5973b8053fbab864b5e0d042252d747dd7d50a6fdafa2aa55b56bb7892ff747a492d2f30dcaf54c7309ebf8c54b3a8c0846972bf182b20e8c97f308dd362c92e748ff92962a30d2e2374c13d78e0ba0a56891c54c2b25efba3ea46b326a788b6260ac68d8a59601a6da9f027028eeb5bcd0c13732b9dcf4670d5fea5fd9c19183f3efdaa003c230a26beafd2825a8379d690234e1f957fb621dd601ceb98851db552b60364defcdeccc2"})

48.864002929s ago: executing program 1 (id=2943):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

48.863641076s ago: executing program 0 (id=2944):
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x9721, 0x40000, 0x1, 0x80}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r6=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r7, 0x3}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x40, 0x2007, @fd=r4, 0x1, 0x0, 0x0, 0x4, 0x0, {0x2, 0x0, 0x3, '\x00', 0x0, 0xb07}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

48.843449175s ago: executing program 5 (id=2945):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1}, 0x80d1)
syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2)

48.833959351s ago: executing program 8 (id=2946):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14)

46.517228037s ago: executing program 41 (id=2940):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x8000, 0x4, 0x3, 0x10, 0xfffffffb, 0xe8b, 0x8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

46.470614636s ago: executing program 0 (id=2948):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x10001, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

45.042348615s ago: executing program 8 (id=2949):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)=ANY=[@ANYBLOB="3000000020000103000000000000000002000000000000001c80000014001100626f6e64300000000000000000000000f5eae9eb8687701a3ee8c3339365ea005445600220678b768bb15b6448259cc13b779dda145c9d5d50b089854da8ed6a1ebf5ebf542aa55e30abe76b6c413f5e93ab58e0867eea9c63baf8be5500649c4073ff28f39a992fb9adb7cbdce03dee224bc44a4a71778830d3a42f9fe11c31dfde1fcab01358c04d31eed4bd6f6b66b5ae0265e57a5227af77cfb478d4d2cce70f03f45ea8e1279b5bf0d012c61266f381f53bb50c719b09019a07770ac667b3506855bc00"/243], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})

45.03340902s ago: executing program 5 (id=2950):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0)
landlock_restrict_self(r2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

44.089122502s ago: executing program 1 (id=2951):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0x2, 0xa}, {0x1c, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xa13}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x40810)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x0)

0s ago: executing program 42 (id=2949):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)=ANY=[@ANYBLOB="3000000020000103000000000000000002000000000000001c80000014001100626f6e64300000000000000000000000f5eae9eb8687701a3ee8c3339365ea005445600220678b768bb15b6448259cc13b779dda145c9d5d50b089854da8ed6a1ebf5ebf542aa55e30abe76b6c413f5e93ab58e0867eea9c63baf8be5500649c4073ff28f39a992fb9adb7cbdce03dee224bc44a4a71778830d3a42f9fe11c31dfde1fcab01358c04d31eed4bd6f6b66b5ae0265e57a5227af77cfb478d4d2cce70f03f45ea8e1279b5bf0d012c61266f381f53bb50c719b09019a07770ac667b3506855bc00"/243], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})

kernel console output (not intermixed with test programs):

.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  545.390251][ T9823] usb 6-1: USB disconnect, device number 46
[  545.466694][T14419] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.466820][T14419] bridge0: port 2(bridge_slave_1) entered forwarding state
[  545.467164][T14419] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.467332][T14419] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.640076][T14423] sg_read: process 1106 (syz.8.2412) changed security contexts after opening file descriptor, this is not allowed.
[  546.450600][ T6142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.774847][ T6142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.872196][ T6142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.136464][ T6142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.216101][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  547.220049][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  547.234935][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  547.263023][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  547.268521][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  547.610135][ T9822] Console: switching to colour frame buffer device 128x48
[  547.628892][ T9822] gud 7-1:1.0: [drm] fb0: guddrmfb frame buffer device
[  547.687046][ T9833] usb 7-1: USB disconnect, device number 39
[  547.728180][ T9833] Console: switching to colour VGA+ 80x25
[  548.157776][ T6142] bridge_slave_1: left allmulticast mode
[  548.157804][ T6142] bridge_slave_1: left promiscuous mode
[  548.158102][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.193131][ T6142] bridge_slave_0: left allmulticast mode
[  548.193163][ T6142] bridge_slave_0: left promiscuous mode
[  548.193400][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.279466][ T9823] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  548.431802][ T9823] usb 7-1: Using ep0 maxpacket: 16
[  548.432934][ T9823] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  548.435927][ T9823] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  548.435965][ T9823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  548.475459][ T9823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.475495][ T9823] usb 7-1: Product: syz
[  548.475514][ T9823] usb 7-1: Manufacturer: syz
[  548.475533][ T9823] usb 7-1: SerialNumber: syz
[  548.516966][ T9823] usb 7-1: config 0 descriptor??
[  548.540675][ T9823] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  548.540715][ T9823] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  548.921238][ T6142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.938848][ T6142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.953249][ T6142] bond0 (unregistering): Released all slaves
[  549.198852][ T9823] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  549.200208][ T9823] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  549.271375][T14482] ªªªªªª: renamed from vlan0 (while UP)
[  549.339925][ T5627] Bluetooth: hci2: command tx timeout
[  549.804901][T14496] binder: 14495:14496 ioctl c0306201 80000180 returned -14
[  549.822738][ T9823] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  549.823343][ T9823] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  549.944060][ T6142] hsr_slave_0: left promiscuous mode
[  549.945019][ T6142] hsr_slave_1: left promiscuous mode
[  549.945930][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  549.945952][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  549.983351][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  549.983377][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.021743][ T6142] veth1_macvtap: left promiscuous mode
[  550.021791][ T6142] veth0_macvtap: left promiscuous mode
[  550.021905][ T6142] veth1_vlan: left promiscuous mode
[  550.021976][ T6142] veth0_vlan: left promiscuous mode
[  550.055173][ T9823] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  550.055573][ T9823] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  550.056923][ T9823] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  550.057319][ T9823] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  550.108082][ T9823] usb 7-1: USB disconnect, device number 40
[  551.302739][ T6142] team0 (unregistering): Port device team_slave_1 removed
[  551.361954][ T6142] team0 (unregistering): Port device team_slave_0 removed
[  551.419799][ T5627] Bluetooth: hci2: command tx timeout
[  551.847796][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17
[  552.018766][T14535] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  552.200360][T14447] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.200532][T14447] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.200676][T14447] bridge_slave_0: entered allmulticast mode
[  552.202347][T14447] bridge_slave_0: entered promiscuous mode
[  552.234319][T14544] syzkaller1: entered promiscuous mode
[  552.234343][T14544] syzkaller1: entered allmulticast mode
[  552.237576][T14447] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.237748][T14447] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.237880][T14447] bridge_slave_1: entered allmulticast mode
[  552.240424][T14447] bridge_slave_1: entered promiscuous mode
[  552.289697][ T5711] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  552.387561][T14447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  552.447348][ T5711] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  552.448550][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  552.448654][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  552.448677][ T5711] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  552.448719][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.507927][ T5711] usb 7-1: config 0 descriptor??
[  552.584049][T14447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  552.757740][T14447] team0: Port device team_slave_0 added
[  552.796595][T14447] team0: Port device team_slave_1 added
[  552.950810][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  552.950853][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  552.950882][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  552.950911][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  552.953062][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  552.953102][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  552.953131][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  552.953160][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  552.953189][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  552.953216][ T5711] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[  553.041566][ T5711] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  553.164211][T14447] batman_adv: batadv0: Adding interface: batadv_slave_0
[  553.164248][T14447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  553.164279][T14447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  553.213249][T14447] batman_adv: batadv0: Adding interface: batadv_slave_1
[  553.213306][T14447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  553.213378][T14447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  553.484419][T14447] hsr_slave_0: entered promiscuous mode
[  553.486862][T14447] hsr_slave_1: entered promiscuous mode
[  553.489198][T14447] debugfs: 'hsr0' already exists in 'hsr'
[  553.489223][T14447] Cannot create hsr debugfs directory
[  553.501635][ T5627] Bluetooth: hci2: command tx timeout
[  554.038389][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18
[  554.189913][ T9833] usb 7-1: USB disconnect, device number 41
[  554.331863][ T9823] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  554.347550][ T5711] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  554.479539][ T9823] usb 10-1: Using ep0 maxpacket: 8
[  554.480402][ T9823] usb 10-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11
[  554.484084][ T9823] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.484111][ T9823] usb 10-1: Product: syz
[  554.484127][ T9823] usb 10-1: Manufacturer: syz
[  554.484143][ T9823] usb 10-1: SerialNumber: syz
[  554.487377][ T9823] usb 10-1: config 0 descriptor??
[  554.492580][ T9823] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  554.545425][ T5711] usb 9-1: Using ep0 maxpacket: 16
[  554.548858][ T5711] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  554.564521][ T5711] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  554.594389][ T5711] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.594422][ T5711] usb 9-1: Product: syz
[  554.594439][ T5711] usb 9-1: Manufacturer: syz
[  554.594454][ T5711] usb 9-1: SerialNumber: syz
[  554.597667][ T5711] usb 9-1: config 0 descriptor??
[  554.636840][ T5711] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  554.636881][ T5711] em28xx 9-1:0.0: DVB interface 0 found: bulk
[  554.732094][ T9823] pwc: Failed to set LED on/off time (-71)
[  554.732589][ T9823] pwc: send_video_command error -71
[  554.732613][ T9823] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  554.732756][ T9823] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71
[  554.739173][ T9823] usb 10-1: USB disconnect, device number 32
[  554.925292][   T31] audit: type=1326 audit(1791740988.879:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14601 comm="syz.6.2456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  554.925533][   T31] audit: type=1326 audit(1791740988.879:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14601 comm="syz.6.2456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  554.974650][   T31] audit: type=1326 audit(1791740988.929:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14601 comm="syz.6.2456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  554.974798][   T31] audit: type=1326 audit(1791740988.929:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14601 comm="syz.6.2456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  554.974922][   T31] audit: type=1326 audit(1791740988.929:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14601 comm="syz.6.2456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  555.018261][   T31] audit: type=1326 audit(1791740988.959:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14601 comm="syz.6.2456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  555.295465][ T5711] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  555.330478][ T9823] usb 10-1: new full-speed USB device number 33 using dummy_hcd
[  555.393417][   T31] audit: type=1326 audit(1791740989.349:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14601 comm="syz.6.2456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  555.393502][   T31] audit: type=1326 audit(1791740989.349:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14601 comm="syz.6.2456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  555.509491][ T9823] usb 10-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11
[  555.513003][ T9823] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.513035][ T9823] usb 10-1: Product: syz
[  555.513053][ T9823] usb 10-1: Manufacturer: syz
[  555.513070][ T9823] usb 10-1: SerialNumber: syz
[  555.516291][ T9823] usb 10-1: config 0 descriptor??
[  555.574053][ T9823] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  555.581253][ T5627] Bluetooth: hci2: command tx timeout
[  555.746046][ T5711] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  555.746084][ T5711] em28xx 9-1:0.0: board has no eeprom
[  555.939927][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19
[  556.158865][ T9823] pwc: recv_control_msg error -71 req 02 val 2b00
[  556.166028][ T9823] pwc: recv_control_msg error -71 req 02 val 2700
[  556.173572][ T9823] pwc: recv_control_msg error -71 req 04 val 1600
[  556.175543][ T9823] pwc: recv_control_msg error -71 req 02 val 2c00
[  556.177501][ T9823] pwc: recv_control_msg error -71 req 04 val 1000
[  556.178390][ T9823] pwc: recv_control_msg error -71 req 04 val 1300
[  556.179147][ T9823] pwc: recv_control_msg error -71 req 04 val 1400
[  556.180692][ T9823] pwc: recv_control_msg error -71 req 02 val 2000
[  556.186251][ T9823] pwc: recv_control_msg error -71 req 02 val 2100
[  556.189297][ T9823] pwc: recv_control_msg error -71 req 06 val 0600
[  556.195682][ T9823] pwc: recv_control_msg error -71 req 04 val 1500
[  556.208224][ T9823] pwc: recv_control_msg error -71 req 02 val 2500
[  556.210380][ T9823] pwc: recv_control_msg error -71 req 02 val 2400
[  556.213457][ T9823] pwc: recv_control_msg error -71 req 02 val 2600
[  556.213901][ T9823] pwc: recv_control_msg error -71 req 02 val 2900
[  556.215916][ T9823] pwc: recv_control_msg error -71 req 02 val 2800
[  556.217581][ T9823] pwc: recv_control_msg error -71 req 04 val 1100
[  556.231107][ T9823] pwc: recv_control_msg error -71 req 04 val 1200
[  556.236670][ T9823] pwc: Failed to power off camera (-71)
[  556.266286][ T9823] pwc: Registered as video103.
