last executing test programs:

9m51.597920633s ago: executing program 2 (id=703):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(0xffffffffffffffff, &(0x7f0000000200)='r:_y_pr', 0x7)
openat$zero(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

9m51.39085578s ago: executing program 2 (id=706):
socket$inet(0x2, 0x3, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

9m51.27531059s ago: executing program 2 (id=708):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0x9}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

9m49.61487099s ago: executing program 2 (id=721):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

9m49.423953438s ago: executing program 2 (id=722):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
readv(r1, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2)

9m47.922127541s ago: executing program 2 (id=728):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000072414060005001524120004a317a88b045e4f01a607c0ffcb7e392a08241c0200bed49f090581030002f800000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x8, 0x851c, 0x279, 0x8, 0x2, 0x200, 0x46e, 0x1, 0x40, 0xd1, 0x805, 0x1}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

9m47.693345964s ago: executing program 32 (id=728):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000072414060005001524120004a317a88b045e4f01a607c0ffcb7e392a08241c0200bed49f090581030002f800000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x8, 0x851c, 0x279, 0x8, 0x2, 0x200, 0x46e, 0x1, 0x40, 0xd1, 0x805, 0x1}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

9m43.593692083s ago: executing program 3 (id=744):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
r3 = eventfd2(0x7, 0x1)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x4})
close_range(r0, 0xffffffffffffffff, 0x0)

9m42.877803543s ago: executing program 3 (id=748):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[], 0x1000f)

9m42.706681632s ago: executing program 3 (id=750):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close(r1)
accept4(r0, &(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x0, 0x800)

9m42.486835692s ago: executing program 3 (id=751):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

9m42.16108191s ago: executing program 3 (id=752):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044)
sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800)

9m38.977309159s ago: executing program 3 (id=753):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
close(r0)
close(r1)

9m38.74956812s ago: executing program 33 (id=753):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
close(r0)
close(r1)

6m26.037736857s ago: executing program 4 (id=1803):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x50a)
write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48)

6m25.834973508s ago: executing program 4 (id=1807):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_usb_connect$uac1(0x6, 0xdc, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x80, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)

6m25.016507995s ago: executing program 4 (id=1821):
pipe(&(0x7f0000002680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

6m24.842433551s ago: executing program 4 (id=1823):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8178, 0x2000, 0x800, 0x0, 0x3}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x16, r2}, 0x10)

6m24.683771977s ago: executing program 4 (id=1824):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})
ioprio_set$pid(0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008040)

6m24.683040221s ago: executing program 1 (id=1825):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x2000, 0x4)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x2, 0xc000, 0x4, r2, r3, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

6m24.599453791s ago: executing program 1 (id=1826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7, 0xe, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0x5, 0x9, 0x5, 0xf8, 0x0, 0x82, 0xb, 0x4, 0x3, 0xb, 0x0, '\x00', 0x6, 0x10})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x8, 0x1, 0x0, 0x3, 0x12, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x4, 0x100000000001], 0x1000, 0x4fb40})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m24.485174777s ago: executing program 1 (id=1827):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffffffffffe})

6m23.77287034s ago: executing program 4 (id=1834):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x500})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef)

6m23.527390025s ago: executing program 1 (id=1836):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0)
close(r0)

6m23.496178007s ago: executing program 0 (id=1837):
r0 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
r2 = openat$cgroup_procs(r1, &(0x7f0000001940)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000001c00), 0x12)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
sendfile(r3, r2, 0x0, 0x2000000000006)

6m23.323996337s ago: executing program 1 (id=1839):
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x7, 0x0, '\x00', 0x8001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]})

6m23.246903222s ago: executing program 0 (id=1840):
r0 = socket(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000202b})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
r3 = dup3(r0, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f})

6m23.246255637s ago: executing program 1 (id=1841):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ptrace$getregset(0x4205, 0x0, 0x2, &(0x7f0000000080)={0x0})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000240)='pim6reg1\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

6m22.065099937s ago: executing program 0 (id=1846):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

6m20.5582378s ago: executing program 0 (id=1849):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000005, 0x3032, 0xffffffffffffffff, 0x66960000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6m19.419018746s ago: executing program 0 (id=1850):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x6, 0x8, 0x4000000000000000, 0x1, 0x366817b8, 0x2800000000000000, 0x5, 0x2000d30], 0xffffffff, 0x3042d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m18.743216386s ago: executing program 0 (id=1853):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