[  556.301526][ T9823] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input73
[  556.339434][ T9833] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  556.342837][ T9823] usb 10-1: USB disconnect, device number 33
[  556.499411][ T9833] usb 6-1: Using ep0 maxpacket: 32
[  556.503596][ T9833] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  556.524862][ T9833] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  556.524918][ T9833] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  556.524948][ T9833] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  556.524986][ T9833] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  556.585755][ T9833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.585813][ T9833] usb 6-1: Product: syz
[  556.585833][ T9833] usb 6-1: Manufacturer: syz
[  556.585848][ T9833] usb 6-1: SerialNumber: syz
[  556.671628][    C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  556.728061][ T9833] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input74
[  556.899212][T14584] em28xx 9-1:0.0: reading from i2c device at 0xe failed (error=-5)
[  556.929491][ T5711] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  556.929554][ T5711] em28xx 9-1:0.0: dvb set to bulk mode.
[  556.938578][ T9831] em28xx 9-1:0.0: Binding DVB extension
[  556.949692][ T9833] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  556.949715][ T9833]  (id 0x00)
[  557.020427][ T5711] usb 9-1: USB disconnect, device number 28
[  557.023445][ T5711] em28xx 9-1:0.0: Disconnecting em28xx
[  557.115063][T14447] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  557.150143][T14447] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  557.170421][T14447] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  557.233125][T14447] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  557.256549][T14447] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  557.300237][T14447] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  557.301499][T14447] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  557.340759][ T9833] rc_core: IR keymap rc-imon-pad not found
[  557.340783][ T9833] Registered IR keymap rc-empty
[  557.340872][ T9833] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  557.340896][ T9833] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  557.387220][ T9831] em28xx 9-1:0.0: Registering input extension
[  557.387440][ T5711] em28xx 9-1:0.0: Closing input extension
[  557.388207][T14447] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  557.410791][ T9833] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[  557.418195][ T9833] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input75
[  557.452046][ T9833] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:47> initialized
[  557.607076][ T5711] em28xx: Freeing device
[  558.005172][T14447] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.192520][T14447] 8021q: adding VLAN 0 to HW filter on device team0
[  558.235360][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.235476][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.259078][T14654] syzkaller0: entered promiscuous mode
[  558.259107][T14654] syzkaller0: entered allmulticast mode
[  558.287475][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.287556][ T6092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.741698][T14447] 8021q: adding VLAN 0 to HW filter on device batadv0
[  558.824653][T14447] veth0_vlan: entered promiscuous mode
[  558.835937][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20
[  558.838887][T14662] send_packet: 52 callbacks suppressed
[  558.838908][T14662] imon:send_packet: packet tx failed (-71)
[  558.848958][ T9823] usb 6-1: USB disconnect, device number 47
[  558.859062][T14662] vfd_write: 52 callbacks suppressed
[  558.859086][T14662] imon:vfd_write: send packet #3 failed
[  558.880535][T14447] veth1_vlan: entered promiscuous mode
[  558.949212][T14447] veth0_macvtap: entered promiscuous mode
[  558.967445][T14447] veth1_macvtap: entered promiscuous mode
[  558.996717][T14447] batman_adv: batadv0: Interface activated: batadv_slave_0
[  559.012274][ T9822] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  559.043019][T14447] batman_adv: batadv0: Interface activated: batadv_slave_1
[  559.104366][ T6109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.105079][ T6109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.119455][ T6092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.123536][ T6139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.160649][ T9822] usb 9-1: Using ep0 maxpacket: 8
[  559.164667][ T9822] usb 9-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1
[  559.166014][ T9822] usb 9-1: config 53 has an invalid interface number: 101 but max is 0
[  559.166046][ T9822] usb 9-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config
[  559.166069][ T9822] usb 9-1: config 53 has no interface number 0
[  559.166111][ T9822] usb 9-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[  559.166141][ T9822] usb 9-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024
[  559.166171][ T9822] usb 9-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  559.166198][ T9822] usb 9-1: config 53 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  559.197031][ T9822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.197061][ T9822] usb 9-1: Product: syz
[  559.197079][ T9822] usb 9-1: Manufacturer: syz
[  559.197141][ T9822] usb 9-1: SerialNumber: syz
[  559.291694][T14663] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  559.573510][ T6140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.573535][ T6140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.775788][ T9822] kvaser_usb 9-1:53.101: error -ENODEV: Cannot get usb endpoint(s)
[  559.816842][ T6142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.816867][ T6142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.831310][ T9822] usb 9-1: USB disconnect, device number 29
[  559.997357][T14678] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  559.997388][T14678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  559.997475][T14678] vhci_hcd vhci_hcd.0: Device attached
[  560.054997][T14678] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10)
[  560.055028][T14678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  560.055079][T14678] vhci_hcd vhci_hcd.0: Device attached
[  560.094775][T14678] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12)
[  560.094808][T14678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  560.094863][T14678] vhci_hcd vhci_hcd.0: Device attached
[  560.188320][T14680] vhci_hcd: connection closed
[  560.188616][T14683] vhci_hcd: connection closed
[  560.192069][T14685] vhci_hcd: connection closed
[  560.193056][ T6140] vhci_hcd vhci_hcd.5: stop threads
[  560.193135][ T6140] vhci_hcd vhci_hcd.5: release socket
[  560.206572][ T6140] vhci_hcd vhci_hcd.5: disconnect device
[  560.209905][ T8141] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  560.213040][ T6140] vhci_hcd vhci_hcd.5: stop threads
[  560.213102][ T6140] vhci_hcd vhci_hcd.5: release socket
[  560.213231][ T6140] vhci_hcd vhci_hcd.5: disconnect device
[  560.215882][ T6140] vhci_hcd vhci_hcd.5: stop threads
[  560.215933][ T6140] vhci_hcd vhci_hcd.5: release socket
[  560.216065][ T6140] vhci_hcd vhci_hcd.5: disconnect device
[  560.301650][T14688] netlink: 'syz.1.2418': attribute type 1 has an invalid length.
[  560.303373][T14688] 8021q: VLANs not supported on tunl0
[  560.530986][   T31] audit: type=1326 audit(1791740994.489:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14689 comm="syz.6.2468" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  560.531252][   T31] audit: type=1326 audit(1791740994.489:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14689 comm="syz.6.2468" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  560.532086][   T31] audit: type=1326 audit(1791740994.489:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14689 comm="syz.6.2468" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  560.532328][   T31] audit: type=1326 audit(1791740994.489:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14689 comm="syz.6.2468" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  560.534733][   T31] audit: type=1326 audit(1791740994.489:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14689 comm="syz.6.2468" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  561.312432][ T5711] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  561.480481][ T5711] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  561.481623][ T5711] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  561.481674][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.576822][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'.
[  561.606745][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'.
[  561.731771][ T5711] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device
[  561.874894][ T5711] wwan wwan0: port wwan0qmi0 attached
[  561.976661][    C0] wdm_int_callback: 495 callbacks suppressed
[  561.976692][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.976712][    C0] wdm_int_callback: 495 callbacks suppressed
[  561.976729][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  561.976944][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.976971][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  561.977191][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.977216][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  561.977426][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.977448][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  561.977649][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.977672][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  561.977879][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.977902][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  561.978115][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.978138][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  561.978354][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.978377][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  561.978601][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.978624][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  561.978853][    C0] qmi_wwan 6-1:1.0: nonzero urb status received: -71
[  561.978874][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes
[  562.170385][ T5711] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 62:a7:c9:a4:15:84
[  562.176005][ T5711] usb 6-1: USB disconnect, device number 48
[  562.176102][    C0] qmi_wwan 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  562.209633][ T5711] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device
[  562.213262][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'.
[  562.362950][ T5711] wwan wwan0: port wwan0qmi0 disconnected
[  563.022704][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  563.022774][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  563.668316][   T31] audit: type=1326 audit(1791740997.619:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.8.2484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  563.669414][   T31] audit: type=1326 audit(1791740997.619:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.8.2484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  563.715006][T14777] 0: reclassify loop, rule prio 0, protocol 03
[  563.728939][   T31] audit: type=1326 audit(1791740997.679:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.8.2484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  563.729212][   T31] audit: type=1326 audit(1791740997.679:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.8.2484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  563.754870][   T31] audit: type=1326 audit(1791740997.709:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.8.2484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  564.344378][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2485'.
[  565.911889][   T31] kauditd_printk_skb: 3 callbacks suppressed
[  565.911910][   T31] audit: type=1326 audit(1791740999.869:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.8.2492" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  565.912715][   T31] audit: type=1326 audit(1791740999.869:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.8.2492" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  565.975944][   T31] audit: type=1326 audit(1791740999.919:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.8.2492" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  565.976006][   T31] audit: type=1326 audit(1791740999.929:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.8.2492" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  566.028576][   T31] audit: type=1326 audit(1791740999.969:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.8.2492" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  566.692145][ T5711] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  566.855568][ T5711] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  566.856784][ T5711] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  566.856835][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.991747][T14835] syzkaller0: entered promiscuous mode
[  566.991772][T14835] syzkaller0: entered allmulticast mode
[  567.171919][ T5711] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device
[  567.222683][ T5711] wwan wwan0: port wwan0qmi0 attached
[  567.417207][    C0] wdm_int_callback: 224 callbacks suppressed
[  567.417237][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.417255][    C0] wdm_int_callback: 224 callbacks suppressed
[  567.417271][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.417481][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.417500][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.417722][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.417740][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.417936][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.417957][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.418169][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.418190][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.418403][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.418425][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.418635][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.418660][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.418873][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.418897][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.419108][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.419132][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.419424][    C0] qmi_wwan 7-1:1.0: nonzero urb status received: -71
[  567.419448][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes
[  567.632105][ T5711] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, 9a:06:4a:43:39:65
[  567.651668][ T5711] usb 7-1: USB disconnect, device number 42
[  567.651798][    C0] qmi_wwan 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  567.695245][ T5711] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device
[  567.763368][ T5711] wwan wwan0: port wwan0qmi0 disconnected
[  568.388190][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2501'.
[  570.066924][T14896] binder: 14894:14896 ioctl 4018620d 0 returned -22
[  570.204517][T14863] vxlan0: left allmulticast mode
[  570.329466][ T6139] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.329506][ T6139] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.329550][ T6116] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.329579][ T6116] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.329617][ T6116] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.329645][ T6116] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.329682][ T6116] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.329711][ T6116] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.424971][   T31] audit: type=1326 audit(1791741004.379:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.2509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  570.425140][   T31] audit: type=1326 audit(1791741004.379:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.2509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  570.426639][   T31] audit: type=1326 audit(1791741004.379:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.2509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  570.426778][   T31] audit: type=1326 audit(1791741004.379:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.2509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  570.426954][   T31] audit: type=1326 audit(1791741004.379:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.2509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  571.087686][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2512'.
[  571.115138][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2512'.
[  571.143254][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2512'.
[  572.773798][T14967] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2524'.
[  573.831026][ T5697] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  573.990202][ T5697] usb 2-1: Using ep0 maxpacket: 32
[  573.991577][ T5697] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  573.992997][ T5697] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  573.993025][ T5697] usb 2-1: config 0 has no interface number 0
[  573.993077][ T5697] usb 2-1: config 0 interface 184 has no altsetting 0
[  573.995106][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.995126][ T5697] usb 2-1: Product: syz
[  573.995137][ T5697] usb 2-1: Manufacturer: syz
[  573.995148][ T5697] usb 2-1: SerialNumber: syz
[  574.075218][ T5697] usb 2-1: config 0 descriptor??
[  574.484222][ T8141] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  574.633175][ T8141] usb 7-1: Using ep0 maxpacket: 32
[  574.636419][ T8141] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  574.637920][ T8141] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  574.637974][ T8141] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  574.638005][ T8141] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  574.638034][ T8141] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  574.653833][ T8141] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.653924][ T8141] usb 7-1: Product: syz
[  574.653966][ T8141] usb 7-1: Manufacturer: syz
[  574.654007][ T8141] usb 7-1: SerialNumber: syz
[  574.734121][ T5697] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  574.734161][ T5697] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  574.775128][    C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  574.802274][ T8141] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input77
[  575.009886][ T8141] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  575.009913][ T8141]  (id 0x00)
[  575.200474][ T8141] rc_core: IR keymap rc-imon-pad not found
[  575.200498][ T8141] Registered IR keymap rc-empty
[  575.200587][ T8141] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  575.200609][ T8141] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  575.226068][ T8141] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[  575.266511][ T8141] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input78
[  575.311269][ T8141] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:43> initialized
[  575.421117][   T25] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  575.569624][   T25] usb 6-1: Using ep0 maxpacket: 32
[  575.573938][   T25] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32
[  575.576950][   T25] usb 6-1: config 0 has an invalid interface number: 86 but max is 0
[  575.576983][   T25] usb 6-1: config 0 has no interface number 0
[  575.577030][   T25] usb 6-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  575.577062][   T25] usb 6-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid maxpacket 24929, setting to 1024
[  575.577095][   T25] usb 6-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1024
[  575.577124][   T25] usb 6-1: config 0 interface 86 has no altsetting 0
[  575.610163][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.610287][   T25] usb 6-1: Product: syz
[  575.610342][   T25] usb 6-1: Manufacturer: syz
[  575.610389][   T25] usb 6-1: SerialNumber: syz
[  575.659649][   T25] usb 6-1: config 0 descriptor??
[  575.681336][T15002] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  575.681613][T15002] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  575.965970][T15016] send_packet: 51 callbacks suppressed
[  575.965997][T15016] imon:send_packet: task interrupted
[  575.966011][T15016] imon:send_packet: packet tx failed (-512)
[  575.966095][T15016] imon:vfd_write: send packet #1 failed
[  575.993805][   T25] ljca 6-1:0.86: probe with driver ljca failed with error -71
[  576.030411][   T25] usb 6-1: USB disconnect, device number 49
[  576.106814][ T5711] usb 7-1: USB disconnect, device number 43
[  576.221733][ T5697] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  576.221774][ T5697] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  576.221799][ T5697] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  576.224851][ T5697] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  576.286597][ T5697] usb 2-1: USB disconnect, device number 15
[  576.924028][ T5697] hid_parser_main: 5 callbacks suppressed
[  576.924055][ T5697] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  576.993950][ T5697] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  577.316353][T15043] fido_id[15043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  579.580251][ T5697] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  579.759373][ T5697] usb 7-1: Using ep0 maxpacket: 32
[  579.760229][ T5697] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  579.761951][ T5697] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  579.761999][ T5697] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  579.762021][ T5697] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  579.762041][ T5697] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  579.765976][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.765997][ T5697] usb 7-1: Product: syz
[  579.766029][ T5697] usb 7-1: Manufacturer: syz
[  579.766046][ T5697] usb 7-1: SerialNumber: syz
[  579.861486][    C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  579.878989][ T5697] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input79
[  579.962409][T15076] binder: 15075:15076 ioctl c0306201 80000180 returned -14
[  580.083475][ T5697] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  580.083503][ T5697]  (id 0x00)
[  580.169720][ T5697] rc_core: IR keymap rc-imon-pad not found
[  580.169741][ T5697] Registered IR keymap rc-empty
[  580.169823][ T5697] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  580.169843][ T5697] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  580.283669][ T5697] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[  580.288932][ T5697] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input80
[  580.315681][ T5697] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:44> initialized
[  580.482405][T15071] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  580.482522][T15071] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  580.483234][T15070] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  580.483257][T15070] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  580.601939][T15071] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  580.602076][T15071] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  580.697636][T15070] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  580.697666][T15070] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  580.786350][T15071] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  580.786429][T15071] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  580.809202][T15070] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  580.809228][T15070] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  580.877640][T15071] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  580.899076][T15070] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  580.899105][T15070] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  581.342915][T15114] netlink: 'syz.8.2553': attribute type 1 has an invalid length.
[  581.383031][T15114] bond2: entered promiscuous mode
[  581.383529][T15114] 8021q: adding VLAN 0 to HW filter on device bond2
[  581.436104][T15114] 8021q: adding VLAN 0 to HW filter on device bond2
[  581.436656][T15114] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  581.436683][T15114] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  581.471303][T15114] bond2: (slave ip6gre1): making interface the new active one
[  581.471334][T15114] ip6gre1: entered promiscuous mode
[  581.475169][T15114] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  581.579190][T15122] netlink: 'syz.5.2556': attribute type 1 has an invalid length.
[  581.716814][ T5697] usb 7-1: USB disconnect, device number 44
[  581.734286][T15125] imon:send_packet: error submitting urb(-19)
[  581.751169][T15125] imon:vfd_write: send packet #3 failed
[  581.856192][T15127] bond2: (slave veth5): Enslaving as an active interface with a down link
[  581.901707][T15122] vlan3: entered allmulticast mode
[  581.901727][T15122] bond2: entered allmulticast mode
[  581.905402][T15122] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  581.956386][T15124] syzkaller0: entered promiscuous mode
[  581.956413][T15124] syzkaller0: entered allmulticast mode
[  582.140107][ T9831] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  582.289503][ T9831] usb 10-1: Using ep0 maxpacket: 8
[  582.291430][ T9831] usb 10-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c
[  582.292613][ T9831] usb 10-1: config 0 has too many interfaces: 217, using maximum allowed: 32
[  582.292641][ T9831] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 217
[  582.295051][ T9831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.295080][ T9831] usb 10-1: Product: syz
[  582.295097][ T9831] usb 10-1: Manufacturer: syz
[  582.295114][ T9831] usb 10-1: SerialNumber: syz
[  582.298400][ T9831] usb 10-1: config 0 descriptor??
[  582.363533][ T5697] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[  582.409495][   T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  582.512029][ T5697] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  582.513087][ T5697] usb 6-1: config 0 has no interfaces?
[  582.518070][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.518102][ T5697] usb 6-1: Product: syz
[  582.518120][ T5697] usb 6-1: Manufacturer: syz
[  582.518138][ T5697] usb 6-1: SerialNumber: syz
[  582.559733][   T25] usb 2-1: Using ep0 maxpacket: 8
[  582.561629][ T5697] usb 6-1: config 0 descriptor??
[  582.562465][   T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  582.566825][   T25] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  582.566857][   T25] usb 2-1: config 0 has no interface number 0
[  582.569270][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.569363][   T25] usb 2-1: Product: syz
[  582.569382][   T25] usb 2-1: Manufacturer: syz
[  582.569451][   T25] usb 2-1: SerialNumber: syz
[  582.639380][   T25] usb 2-1: config 0 descriptor??
[  582.787755][T15143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.797356][T15143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.821722][ T8141] usb 6-1: USB disconnect, device number 50
[  582.983632][T15159] netlink: 'syz.6.2566': attribute type 1 has an invalid length.
[  583.072632][   T25] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  583.074069][   T25] uvcvideo 2-1:0.31: No valid video chain found.
[  583.112890][T15159] bond5: (slave bridge3): making interface the new active one
[  583.175012][T15159] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  583.279832][ T8142] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  583.311259][ T5697] usb 2-1: USB disconnect, device number 16
[  583.350576][T15168] netlink: 'syz.6.2567': attribute type 1 has an invalid length.
[  583.424446][   T25] usb 10-1: USB disconnect, device number 34
[  583.432291][ T8142] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  583.433458][ T8142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.490908][ T8142] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  583.518596][T15168] 8021q: adding VLAN 0 to HW filter on device bond6
[  583.557178][T15171] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  583.577927][T15172] bond6: entered promiscuous mode
[  583.577955][T15172] bond6: entered allmulticast mode
[  584.029569][T15192] vivid-007: disconnect
[  584.856960][T15204] netlink: 'syz.8.2572': attribute type 1 has an invalid length.
[  584.913960][T15206] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2572'.
[  584.945841][T15206] bond3: entered allmulticast mode
[  585.048515][T15189] vivid-007: reconnect
[  585.114705][T15204] bond3: (slave bridge6): making interface the new active one
[  585.114741][T15204] bridge6: entered allmulticast mode
[  585.115631][T15204] bond3: (slave bridge6): Enslaving as an active interface with an up link
[  585.145994][   T25] usb 6-1: USB disconnect, device number 51
[  585.164195][   T25] idmouse 6-1:1.0: disconnected
[  585.317001][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2573'.
[  586.070920][ T9822] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  586.198513][T15229] No fuse device found
[  586.198612][T15229] No fuse device found
[  586.198668][T15229] No fuse device found
[  586.198704][T15229] No fuse device found
[  586.216477][T15229] No fuse device found
[  586.216507][T15229] No fuse device found
[  586.216530][T15229] No fuse device found
[  586.216554][T15229] No fuse device found
[  586.216578][T15229] No fuse device found
[  586.216602][T15229] No fuse device found
[  586.222237][ T9822] usb 2-1: Using ep0 maxpacket: 32
[  586.225605][ T9822] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32
[  586.247340][ T9822] usb 2-1: config 0 has an invalid interface number: 86 but max is 0
[  586.247494][ T9822] usb 2-1: config 0 has no interface number 0
[  586.247629][ T9822] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  586.247708][ T9822] usb 2-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid maxpacket 24929, setting to 1024
[  586.247797][ T9822] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1024
[  586.247876][ T9822] usb 2-1: config 0 interface 86 has no altsetting 0
[  586.318617][ T9822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.318652][ T9822] usb 2-1: Product: syz
[  586.318671][ T9822] usb 2-1: Manufacturer: syz
[  586.318690][ T9822] usb 2-1: SerialNumber: syz
[  586.346817][ T9822] usb 2-1: config 0 descriptor??
[  586.362340][T15223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  586.362460][T15223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  586.612469][ T9822] ljca 2-1:0.86: probe with driver ljca failed with error -71
[  586.633144][ T9822] usb 2-1: USB disconnect, device number 17
[  586.840177][T15240] syzkaller0: entered promiscuous mode
[  586.840204][T15240] syzkaller0: entered allmulticast mode
[  588.851733][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'.
[  589.052234][T15285] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.052928][T15285] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.466547][T15285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  589.516315][T15285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  589.610296][ T9831] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  589.771033][ T9831] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  589.777526][ T9831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  589.777560][ T9831] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  589.777587][ T9831] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  589.831568][ T9831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  589.831601][ T9831] usb 7-1: Product: syz
[  589.831618][ T9831] usb 7-1: Manufacturer: syz
[  589.831637][ T9831] usb 7-1: SerialNumber: syz
[  589.959695][ T6092] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  589.959749][ T6092] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  589.959788][ T6092] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  589.959827][ T6092] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  590.082842][ T9831] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  591.501507][ T5697] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  591.649792][ T5697] usb 9-1: Using ep0 maxpacket: 32
[  591.656206][ T5697] usb 9-1: unable to get BOS descriptor or descriptor too short
[  591.656260][ T5697] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  591.657459][ T5697] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  591.657494][ T5697] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  591.657517][ T5697] usb 9-1: config 14 has no interface number 0
[  591.657537][ T5697] usb 9-1: config 14 has no interface number 1
[  591.657603][ T5697] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  591.657630][ T5697] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  591.657658][ T5697] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  591.657687][ T5697] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  591.657731][ T5697] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  591.657759][ T5697] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  591.657788][ T5697] usb 9-1: config 14 interface 57 has no altsetting 0
[  591.657807][ T5697] usb 9-1: config 14 interface 228 has no altsetting 0
[  591.760229][ T5697] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.760260][ T5697] usb 9-1: Product: syz
[  591.760277][ T5697] usb 9-1: Manufacturer: syz
[  591.760294][ T5697] usb 9-1: SerialNumber: syz
[  592.137079][T15336] netlink: 'syz.9.2606': attribute type 1 has an invalid length.
[  592.272597][ T5697] legousbtower 9-1:14.57: interrupt endpoints not found
[  592.289978][ T9834] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  592.407178][   T25] usb 7-1: USB disconnect, device number 45
[  592.418519][T15345] netlink: 'syz.9.2607': attribute type 11 has an invalid length.
[  592.439615][ T9834] usb 6-1: Using ep0 maxpacket: 8
[  592.440402][ T9834] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  592.441773][ T9834] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  592.442787][   T25] usblp0: removed
[  592.444611][ T9834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.444638][ T9834] usb 6-1: Product: syz
[  592.444655][ T9834] usb 6-1: Manufacturer: syz
[  592.444672][ T9834] usb 6-1: SerialNumber: syz
[  592.535509][ T9834] usb 6-1: config 0 descriptor??
[  592.552659][ T9834] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  592.552774][ T9834] usb 6-1: setting power ON
[  592.577935][ T9834] dvb-usb: bulk message failed: -22 (2/0)
[  592.592888][ T9834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  592.594724][ T9834] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  592.594785][ T9834] usb 6-1: media controller created
[  592.646269][ T9834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  592.678449][ T9834] usb 6-1: selecting invalid altsetting 6
[  592.678478][ T9834] usb 6-1: digital interface selection failed (-22)
[  592.678495][ T9834] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  592.701414][ T9834] usb 6-1: setting power OFF
[  592.701493][ T9834] dvb-usb: bulk message failed: -22 (2/0)
[  592.701513][ T9834] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  592.701556][ T9834] (NULL device *): no alternate interface
[  592.734369][ T5697] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[  592.756023][ T5697] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  592.808149][ T9834] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  592.858393][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2611'.
[  592.968049][T15354] 8021q: adding VLAN 0 to HW filter on device bond2
[  593.128832][T15357] 8021q: adding VLAN 0 to HW filter on device bond2
[  593.141587][T15357] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[  593.144982][T15357] bond2: (slave gre1): Error -95 calling set_mac_address
[  593.251683][T15354] macvlan2: entered promiscuous mode
[  593.251715][T15354] macvlan2: entered allmulticast mode
[  593.252157][T15354] bond2: (slave macvlan2): Error -98 calling set_mac_address
[  593.510631][ T9834] usb 6-1: USB disconnect, device number 52
[  593.580100][    C0] usb 9-1: tower_interrupt_in_callback: usb_submit_urb failed (-1)
[  593.586827][ T9822] usb 9-1: USB disconnect, device number 30
[  593.641875][ T9822] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected
[  594.090480][ T9834] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  594.243464][ T9834] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  594.245639][ T9834] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.245706][ T9834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.282792][ T9834] usb 6-1: config 0 descriptor??
[  594.312237][ T9834] pwc: Askey VC010 type 2 USB webcam detected.
[  594.391410][T15392] netlink: 'syz.6.2618': attribute type 1 has an invalid length.
[  594.486406][T15392] 8021q: adding VLAN 0 to HW filter on device bond7
[  594.573769][T15395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  594.609739][T15395] bond7: (slave batadv0): making interface the new active one
[  594.615726][T15395] bond7: (slave batadv0): Enslaving as an active interface with an up link
[  594.726091][ T9834] pwc: recv_control_msg error -32 req 02 val 2b00
[  594.728110][ T9834] pwc: recv_control_msg error -32 req 02 val 2700
[  594.736134][ T9834] pwc: recv_control_msg error -32 req 02 val 2c00
[  594.749666][ T9834] pwc: recv_control_msg error -32 req 04 val 1000
[  594.759274][ T9834] pwc: recv_control_msg error -32 req 04 val 1300
[  594.764184][ T9834] pwc: recv_control_msg error -32 req 04 val 1400
[  594.765947][ T9834] pwc: recv_control_msg error -32 req 02 val 2000
[  594.768916][ T9834] pwc: recv_control_msg error -32 req 02 val 2100
[  594.842998][T15392] bond7 (unregistering): (slave batadv0): Releasing active interface
[  594.894534][T15392] bond7 (unregistering): Released all slaves
[  595.010623][ T9834] pwc: recv_control_msg error -71 req 02 val 2500
[  595.011075][ T9834] pwc: recv_control_msg error -71 req 02 val 2400
[  595.011533][ T9834] pwc: recv_control_msg error -71 req 02 val 2600
[  595.011969][ T9834] pwc: recv_control_msg error -71 req 02 val 2900
[  595.012409][ T9834] pwc: recv_control_msg error -71 req 02 val 2800
[  595.012999][ T9834] pwc: recv_control_msg error -71 req 04 val 1100
[  595.013433][ T9834] pwc: recv_control_msg error -71 req 04 val 1200
[  595.069802][ T9834] pwc: Registered as video103.
[  595.102582][ T9834] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input81
[  595.130394][ T9834] usb 6-1: USB disconnect, device number 53
[  595.544388][ T6142] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  595.544429][ T6142] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.800691][   T31] kauditd_printk_skb: 25 callbacks suppressed
[  595.800713][   T31] audit: type=1326 audit(1791741029.759:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  595.800762][   T31] audit: type=1326 audit(1791741029.759:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  595.869916][   T31] audit: type=1326 audit(1791741029.829:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  595.869978][   T31] audit: type=1326 audit(1791741029.829:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  595.933271][   T31] audit: type=1326 audit(1791741029.829:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  595.933326][   T31] audit: type=1326 audit(1791741029.839:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  595.933358][   T31] audit: type=1326 audit(1791741029.839:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  595.967955][   T31] audit: type=1326 audit(1791741029.929:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  595.968153][   T31] audit: type=1326 audit(1791741029.929:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  595.984873][   T31] audit: type=1326 audit(1791741029.929:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.5.2622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf748f0ec code=0x7ffc0000
[  596.116380][ T6142] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  596.116422][ T6142] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.405285][ T6142] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  596.405328][ T6142] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.584941][ T6142] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  596.587198][ T6142] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.972695][ T5697] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  596.994250][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  597.015055][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  597.028701][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  597.047007][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  597.047655][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  597.083793][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  597.137466][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  597.137947][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  597.138972][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  597.167794][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  597.179584][ T5697] usb 2-1: Using ep0 maxpacket: 32
[  597.181850][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short
[  597.181892][ T5697] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  597.184372][ T5697] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[  597.184399][ T5697] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[  597.184419][ T5697] usb 2-1: config 14 has no interface number 0
[  597.184437][ T5697] usb 2-1: config 14 has no interface number 1
[  597.184491][ T5697] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  597.184515][ T5697] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  597.184543][ T5697] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  597.184569][ T5697] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  597.184595][ T5697] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  597.184622][ T5697] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  597.184651][ T5697] usb 2-1: config 14 interface 57 has no altsetting 0
[  597.184670][ T5697] usb 2-1: config 14 interface 228 has no altsetting 0
[  597.338738][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.338770][ T5697] usb 2-1: Product: syz
[  597.338790][ T5697] usb 2-1: Manufacturer: syz
[  597.338806][ T5697] usb 2-1: SerialNumber: syz
[  597.843434][ T5697] legousbtower 2-1:14.57: interrupt endpoints not found
[  598.280360][ T5697] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[  598.287957][ T5697] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  598.955400][ T6142] bond0 (unregistering): Released all slaves
[  599.109138][ T6142] bond1 (unregistering): (slave veth3): Releasing active interface
[  599.131120][ T8142] usb 2-1: USB disconnect, device number 18
[  599.168281][ T6142] bond1 (unregistering): (slave macvlan0): Releasing active interface
[  599.179581][ T5627] Bluetooth: hci3: command tx timeout
[  599.186231][ T8142] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected
[  599.236792][ T6142] bond1 (unregistering): Released all slaves
[  599.306360][ T6142] bond2 (unregistering): Released all slaves
[  599.687454][ T6142] tipc: Disabling bearer <udp:syz2>
[  599.691489][ T6142] tipc: Disabling bearer <udp:syz0>
[  599.738016][ T6142] tipc: Left network mode
[  599.876447][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9
[  600.588933][T15473] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer.
[  600.637667][T15473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  601.171976][T15428] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.172119][T15428] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.172252][T15428] bridge_slave_0: entered allmulticast mode
[  601.178258][T15428] bridge_slave_0: entered promiscuous mode
[  601.243365][T15428] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.243554][T15428] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.243737][T15428] bridge_slave_1: entered allmulticast mode
[  601.264105][ T5627] Bluetooth: hci3: command tx timeout
[  601.297921][T15428] bridge_slave_1: entered promiscuous mode
[  601.418525][ T6142] hsr_slave_0: left promiscuous mode
[  601.425826][ T6142] hsr_slave_1: left promiscuous mode
[  601.505806][ T6142] veth1_macvtap: left promiscuous mode
[  601.505838][ T6142] veth0_macvtap: left promiscuous mode
[  601.506052][ T6142] veth0_vlan: left promiscuous mode
[  603.142685][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10
[  603.158895][T15428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  603.185423][T15428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.331496][T15428] team0: Port device team_slave_0 added
[  603.340676][ T5627] Bluetooth: hci3: command tx timeout
[  603.353102][T15428] team0: Port device team_slave_1 added
[  603.468944][T15428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.468966][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.468999][T15428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.515084][T15428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.515144][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.515224][T15428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.847584][T15428] hsr_slave_0: entered promiscuous mode
[  603.853288][T15428] hsr_slave_1: entered promiscuous mode
[  603.854075][T15428] debugfs: 'hsr0' already exists in 'hsr'
[  603.854097][T15428] Cannot create hsr debugfs directory
[  603.913957][ T6142] IPVS: stop unused estimator thread 0...
[  604.411137][T15535] loop5: detected capacity change from 0 to 7
[  604.416494][T15535] Dev loop5: unable to read RDB block 7
[  604.416542][T15535]  loop5: AHDI p1 p2 p4
[  604.416568][T15535] loop5: partition table partially beyond EOD, truncated
[  604.416790][T15535] loop5: p1 size 4261412863 extends beyond EOD, truncated
[  604.476536][T15535] loop5: p4 start 3288604672 is beyond EOD, truncated
[  604.675922][T14637] udevd[14637]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  604.954076][T15549] netlink: 'syz.6.2651': attribute type 1 has an invalid length.
[  605.317219][T15554] bond7: (slave veth3): Enslaving as an active interface with a down link
[  605.330020][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11
[  605.363867][T15558] vlan1: entered allmulticast mode
[  605.363892][T15558] bond7: entered allmulticast mode
[  605.365411][T15558] bond7: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  605.420630][ T5627] Bluetooth: hci3: command tx timeout
[  606.393155][T15428] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  606.415672][T15428] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  606.416943][T15428] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  606.440088][T15428] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  606.441412][T15428] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  606.464321][T15428] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  606.467419][T15428] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  606.491041][T15428] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  606.777844][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12
[  606.806316][T15428] 8021q: adding VLAN 0 to HW filter on device bond0
[  606.876754][T15428] 8021q: adding VLAN 0 to HW filter on device team0
[  606.916158][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.916315][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  606.965563][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.965694][ T6116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  607.270218][T15618] syzkaller0: entered promiscuous mode
[  607.270246][T15618] syzkaller0: entered allmulticast mode
[  607.547860][T15428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.770572][T15428] veth0_vlan: entered promiscuous mode
[  607.800319][T15428] veth1_vlan: entered promiscuous mode
[  607.977239][T15428] veth0_macvtap: entered promiscuous mode
[  608.027922][T15428] veth1_macvtap: entered promiscuous mode
[  608.164343][T15428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  608.229013][T15428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  608.301759][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.812836][ T6140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.812862][ T6140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.880930][ T6140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.882875][ T6092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  608.942334][ T6140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.970406][ T6092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.970434][ T6092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.189887][T15654] binder: 15649:15654 ioctl c0306201 80000080 returned -14
[  609.234182][T15654] binder: 15649:15654 ioctl c0306201 80004a40 returned -22
[  609.568638][ T6140] IPVS: starting estimator thread 0...
[  609.670451][T15667] IPVS: using max 25 ests per chain, 60000 per kthread
[  610.465847][T15680] syzkaller0: entered promiscuous mode
[  610.465871][T15680] syzkaller0: entered allmulticast mode
[  610.511002][T15680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  610.530565][T15679] tipc: Resetting bearer <eth:syzkaller0>
[  610.626941][T15679] tipc: Disabling bearer <eth:syzkaller0>
[  611.329569][ T5711] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  611.480347][ T5711] usb 7-1: Using ep0 maxpacket: 32
[  611.481251][ T5711] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  611.484506][ T5711] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  611.484537][ T5711] usb 7-1: config 0 has no interface number 0
[  611.489780][ T5711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.489810][ T5711] usb 7-1: Product: syz
[  611.489826][ T5711] usb 7-1: Manufacturer: syz
[  611.489842][ T5711] usb 7-1: SerialNumber: syz
[  611.531681][ T5711] usb 7-1: config 0 descriptor??
[  611.994713][ T5711] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  611.994751][ T5711] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  612.370080][T15731] kvm: pic: single mode not supported
[  612.405253][T15731] kvm: pic: single mode not supported
[  612.405342][T15731] kvm: pic: single mode not supported
[  612.405827][T15731] kvm: pic: non byte read
[  612.407867][T15731] kvm: pic: single mode not supported
[  612.407952][T15731] kvm: pic: single mode not supported
[  612.441569][T15731] kvm: pic: non byte read
[  612.441728][T15731] kvm: pic: non byte read
[  612.441878][T15731] kvm: pic: non byte read
[  612.443652][T15731] kvm: pic: non byte read
[  612.443787][T15731] kvm: pic: level sensitive irq not supported
[  612.443865][T15731] kvm: pic: non byte read
[  612.444018][T15731] kvm: pic: non byte read
[  612.444319][T15731] kvm: pic: non byte read
[  613.221176][T15759] syzkaller0: entered promiscuous mode
[  613.221202][T15759] syzkaller0: entered allmulticast mode
[  613.337610][T15763] =======================================================
[  613.337610][T15763] WARNING: The mand mount option has been deprecated and
[  613.337610][T15763]          and is ignored by this kernel. Remove the mand
[  613.337610][T15763]          option from the mount to silence this warning.
[  613.337610][T15763] =======================================================
[  613.645866][ T5711] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[  613.646170][ T5711] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  613.686300][ T5711] usb 7-1: USB disconnect, device number 46
[  613.776079][ T6116] IPVS: starting estimator thread 0...
[  613.860225][T15775] IPVS: using max 38 ests per chain, 91200 per kthread
[  614.173970][   T31] kauditd_printk_skb: 39 callbacks suppressed
[  614.173994][   T31] audit: type=1326 audit(1791741048.129:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ff0ec code=0x7ffc0000
[  614.174045][   T31] audit: type=1326 audit(1791741048.129:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ff0ec code=0x7ffc0000
[  614.242648][   T31] audit: type=1326 audit(1791741048.189:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf73ff0ec code=0x7ffc0000
[  614.242803][   T31] audit: type=1326 audit(1791741048.199:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ff0ec code=0x7ffc0000
[  614.256308][   T31] audit: type=1326 audit(1791741048.199:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ff0ec code=0x7ffc0000
[  614.256461][   T31] audit: type=1326 audit(1791741048.209:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf715762b code=0x7ffc0000
[  614.332043][   T31] audit: type=1326 audit(1791741048.269:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ff0ec code=0x7ffc0000
[  614.332279][   T31] audit: type=1326 audit(1791741048.279:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ff0ec code=0x7ffc0000
[  614.381056][   T31] audit: type=1326 audit(1791741048.339:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ff0ec code=0x7ffc0000
[  614.386545][   T31] audit: type=1326 audit(1791741048.339:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ff0ec code=0x7ffc0000
[  614.599599][ T5711] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  614.749785][ T5711] usb 1-1: Using ep0 maxpacket: 32
[  614.753309][ T5711] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb
[  614.760348][ T5711] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  614.760379][ T5711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  614.760401][ T5711] usb 1-1: config 0 has no interface number 0
[  614.760449][ T5711] usb 1-1: config 0 interface 8 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  614.760480][ T5711] usb 1-1: config 0 interface 8 has no altsetting 0
[  614.830515][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.830547][ T5711] usb 1-1: Product: syz
[  614.830566][ T5711] usb 1-1: Manufacturer: syz
[  614.830582][ T5711] usb 1-1: SerialNumber: syz
[  614.871582][ T5711] usb 1-1: config 0 descriptor??
[  614.885361][ T9831] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  615.049258][ T9831] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  615.063611][ T9831] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7
[  615.093459][ T9831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.093494][ T9831] usb 7-1: Product: syz
[  615.093512][ T9831] usb 7-1: Manufacturer: syz
[  615.093582][ T9831] usb 7-1: SerialNumber: syz
[  615.328551][ T5711] ath6kl: Failed to submit usb control message: -71
[  615.328636][ T5711] ath6kl: unable to send the bmi data to the device: -71
[  615.328654][ T5711] ath6kl: Unable to send get target info: -71
[  615.427629][ T5711] ath6kl: Failed to init ath6kl core: -71
[  615.428341][ T5711] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71
[  615.502922][ T5711] usb 1-1: USB disconnect, device number 11
[  615.765864][ T9831] usb 7-1: 1:1 : format type 0 is detected, processed as PCM
[  615.765991][ T9831] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  615.771181][ T9831] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  616.038671][ T9831] usb 7-1: USB disconnect, device number 47
[  616.161177][T15831] binder: 15829:15831 ioctl c0306201 80000680 returned -14
[  616.217144][T14637] udevd[14637]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  616.515415][T15837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.409701][ T8142] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  617.559447][ T8142] usb 6-1: Using ep0 maxpacket: 32
[  617.560187][ T8142] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  617.561211][ T8142] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  617.561239][ T8142] usb 6-1: config 0 has no interface number 0
[  617.561284][ T8142] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  617.564116][ T8142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.564146][ T8142] usb 6-1: Product: syz
[  617.564163][ T8142] usb 6-1: Manufacturer: syz
[  617.564180][ T8142] usb 6-1: SerialNumber: syz
[  617.638389][ T8142] usb 6-1: config 0 descriptor??
[  617.644040][T15850] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  617.904416][T15850] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  617.956095][T15872] netlink: 'syz.6.2717': attribute type 1 has an invalid length.
[  618.020904][T15872] 8021q: adding VLAN 0 to HW filter on device bond8
[  618.147569][T15876] bond8: (slave gretap2): Enslaving as a backup interface with an up link
[  618.167393][   T59] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  618.289428][ T6109] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  618.999797][ T8141] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  619.161415][ T8141] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  619.162968][ T8141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  619.163039][ T8141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  619.166810][ T8141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  619.166835][ T8141] usb 2-1: Product: syz
[  619.166851][ T8141] usb 2-1: Manufacturer: syz
[  619.235787][ T8141] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  619.776731][T15909] bridge_slave_0: left allmulticast mode
[  619.776763][T15909] bridge_slave_0: left promiscuous mode
[  619.777050][T15909] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.810582][T15909] bridge_slave_1: left allmulticast mode
[  619.810616][T15909] bridge_slave_1: left promiscuous mode
[  619.810916][T15909] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.954461][ T8142] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  619.954496][ T8142] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  619.954783][ T8142] asix 6-1:0.188: probe with driver asix failed with error -71
[  620.000495][ T8142] usb 6-1: USB disconnect, device number 54
[  620.987261][T15938] syzkaller0: entered promiscuous mode
[  620.987289][T15938] syzkaller0: entered allmulticast mode
[  621.509043][ T8141] usb 2-1: Moschip 7840/7820 USB Serial Driver converter now attached to ttyUSB0
[  621.564396][ T8141] usb 2-1: USB disconnect, device number 19
[  621.623936][ T8141] mos7840 ttyUSB0: Moschip 7840/7820 USB Serial Driver converter now disconnected from ttyUSB0
[  621.624699][ T8141] mos7840 2-1:1.0: device disconnected
[  622.965641][T15991] netlink: 'syz.6.2741': attribute type 4 has an invalid length.
[  622.993546][T15991] netlink: 'syz.6.2741': attribute type 4 has an invalid length.
[  623.260865][ T5711] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  623.280621][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2742'.
[  623.280647][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2742'.
[  623.372615][T16000] 8021q: adding VLAN 0 to HW filter on device bond3
[  623.420236][ T5711] usb 7-1: unable to get BOS descriptor or descriptor too short
[  623.420293][ T5711] usb 7-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=77.4a
[  623.424625][ T5711] usb 7-1: config 174 has an invalid interface number: 153 but max is 0
[  623.424655][ T5711] usb 7-1: config 174 has no interface number 0
[  623.424697][ T5711] usb 7-1: config 174 interface 153 has no altsetting 0
[  623.471223][ T5711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.471254][ T5711] usb 7-1: Product: syz
[  623.471271][ T5711] usb 7-1: Manufacturer: syz
[  623.471288][ T5711] usb 7-1: SerialNumber: syz
[  623.556535][   T59] bond0: (slave bridge5): link status down again after 0 ms
[  623.587796][   T59] bond0: (slave bridge5): link status down again after 0 ms
[  623.601494][   T59] bond0: (slave bridge5): link status down again after 0 ms
[  623.624776][   T13] bond0: (slave bridge5): link status down again after 0 ms
[  623.633759][T16002] 8021q: adding VLAN 0 to HW filter on device bond0
[  623.642736][   T13] bond0: (slave bridge5): link status down again after 0 ms
[  623.661142][   T59] bond0: (slave bridge5): link status down again after 0 ms
[  623.682724][   T59] bond0: (slave bridge5): link status down again after 0 ms
[  623.685305][T16002] bond3: (slave bond0): Enslaving as an active interface with a down link
[  623.703928][ T6109] bond0: (slave bridge5): link status down again after 0 ms
[  623.812073][ T6109] bond0: (slave bridge5): link status definitely down, disabling slave
[  623.893702][ T5711] sierra 7-1:174.153: Sierra USB modem converter detected
[  623.930769][ T5711] usb 7-1: USB disconnect, device number 48
[  623.931802][ T5711] sierra 7-1:174.153: device disconnected
[  624.175868][T16018] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=8 (8 ns) > initial count (2 ns). Using initial count to start timer.
[  624.269795][   T31] kauditd_printk_skb: 48 callbacks suppressed
[  624.269817][   T31] audit: type=1326 audit(1791741058.219:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16021 comm="syz.8.2746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  624.273317][   T31] audit: type=1326 audit(1791741058.219:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16021 comm="syz.8.2746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  624.289057][   T31] audit: type=1326 audit(1791741058.229:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16021 comm="syz.8.2746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  624.289215][   T31] audit: type=1326 audit(1791741058.229:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16021 comm="syz.8.2746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  624.312023][   T31] audit: type=1326 audit(1791741058.259:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16021 comm="syz.8.2746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f080ec code=0x7ffc0000
[  624.473689][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  624.473769][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  624.819676][ T9833] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  624.953334][T16044] syzkaller1: entered promiscuous mode
[  624.953464][T16044] syzkaller1: entered allmulticast mode
[  624.973588][ T9833] usb 6-1: Using ep0 maxpacket: 32
[  624.975003][ T9833] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  624.978713][ T9833] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  624.978748][ T9833] usb 6-1: config 0 has no interface number 0
[  624.978807][ T9833] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  625.036829][ T9833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.036862][ T9833] usb 6-1: Product: syz
[  625.036881][ T9833] usb 6-1: Manufacturer: syz
[  625.036898][ T9833] usb 6-1: SerialNumber: syz
[  625.053602][ T9833] usb 6-1: config 0 descriptor??
[  625.065482][T16035] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  625.308472][T16035] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  625.975828][   T31] audit: type=1800 audit(1791741059.929:879): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2752" name="file1" dev="ramfs" ino=73035 res=0 errno=0
[  627.092784][T16074] bond0: (slave bond_slave_0): Releasing backup interface
[  627.183631][T16074] bond0: (slave bond_slave_1): Releasing backup interface
[  627.282726][T16074] team0: Port device team_slave_0 removed
[  627.347271][T16074] team0: Port device team_slave_1 removed
[  627.367440][T16074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  627.367470][T16074] batman_adv: batadv0: Removing interface: batadv_slave_0
[  627.383995][ T9833] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  627.384085][ T9833] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  627.384904][ T9833] asix 6-1:0.188: probe with driver asix failed with error -71
[  627.431669][T16074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  627.431690][T16074] batman_adv: batadv0: Removing interface: batadv_slave_1
[  627.455218][ T9833] usb 6-1: USB disconnect, device number 55
[  627.497702][ T9831] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  627.625879][T16081] kvm [16080]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000
[  627.649553][ T9831] usb 2-1: Using ep0 maxpacket: 8
[  627.653628][ T9831] usb 2-1: unable to get BOS descriptor or descriptor too short
[  627.653684][ T9831] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  627.655340][ T9831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  627.655367][ T9831] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  627.666684][ T9831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.666767][ T9831] usb 2-1: Product: syz
[  627.666808][ T9831] usb 2-1: Manufacturer: syz
[  627.666849][ T9831] usb 2-1: SerialNumber: syz
[  627.817693][T16074] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  628.189852][   T25] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  628.359498][   T25] usb 9-1: Using ep0 maxpacket: 16
[  628.360355][   T25] usb 9-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  628.361846][   T25] usb 9-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30
[  628.361891][   T25] usb 9-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  628.361921][   T25] usb 9-1: config 0 interface 0 has no altsetting 0
[  628.361958][   T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.414400][   T25] usb 9-1: config 0 descriptor??
[  628.891367][   T25] elecom 0003:056E:010C.0028: ignoring exceeding usage max
[  628.893061][   T25] elecom 0003:056E:010C.0028: ignoring exceeding usage max
[  628.893085][   T25] elecom 0003:056E:010C.0028: usage index exceeded
[  628.893102][   T25] elecom 0003:056E:010C.0028: item 0 2 2 2 parsing failed
[  628.893939][   T25] elecom 0003:056E:010C.0028: probe with driver elecom failed with error -22
[  629.175741][T16113] tipc: Failed to remove unknown binding: 66,0,0/3523414726:2031891183/2031891185
[  629.175781][T16113] tipc: Failed to remove unknown binding: 66,0,0/3523414726:2031891183/2031891184
[  629.176528][T16113] tipc: Failed to remove unknown binding: 66,0,0/3523414726:2031891183/2031891185
[  629.176843][T16113] tipc: Failed to remove unknown binding: 66,0,0/3523414726:2031891183/2031891184
[  630.453406][ T8142] usb 2-1: USB disconnect, device number 20
[  630.835743][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2771'.
[  630.835769][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2771'.
[  630.936593][T16145] 8021q: adding VLAN 0 to HW filter on device bond9
[  631.288529][ T9834] usb 9-1: USB disconnect, device number 31
[  631.366213][   T31] audit: type=1326 audit(1791741065.319:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000
[  631.366272][   T31] audit: type=1326 audit(1791741065.319:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000
[  631.447531][   T31] audit: type=1326 audit(1791741065.399:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf73ef0ec code=0x7ffc0000
[  631.447595][   T31] audit: type=1326 audit(1791741065.399:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000
[  631.447643][   T31] audit: type=1326 audit(1791741065.399:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x7ffc0000
[  631.476370][   T31] audit: type=1326 audit(1791741065.399:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf714762b code=0x7ffc0000
[  631.476550][   T31] audit: type=1326 audit(1791741065.399:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ef0ec code=0x7ffc0000
[  631.476677][   T31] audit: type=1326 audit(1791741065.399:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ef0ec code=0x7ffc0000
[  631.614697][   T31] audit: type=1326 audit(1791741065.569:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ef0ec code=0x7ffc0000
[  631.616514][   T31] audit: type=1326 audit(1791741065.569:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ef0ec code=0x7ffc0000
[  631.849409][ T8142] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  631.999390][ T8142] usb 2-1: Using ep0 maxpacket: 32
[  632.000287][ T8142] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb
[  632.004991][ T8142] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  632.005019][ T8142] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.005040][ T8142] usb 2-1: config 0 has no interface number 0
[  632.005082][ T8142] usb 2-1: config 0 interface 8 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  632.005112][ T8142] usb 2-1: config 0 interface 8 has no altsetting 0
[  632.063038][ T8142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.063069][ T8142] usb 2-1: Product: syz
[  632.063085][ T8142] usb 2-1: Manufacturer: syz
[  632.063101][ T8142] usb 2-1: SerialNumber: syz
[  632.096975][ T8142] usb 2-1: config 0 descriptor??
[  632.431532][ T8142] ath6kl: Failed to submit usb control message: -71
[  632.431597][ T8142] ath6kl: unable to send the bmi data to the device: -71
[  632.431618][ T8142] ath6kl: Unable to send get target info: -71
[  632.468417][ T8142] ath6kl: Failed to init ath6kl core: -71
[  632.494222][ T8142] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71
[  632.544840][ T8142] usb 2-1: USB disconnect, device number 21
[  633.385798][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'.
[  633.385835][T16205] bond0: option arp_all_targets: invalid value (172)
[  633.977313][ T6109] IPVS: starting estimator thread 0...
[  634.060948][T16227] IPVS: using max 26 ests per chain, 62400 per kthread
[  634.089366][ T9820] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  634.241450][ T9820] usb 7-1: Using ep0 maxpacket: 32
[  634.242186][ T9820] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  634.267295][ T9820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.267327][ T9820] usb 7-1: Product: syz
[  634.267342][ T9820] usb 7-1: Manufacturer: syz
[  634.267357][ T9820] usb 7-1: SerialNumber: syz
[  634.299701][ T9820] usb 7-1: config 0 descriptor??
[  634.935744][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2791'.
[  634.951054][T16222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.961579][T16222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.998040][ T9820] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  635.141367][ T9820] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71
[  635.161974][ T9820] usb 7-1: USB disconnect, device number 49
[  635.417317][T16243] bond2: entered allmulticast mode
[  635.417347][T16243] ip6gre1: entered allmulticast mode
[  635.449370][T16243] pimreg: entered allmulticast mode
[  635.455186][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2797'.
[  635.574262][T16242] bond2: left allmulticast mode
[  635.574289][T16242] ip6gre1: left allmulticast mode
[  635.595984][T16242] pimreg: left allmulticast mode
[  635.879946][ T6107] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  635.881692][ T6107] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  635.881771][ T6107] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  635.881810][ T6107] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  637.427605][T16261] syzkaller0: entered promiscuous mode
[  637.427631][T16261] syzkaller0: entered allmulticast mode
[  637.516111][   T31] kauditd_printk_skb: 48 callbacks suppressed
[  637.516134][   T31] audit: type=1800 audit(1791741071.459:938): pid=16252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2800" name="file1" dev="ramfs" ino=73699 res=0 errno=0
[  639.498408][T16310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  639.525708][T16310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  640.866180][T16344] syzkaller0: entered promiscuous mode
[  640.866208][T16344] syzkaller0: entered allmulticast mode
[  641.277948][T16354] loop8: detected capacity change from 0 to 16384
[  641.524975][T16359] loop8: detected capacity change from 16384 to 16383
[  642.015622][ T9833] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  642.085187][ T9833] hid-generic 0000:0000:0000.0029: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  642.376371][ T9833] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  642.766745][ T9833] usb 7-1: unable to get BOS descriptor or descriptor too short
[  642.766801][ T9833] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  642.767715][ T9833] usb 7-1: unable to read config index 0 descriptor/start: -71
[  642.767755][ T9833] usb 7-1: can't read configurations, error -71
[  643.349553][ T5711] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  643.503973][ T5711] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  643.521898][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.521929][ T5711] usb 1-1: Product: syz
[  643.521948][ T5711] usb 1-1: Manufacturer: syz
[  643.521964][ T5711] usb 1-1: SerialNumber: syz
[  643.829429][ T9820] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  643.989851][ T9820] usb 2-1: Using ep0 maxpacket: 32
[  643.990714][ T9820] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  643.992045][ T9820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  643.994149][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  643.994214][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  643.994795][ T9820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.994822][ T9820] usb 2-1: Product: syz
[  643.994839][ T9820] usb 2-1: Manufacturer: syz
[  643.994855][ T9820] usb 2-1: SerialNumber: syz
[  644.070297][ T9820] usb 2-1: config 0 descriptor??
[  644.071384][T16396] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  644.073062][ T9820] hub 2-1:0.0: bad descriptor, ignoring hub
[  644.073089][ T9820] hub 2-1:0.0: probe with driver hub failed with error -5
[  644.106654][ T9820] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input82
[  644.354877][ T9820] usb 2-1: USB disconnect, device number 22
[  644.354955][    C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  644.611472][T16411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  644.614711][T16411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  644.746224][T16416] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.746479][T16416] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.746739][T16416] bridge_slave_0: entered allmulticast mode
[  644.753667][T16416] bridge_slave_0: entered promiscuous mode
[  644.784011][T16416] bridge_slave_0: left allmulticast mode
[  644.784044][T16416] bridge_slave_0: left promiscuous mode
[  644.784353][T16416] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.890034][T16418] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  644.919253][T16418] kvm: pic: single mode not supported
[  644.921979][T16418] kvm: pic: non byte read
[  645.329623][ T9820] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  645.489524][ T9820] usb 6-1: Using ep0 maxpacket: 32
[  645.490910][ T9820] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  645.492453][ T9820] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  645.492507][ T9820] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  645.492539][ T9820] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  645.492570][ T9820] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  645.494955][ T9820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.494987][ T9820] usb 6-1: Product: syz
[  645.495005][ T9820] usb 6-1: Manufacturer: syz
[  645.495022][ T9820] usb 6-1: SerialNumber: syz
[  645.590394][    C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  645.608865][ T9820] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input83
[  645.626611][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO
[  645.626674][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  645.627440][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  645.674374][ T5711] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  645.694821][ T5711] usb 1-1: USB disconnect, device number 12
[  645.739685][ T9820] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  645.739709][ T9820]  (id 0x00)
[  645.829483][ T9820] rc_core: IR keymap rc-imon-pad not found
[  645.829500][ T9820] Registered IR keymap rc-empty
[  645.829562][ T9820] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  645.829576][ T9820] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  645.940447][ T9820] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[  645.944389][ T9820] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input84
[  645.947248][ T9820] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:56> initialized
[  647.354290][ T9820] usb 6-1: USB disconnect, device number 56
[  647.355658][T16445] imon:send_packet: packet tx failed (-71)
[  647.373223][T16445] imon:vfd_write: send packet #4 failed
[  648.317687][T16464] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.317907][T16464] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.318097][T16464] bridge_slave_0: entered allmulticast mode
[  648.335695][T16464] bridge_slave_0: entered promiscuous mode
[  648.375966][T16464] bridge_slave_0: left allmulticast mode
[  648.375997][T16464] bridge_slave_0: left promiscuous mode
[  648.376248][T16464] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.529492][ T5711] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  648.690391][ T5711] usb 6-1: Using ep0 maxpacket: 32
[  648.696804][ T5711] usb 6-1: unable to get BOS descriptor or descriptor too short
[  648.696844][ T5711] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24
[  648.698260][ T5711] usb 6-1: config 165 has an invalid interface number: 162 but max is 0
[  648.698286][ T5711] usb 6-1: config 165 has no interface number 0
[  648.698337][ T5711] usb 6-1: config 165 interface 162 has no altsetting 0
[  648.709920][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.710001][ T5711] usb 6-1: Product: syz
[  648.710049][ T5711] usb 6-1: Manufacturer: syz
[  648.710091][ T5711] usb 6-1: SerialNumber: syz
[  649.037444][T16477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  649.069438][ T9820] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  649.153046][T16463] netlink: 'syz.5.2851': attribute type 21 has an invalid length.
[  649.158539][T16463] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2851'.
[  649.219414][ T9820] usb 9-1: Using ep0 maxpacket: 32
[  649.228739][ T9820] usb 9-1: unable to get BOS descriptor or descriptor too short
[  649.228797][ T9820] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  649.252916][ T9820] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  649.252950][ T9820] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  649.252973][ T9820] usb 9-1: config 14 has no interface number 0
[  649.252993][ T9820] usb 9-1: config 14 has no interface number 1
[  649.253061][ T9820] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  649.253087][ T9820] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  649.253115][ T9820] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  649.253143][ T9820] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  649.253174][ T9820] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  649.253203][ T9820] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  649.253231][ T9820] usb 9-1: config 14 interface 57 has no altsetting 0
[  649.253252][ T9820] usb 9-1: config 14 interface 228 has no altsetting 0
[  649.283387][ T9820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.283419][ T9820] usb 9-1: Product: syz
[  649.283438][ T9820] usb 9-1: Manufacturer: syz
[  649.283455][ T9820] usb 9-1: SerialNumber: syz
[  649.840718][ T9820] legousbtower 9-1:14.57: interrupt endpoints not found
[  649.944986][ T5711] usb 6-1: USB disconnect, device number 57
[  650.120646][ T8142] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  650.246251][ T9820] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[  650.262819][ T9820] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  650.475162][ T8142] usb 1-1: unable to get BOS descriptor or descriptor too short
[  650.475220][ T8142] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  650.476094][ T8142] usb 1-1: unable to read config index 0 descriptor/start: -71
[  650.476134][ T8142] usb 1-1: can't read configurations, error -71
[  650.837743][T16508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.838654][T16508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.967544][   T31] audit: type=1326 audit(1791741084.919:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  650.967710][   T31] audit: type=1326 audit(1791741084.919:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  651.021374][   T31] audit: type=1326 audit(1791741084.959:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  651.021433][   T31] audit: type=1326 audit(1791741084.959:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  651.021482][   T31] audit: type=1326 audit(1791741084.959:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf712762b code=0x7ffc0000
[  651.021528][   T31] audit: type=1326 audit(1791741084.959:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf712762b code=0x7ffc0000
[  651.021573][   T31] audit: type=1326 audit(1791741084.959:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  651.021633][   T31] audit: type=1326 audit(1791741084.959:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  651.021679][   T31] audit: type=1326 audit(1791741084.959:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  651.021726][   T31] audit: type=1326 audit(1791741084.959:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16512 comm="syz.6.2868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf0ec code=0x7ffc0000
[  651.242060][ T5711] usb 9-1: USB disconnect, device number 32
[  651.266678][ T5711] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected
[  652.014677][T16543] syzkaller0: entered promiscuous mode
[  652.014703][T16543] syzkaller0: entered allmulticast mode
[  652.240791][T16546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  652.601890][T16556] tipc: Started in network mode
[  652.601928][T16556] tipc: Node identity ac14140f, cluster identity 4711
[  652.605801][T16556] tipc: New replicast peer: 255.255.255.255
[  652.606513][T16556] tipc: Enabled bearer <udp:syz2>, priority 10
[  653.027205][T16561] TC_ACT_REPEAT abuse ?
[  653.729545][ T5711] tipc: Node number set to 2886997007
[  653.884866][T16572] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  654.125320][T16578] netlink: 'syz.6.2890': attribute type 1 has an invalid length.
[  654.199556][T16580] netlink: 'syz.1.2889': attribute type 4 has an invalid length.
[  654.241622][T16580] netlink: 'syz.1.2889': attribute type 4 has an invalid length.
[  654.532359][ T9834] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  654.688572][T16587] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  654.706683][ T9834] usb 2-1: unable to get BOS descriptor or descriptor too short
[  654.706739][ T9834] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=77.4a
[  654.712368][ T9834] usb 2-1: config 174 has an invalid interface number: 153 but max is 0
[  654.712488][ T9834] usb 2-1: config 174 has no interface number 0
[  654.712576][ T9834] usb 2-1: config 174 interface 153 has no altsetting 0
[  654.766981][ T9834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.767048][ T9834] usb 2-1: Product: syz
[  654.767066][ T9834] usb 2-1: Manufacturer: syz
[  654.767083][ T9834] usb 2-1: SerialNumber: syz
[  654.815181][T16587] kvm: pic: single mode not supported
[  654.815327][T16587] kvm: pic: non byte read
[  655.087194][ T9834] sierra 2-1:174.153: Sierra USB modem converter detected
[  655.100143][ T9834] usb 2-1: USB disconnect, device number 23
[  655.101117][ T9834] sierra 2-1:174.153: device disconnected
[  655.719640][ T9820] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  655.871094][ T9820] usb 7-1: Using ep0 maxpacket: 16
[  655.871883][ T9820] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  655.875398][ T9820] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  655.875429][ T9820] usb 7-1: config 0 has no interface number 0
[  655.875525][ T9820] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  655.875556][ T9820] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  655.880038][ T9820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.880070][ T9820] usb 7-1: Product: syz
[  655.880090][ T9820] usb 7-1: Manufacturer: syz
[  655.880109][ T9820] usb 7-1: SerialNumber: syz
[  655.964922][ T9820] usb 7-1: config 0 descriptor??
[  655.966652][T16600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  655.966823][T16600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  656.203219][T16600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  656.203395][T16600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  656.412018][ T9820] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  656.899482][ T9822] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  657.049793][ T9822] usb 9-1: Using ep0 maxpacket: 16
[  657.051054][ T9822] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  657.053067][ T9822] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  657.053103][ T9822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  657.060340][ T9822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.060364][ T9822] usb 9-1: Product: syz
[  657.060376][ T9822] usb 9-1: Manufacturer: syz
[  657.060389][ T9822] usb 9-1: SerialNumber: syz
[  657.131208][ T9822] usb 9-1: config 0 descriptor??
[  657.160913][ T9822] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  657.160941][ T9822] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[  657.778467][ T9822] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  657.779103][ T9822] em28xx 9-1:0.0: Config register raw data: 0xfffffffb
[  658.250226][ T9820] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  658.250525][ T9820] asix 7-1:0.34: probe with driver asix failed with error -71
[  658.290742][ T9820] usb 7-1: USB disconnect, device number 52
[  658.413966][ T9822] em28xx 9-1:0.0: Unknown AC97 audio processor detected!
[  658.840614][ T9822] em28xx 9-1:0.0: couldn't setup AC97 register 2
[  658.841065][ T9822] em28xx 9-1:0.0: couldn't setup AC97 register 4
[  658.841441][ T9822] em28xx 9-1:0.0: couldn't setup AC97 register 6
[  658.841947][ T9822] em28xx 9-1:0.0: couldn't setup AC97 register 54
[  658.843509][ T9822] em28xx 9-1:0.0: couldn't setup AC97 register 56
[  658.891819][ T9822] usb 9-1: USB disconnect, device number 33
[  659.045375][ T5711] corsair-psu 0003:1B1C:1C03.002A: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  659.122856][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2908'.
[  659.488067][T16651] binder: 16650:16651 unknown command 0
[  659.488095][T16651] binder: 16650:16651 ioctl c0306201 800004c0 returned -22
[  662.609638][ T9820] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  662.770946][ T9820] usb 2-1: Using ep0 maxpacket: 8
[  662.771815][ T9820] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  662.773481][ T9820] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  662.773521][ T9820] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  662.773564][ T9820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  662.773595][ T9820] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  662.773624][ T9820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  662.773652][ T9820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  662.773682][ T9820] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  662.773713][ T9820] usb 2-1: config 168 interface 0 has no altsetting 0
[  662.774992][ T9820] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  662.775051][ T9820] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  662.775092][ T9820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  662.775133][ T9820] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  662.775153][ T9820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  662.775172][ T9820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  662.775193][ T9820] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  662.775213][ T9820] usb 2-1: config 168 interface 0 has no altsetting 0
[  662.776258][ T9820] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  662.776294][ T9820] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  662.776335][ T9820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  662.776370][ T9820] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  662.776389][ T9820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  662.776408][ T9820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  662.776428][ T9820] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  662.776448][ T9820] usb 2-1: config 168 interface 0 has no altsetting 0
[  662.863872][T16672] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  662.906116][ T9820] usb 2-1: string descriptor 0 read error: -22
[  662.906227][ T9820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.119767][ T9820] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  663.548059][T16680] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  663.567802][ T9831] usb 2-1: USB disconnect, device number 24
[  663.665041][T16680] kvm: pic: single mode not supported
[  663.665151][T16680] kvm: pic: non byte read
[  664.551599][T16696] netlink: 'syz.5.2921': attribute type 4 has an invalid length.
[  664.622440][T16700] netlink: 'syz.5.2921': attribute type 4 has an invalid length.
[  668.679705][ T8141] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  668.770440][ T8141] hid-generic 0000:0000:0000.002B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  669.060778][ T8141] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  669.191856][T16728] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  669.275712][ T8141] usb 2-1: Using ep0 maxpacket: 8
[  669.285735][ T8141] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  669.288682][ T8141] usb 2-1: config 3 has an invalid interface number: 45 but max is 0
[  669.288711][ T8141] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  669.288733][ T8141] usb 2-1: config 3 has no interface number 0
[  669.288776][ T8141] usb 2-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  669.288806][ T8141] usb 2-1: config 3 interface 45 has no altsetting 0
[  669.308912][ T8141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.308945][ T8141] usb 2-1: Product: syz
[  669.308963][ T8141] usb 2-1: Manufacturer: syz
[  669.308979][ T8141] usb 2-1: SerialNumber: syz
[  669.386492][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  669.779893][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  673.965446][ T8141] usb 2-1: USB disconnect, device number 25
[  674.246315][T16730] udevd[16730]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  674.561922][T16757] netlink: 'syz.1.2937': attribute type 11 has an invalid length.
[  681.719348][    C0] sched: DL replenish lagged too much
[  686.010801][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  686.026409][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  689.696647][T16779] syzkaller0: entered promiscuous mode
[  689.696674][T16779] syzkaller0: entered allmulticast mode
[  692.800051][    T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!!
[  693.094844][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[  693.135036][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  693.145416][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  693.169150][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  698.875264][ T5627] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  704.605057][T16780] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  726.395554][ T5615] Bluetooth: hci3: command 0x0406 tx timeout
[  748.936589][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  748.950647][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  808.975540][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  808.992791][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  915.809207][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  915.816215][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P14447/1:b..l P16793/1:b..l P2/1:b..l
[  915.826371][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=134301, q=912021 ncpus=2)
[  915.834500][    C1] task:kthreadd        state:R  running task     stack:25976 pid:2     tgid:2     ppid:0      task_flags:0x208040 flags:0x00080000
[  915.848069][    C1] Call Trace:
[  915.851468][    C1]  <TASK>
[  915.854519][    C1]  __schedule+0x17db/0x58f0
[  915.859207][    C1]  ? __lock_acquire+0x747/0x2de0
[  915.864279][    C1]  ? __pfx___schedule+0x10/0x10
[  915.869175][    C1]  ? __lock_acquire+0x747/0x2de0
[  915.874167][    C1]  preempt_schedule_irq+0x4b/0x90
[  915.879239][    C1]  irqentry_exit+0x14f/0x920
[  915.883945][    C1]  ? trace_irq_disable+0x3b/0x140
[  915.889056][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  915.895195][    C1] RIP: 0010:deref_stack_reg+0x183/0x220
[  915.900872][    C1] Code: 39 c4 0f 96 c1 4d 39 c6 0f 97 c2 20 c2 20 ca 80 fa 01 75 46 49 8d 40 08 4c 39 e0 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 <4c> 89 c7 49 89 f7 e8 12 07 00 00 49 89 c6 48 8b 5c 24 08 48 89 d8
[  915.920534][    C1] RSP: 0018:ffffc90000077258 EFLAGS: 00000202
[  915.926697][    C1] RAX: ffffc90000077601 RBX: 1ffff9200000ee69 RCX: 0000000000000001
[  915.934712][    C1] RDX: ffffc90000077388 RSI: dffffc0000000000 RDI: ffffc90000077358
[  915.942723][    C1] RBP: ffffc90000070000 R08: ffffc90000077670 R09: 0000000000000000
[  915.950757][    C1] R10: ffffc90000077398 R11: fffff5200000ee75 R12: 1ffff9200000ee6a
[  915.958772][    C1] R13: 1ffff9200000ee6b R14: ffffc90000078000 R15: ffffc90000077348
[  915.966814][    C1]  unwind_next_frame+0x19bd/0x2550
[  915.972008][    C1]  ? __free_frozen_pages+0xc93/0xd90
[  915.977419][    C1]  ? unwind_next_frame+0x8f/0x2550
[  915.982590][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  915.988913][    C1]  arch_stack_walk+0x11b/0x150
[  915.993912][    C1]  ? __slab_free+0x274/0x2c0
[  915.998606][    C1]  stack_trace_save+0xa9/0x100
[  916.003422][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  916.008837][    C1]  ? __lock_acquire+0x747/0x2de0
[  916.013832][    C1]  save_stack+0x122/0x230
[  916.018250][    C1]  ? __pfx_save_stack+0x10/0x10
[  916.023147][    C1]  ? __free_frozen_pages+0xc93/0xd90
[  916.028493][    C1]  ? page_ext_put+0x97/0xc0
[  916.033045][    C1]  __reset_page_owner+0x71/0x1f0
[  916.038031][    C1]  __free_frozen_pages+0xc93/0xd90
[  916.043197][    C1]  __slab_free+0x274/0x2c0
[  916.047669][    C1]  ? qlist_free_all+0x8e/0x100
[  916.052535][    C1]  qlist_free_all+0x99/0x100
[  916.057260][    C1]  kasan_quarantine_reduce+0x148/0x160
[  916.062768][    C1]  __kasan_slab_alloc+0x22/0x80
[  916.067674][    C1]  __kmalloc_noprof+0x307/0x720
[  916.072568][    C1]  ? prepare_creds+0x30/0x820
[  916.077324][    C1]  ? __kmalloc_noprof+0x1ab/0x720
[  916.082404][    C1]  ? security_prepare_creds+0x52/0x360
[  916.088043][    C1]  ? security_prepare_creds+0x52/0x360
[  916.093566][    C1]  security_prepare_creds+0x52/0x360
[  916.098936][    C1]  prepare_creds+0x57d/0x820
[  916.103682][    C1]  copy_creds+0x109/0x9f0
[  916.108071][    C1]  copy_process+0xcf9/0x4400
[  916.112819][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  916.118005][    C1]  ? rcu_is_watching+0x16/0xb0
[  916.122823][    C1]  ? trace_hrtimer_start+0x82/0x200
[  916.128068][    C1]  ? __pfx_copy_process+0x10/0x10
[  916.133159][    C1]  kernel_clone+0x2d7/0x940
[  916.137709][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  916.142957][    C1]  ? rcu_is_watching+0x16/0xb0
[  916.147767][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  916.152856][    C1]  ? __lock_acquire+0x747/0x2de0
[  916.157847][    C1]  kernel_thread+0x13f/0x1b0
[  916.162491][    C1]  ? __pfx_kthread+0x10/0x10
[  916.167125][    C1]  ? __pfx_kernel_thread+0x10/0x10
[  916.172324][    C1]  ? __pfx_kthread+0x10/0x10
[  916.176999][    C1]  ? do_raw_spin_unlock+0xf5/0x200
[  916.182204][    C1]  kthreadd+0x4ec/0x6e0
[  916.186421][    C1]  ? kthreadd+0x286/0x6e0
[  916.190799][    C1]  ? __pfx_kthreadd+0x10/0x10
[  916.195530][    C1]  ret_from_fork+0x514/0xb70
[  916.200203][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  916.205387][    C1]  ? __switch_to+0xc89/0x1420
[  916.210118][    C1]  ? __pfx_kthreadd+0x10/0x10
[  916.214846][    C1]  ret_from_fork_asm+0x1a/0x30
[  916.219709][    C1]  </TASK>
[  916.222759][    C1] task:syz.1.2951      state:R  running task     stack:26856 pid:16793 tgid:16789 ppid:14447  task_flags:0x40044c flags:0x08080002
[  916.236325][    C1] Call Trace:
[  916.239650][    C1]  <TASK>
[  916.242626][    C1]  __schedule+0x17db/0x58f0
[  916.247210][    C1]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  916.252662][    C1]  ? __pfx___schedule+0x10/0x10
[  916.257576][    C1]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  916.263075][    C1]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  916.268494][    C1]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  916.273911][    C1]  ? preempt_schedule_thunk+0x16/0x40
[  916.279333][    C1]  preempt_schedule_common+0x7f/0xd0
[  916.284667][    C1]  preempt_schedule_thunk+0x16/0x40
[  916.289927][    C1]  _raw_spin_unlock+0x41/0x50
[  916.294648][    C1]  __zap_vma_range+0x40e1/0x4f80
[  916.299718][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  916.305078][    C1]  ? mas_find+0x6d6/0xcb0
[  916.309641][    C1]  unmap_vmas+0x390/0x550
[  916.314028][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  916.318918][    C1]  ? mas_next_slot+0xc91/0xd70
[  916.323781][    C1]  exit_mmap+0x293/0x9f0
[  916.328099][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  916.332928][    C1]  ? __pfx_exit_aio+0x10/0x10
[  916.337696][    C1]  ? uprobe_clear_state+0x2a4/0x3d0
[  916.342990][    C1]  __mmput+0x118/0x420
[  916.347110][    C1]  exit_mm+0x18e/0x240
[  916.351218][    C1]  do_exit+0x6cd/0x2360
[  916.355420][    C1]  ? __pfx_do_exit+0x10/0x10
[  916.360054][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  916.365137][    C1]  do_group_exit+0x22d/0x2f0
[  916.369769][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  916.375162][    C1]  get_signal+0x121b/0x12c0
[  916.379826][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  916.385435][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  916.391678][    C1]  ? fd_install+0x309/0x3d0
[  916.396305][    C1]  exit_to_user_mode_loop+0x10e/0x770
[  916.401725][    C1]  ? rcu_is_watching+0x16/0xb0
[  916.406580][    C1]  ? do_fast_syscall_32+0x33/0x70
[  916.411737][    C1]  __do_fast_syscall_32+0x437/0x6b0
[  916.417004][    C1]  ? do_fast_syscall_32+0x33/0x70
[  916.422100][    C1]  ? irqentry_exit+0x10f/0x920
[  916.426995][    C1]  ? trace_irq_disable+0x3b/0x140
[  916.432158][    C1]  do_fast_syscall_32+0x33/0x70
[  916.437056][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  916.443430][    C1] RIP: 0023:0xf73ef0ec
[  916.447532][    C1] RSP: 002b:00000000f4fa150c EFLAGS: 00000206 ORIG_RAX: 0000000000000168
[  916.456043][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000005
[  916.464053][    C1] RDX: 0000000000000000 RSI: 0000000080000240 RDI: 0000000000000000
[  916.472072][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  916.480083][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  916.488115][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  916.496159][    C1]  </TASK>
[  916.499215][    C1] task:syz-executor    state:R  running task     stack:21928 pid:14447 tgid:14447 ppid:14435  task_flags:0x400140 flags:0x08080000
[  916.512927][    C1] Call Trace:
[  916.516237][    C1]  <TASK>
[  916.519205][    C1]  __schedule+0x17db/0x58f0
[  916.523871][    C1]  ? __pfx___schedule+0x10/0x10
[  916.528766][    C1]  ? __lock_acquire+0x747/0x2de0
[  916.533757][    C1]  preempt_schedule_irq+0x4b/0x90
[  916.538826][    C1]  irqentry_exit+0x14f/0x920
[  916.543462][    C1]  ? trace_irq_disable+0x3b/0x140
[  916.548538][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  916.554563][    C1] RIP: 0010:lock_acquire+0x7d/0x350
[  916.559806][    C1] Code: e8 c8 36 09 00 84 c0 0f 84 e2 01 00 00 83 3d c9 3d d7 0f 00 0f 84 e9 00 00 00 48 8b b4 24 88 00 00 00 4c 89 e7 e8 13 5f 95 00 <83> 3d ac 3d d7 0f 00 0f 84 e4 00 00 00 65 8b 05 d7 ed f2 12 85 c0
[  916.579451][    C1] RSP: 0018:ffffc900037bf068 EFLAGS: 00000202
[  916.585561][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8000000000000001
[  916.593564][    C1] RDX: 0000000000000000 RSI: ffffffff817811fc RDI: 1ffffffff1fab914
[  916.601607][    C1] RBP: 1ffff920006f7e3c R08: 0000000000000000 R09: 0000000000000000
[  916.609702][    C1] R10: ffffc900037bf1f8 R11: ffffffff81b2c570 R12: ffffffff8fd5c8a0
[  916.617756][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000
[  916.625778][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  916.632015][    C1]  ? unwind_next_frame+0xac/0x2550
[  916.637187][    C1]  ? lock_acquire+0x7d/0x350
[  916.641828][    C1]  ? unwind_next_frame+0x8f/0x2550
[  916.646990][    C1]  ? __reset_page_owner+0x71/0x1f0
[  916.652154][    C1]  ? unwind_next_frame+0x8f/0x2550
[  916.657325][    C1]  unwind_next_frame+0xac/0x2550
[  916.662308][    C1]  ? unwind_next_frame+0x8f/0x2550
[  916.667472][    C1]  ? save_stack+0x122/0x230
[  916.672201][    C1]  ? unwind_next_frame+0x8f/0x2550
[  916.677368][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  916.683585][    C1]  arch_stack_walk+0x11b/0x150
[  916.688537][    C1]  ? __reset_page_owner+0x71/0x1f0
[  916.693714][    C1]  stack_trace_save+0xa9/0x100
[  916.698517][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  916.703963][    C1]  save_stack+0x122/0x230
[  916.708439][    C1]  ? __pfx_save_stack+0x10/0x10
[  916.713368][    C1]  ? page_ext_put+0x97/0xc0
[  916.717958][    C1]  __reset_page_owner+0x71/0x1f0
[  916.722968][    C1]  __free_frozen_pages+0xc93/0xd90
[  916.728144][    C1]  __slab_free+0x274/0x2c0
[  916.732625][    C1]  qlist_free_all+0x99/0x100
[  916.737271][    C1]  kasan_quarantine_reduce+0x148/0x160
[  916.742788][    C1]  __kasan_slab_alloc+0x22/0x80
[  916.747702][    C1]  __kmalloc_noprof+0x307/0x720
[  916.752614][    C1]  ? __kmalloc_noprof+0x1ab/0x720
[  916.757683][    C1]  ? tomoyo_encode+0x2ad/0x570
[  916.762606][    C1]  ? tomoyo_encode+0x2ad/0x570
[  916.767419][    C1]  tomoyo_encode+0x2ad/0x570
[  916.772064][    C1]  tomoyo_realpath_from_path+0x5fa/0x640
[  916.777760][    C1]  tomoyo_check_open_permission+0x229/0x470
[  916.783866][    C1]  ? tomoyo_check_open_permission+0x1d3/0x470
[  916.789989][    C1]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  916.796460][    C1]  ? __asan_memset+0x22/0x50
[  916.801133][    C1]  ? tomoyo_file_open+0x163/0x220
[  916.806203][    C1]  security_file_open+0xa9/0x240
[  916.811182][    C1]  do_dentry_open+0x4a0/0x1380
[  916.816021][    C1]  vfs_open+0x3b/0x340
[  916.820152][    C1]  ? path_openat+0x1428/0x1d60
[  916.824966][    C1]  path_openat+0x1443/0x1d60
[  916.829631][    C1]  do_file_open+0x23e/0x4a0
[  916.834192][    C1]  ? __pfx_do_file_open+0x10/0x10
[  916.839300][    C1]  ? _raw_spin_unlock+0x28/0x50
[  916.844244][    C1]  ? alloc_fd+0x651/0x6c0
[  916.848663][    C1]  do_sys_openat2+0x115/0x200
[  916.853404][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  916.858745][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  916.864185][    C1]  ? __se_sys_clock_nanosleep_time32+0x35d/0x3b0
[  916.870610][    C1]  __ia32_compat_sys_openat+0x131/0x160
[  916.876224][    C1]  __do_fast_syscall_32+0x27a/0x6b0
[  916.881560][    C1]  ? do_fast_syscall_32+0x33/0x70
[  916.886630][    C1]  ? asm_int80_emulation+0x1a/0x20
[  916.891783][    C1]  ? do_int80_emulation+0x299/0x500
[  916.897035][    C1]  ? trace_irq_disable+0x3b/0x140
[  916.902114][    C1]  do_fast_syscall_32+0x33/0x70
[  916.907026][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  916.913399][    C1] RIP: 0023:0xf73ef0ec
[  916.917537][    C1] RSP: 002b:00000000f753fd50 EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[  916.925991][    C1] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f721234c
[  916.934007][    C1] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f73daff4
[  916.942040][    C1] RBP: 0000000000000129 R08: 0000000000000000 R09: 0000000000000000
[  916.950109][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  916.958210][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  916.966243][    C1]  </TASK>
[  916.969317][    C1] rcu: rcu_preempt kthread starved for 8138 jiffies! g134301 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1
[  916.980395][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  916.990426][    C1] rcu: RCU grace-period kthread stack dump:
[  916.996433][    C1] task:rcu_preempt     state:R  running task     stack:27752 pid:17    tgid:17    ppid:2      task_flags:0x208040 flags:0x00080000
[  917.009987][    C1] Call Trace:
[  917.013304][    C1]  <TASK>
[  917.016269][    C1]  __schedule+0x17db/0x58f0
[  917.020851][    C1]  ? __pfx___schedule+0x10/0x10
[  917.025743][    C1]  ? lock_acquire+0x115/0x350
[  917.030562][    C1]  ? schedule+0x90/0x2b0
[  917.034860][    C1]  schedule+0x164/0x2b0
[  917.039069][    C1]  schedule_timeout+0x152/0x2c0
[  917.043972][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  917.049433][    C1]  ? __pfx_process_timeout+0x10/0x10
[  917.054882][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  917.060731][    C1]  ? prepare_to_swait_event+0x322/0x350
[  917.066337][    C1]  rcu_gp_fqs_loop+0x30c/0x11f0
[  917.071360][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  917.077568][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  917.082896][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  917.088164][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  917.092893][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  917.098145][    C1]  ? __kthread_parkme+0x71/0x1f0
[  917.103143][    C1]  ? __kthread_parkme+0x199/0x1f0
[  917.108228][    C1]  kthread+0x38b/0x480
[  917.112341][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  917.117602][    C1]  ? __pfx_kthread+0x10/0x10
[  917.122236][    C1]  ret_from_fork+0x514/0xb70
[  917.126953][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  917.132108][    C1]  ? __switch_to+0xc89/0x1420
[  917.136868][    C1]  ? __pfx_kthread+0x10/0x10
[  917.141524][    C1]  ret_from_fork_asm+0x1a/0x30
[  917.146347][    C1]  </TASK>
[  917.149405][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  917.155767][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  917.166309][    C1] Tainted: [L]=SOFTLOCKUP
[  917.170669][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  917.180775][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  917.186466][    C1] Code: 1b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 d5 20 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  917.206136][    C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246
[  917.212247][    C1] RAX: 00000000017b4747 RBX: ffffffff819beb9c RCX: 8000000000000001
[  917.220287][    C1] RDX: 0000000000000001 RSI: ffffffff8e469aca RDI: ffffffff8c6dde80
[  917.228387][    C1] RBP: ffffc900001a7f10 R08: ffff8880b8533a1b R09: 1ffff110170a6743
[  917.236428][    C1] R10: dffffc0000000000 R11: ffffed10170a6744 R12: 0000000000000000
[  917.244525][    C1] R13: 1ffff11003ed1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000
[  917.252545][    C1] FS:  0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000
[  917.261552][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  917.268191][    C1] CR2: 000000005843723c CR3: 0000000034412000 CR4: 00000000003526f0
[  917.276218][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  917.284266][    C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  917.292286][    C1] Call Trace:
[  917.295608][    C1]  <TASK>
[  917.298578][    C1]  default_idle+0x9/0x20
[  917.302879][    C1]  default_idle_call+0x72/0xb0
[  917.307704][    C1]  do_idle+0x1cc/0x540
[  917.311826][    C1]  ? __pfx_do_idle+0x10/0x10
[  917.316470][    C1]  ? do_idle+0x4d8/0x540
[  917.320771][    C1]  cpu_startup_entry+0x43/0x60
[  917.325587][    C1]  start_secondary+0x101/0x110
[  917.330421][    C1]  common_startup_64+0x13e/0x157
[  917.335454][    C1]  </TASK>
[  920.704077][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  920.718476][ T1313] ieee802154 phy1 wpan1: encryption failed: -22