6m17.540310409s ago: executing program 5 (id=1857):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x119}, {&(0x7f0000000340)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bc", 0x3e}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x1b7}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb5", 0xf0}], 0x2}}], 0x2, 0x14042082)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

6m16.616508419s ago: executing program 5 (id=1858):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x75, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x5, 0x2, 0x100, 0x2e], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m16.544954523s ago: executing program 5 (id=1859):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1000)
setresuid(r0, r0, r0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0)

6m16.378583311s ago: executing program 5 (id=1860):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x0, 0xc, 0x0, 0xfd, 0x40, 0x1, 0x5}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x21, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8004], 0x1, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m16.24155637s ago: executing program 5 (id=1861):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0})
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2})
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1)

6m16.225878889s ago: executing program 5 (id=1862):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0xfdef)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20"], 0x9e)

6m8.536189308s ago: executing program 34 (id=1834):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x500})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef)

6m7.897423653s ago: executing program 35 (id=1841):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ptrace$getregset(0x4205, 0x0, 0x2, &(0x7f0000000080)={0x0})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000240)='pim6reg1\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

6m3.543365683s ago: executing program 36 (id=1853):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

6m1.054521635s ago: executing program 37 (id=1862):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0xfdef)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20"], 0x9e)

4.173103373s ago: executing program 9 (id=3513):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

3.878537958s ago: executing program 9 (id=3517):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'wg1\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x0, 0x2}})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000845dcf0886124620b705010203010902"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
inotify_init1(0x80800)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0)

2.170588674s ago: executing program 6 (id=3529):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)

2.068885303s ago: executing program 6 (id=3531):
socket$netlink(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1.835171107s ago: executing program 6 (id=3535):
r0 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x8)
landlock_restrict_self(r0, 0x3)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x7)
landlock_restrict_self(r1, 0xf)
landlock_restrict_self(r1, 0x6)
landlock_restrict_self(r0, 0xb)
landlock_restrict_self(r1, 0xe)
landlock_restrict_self(r1, 0xa)
landlock_restrict_self(r0, 0xe)
landlock_restrict_self(r0, 0xa)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

1.709553471s ago: executing program 6 (id=3536):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0xfc}}}}, 0x9)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000080))
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002)
r3 = fcntl$dupfd(r2, 0x0, r2)
read$FUSE(r3, 0x0, 0x0)

1.470459769s ago: executing program 7 (id=3540):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000080605000000007f000000000a000008050001000700000005000100070000000900020073797a3000cd728f"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x7}, 0x1c)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x28482, 0x0)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24000010)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.367670267s ago: executing program 9 (id=3541):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8932, &(0x7f0000000080)={'dummy0\x00'})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'vlan1\x00', {0x6}, 0xfffe})
syz_open_procfs(0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r4 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80001)
sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040)

1.366707304s ago: executing program 8 (id=3542):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, 0x0, 0x0)

1.259500691s ago: executing program 8 (id=3543):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nci(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

1.086656246s ago: executing program 8 (id=3544):
r0 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x8)
landlock_restrict_self(r0, 0x3)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x7)
landlock_restrict_self(r1, 0xf)
landlock_restrict_self(r1, 0x6)
landlock_restrict_self(r0, 0xb)
landlock_restrict_self(r1, 0xe)
landlock_restrict_self(r1, 0xa)
landlock_restrict_self(r0, 0xe)
landlock_restrict_self(r0, 0xa)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

1.000697548s ago: executing program 8 (id=3545):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

848.69225ms ago: executing program 7 (id=3546):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300))
syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
r6 = socket(0x28, 0x80002, 0x10000000000002)
connect$rxrpc(r6, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r8, &(0x7f00000000c0)='1', 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000500)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff)

758.107999ms ago: executing program 8 (id=3547):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, 0x0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

738.603387ms ago: executing program 6 (id=3548):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
keyctl$read(0xb, r0, &(0x7f0000001940)=""/4105, 0x1009)

648.066984ms ago: executing program 7 (id=3549):
socket$nl_route(0x10, 0x3, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

627.63173ms ago: executing program 6 (id=3550):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
fsopen(&(0x7f0000000000)='tracefs\x00', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
set_mempolicy(0x5, 0x0, 0x6)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
fcntl$dupfd(r5, 0x406, r5)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x4, 0x10}, &(0x7f0000000340)=0xc)

595.176438ms ago: executing program 8 (id=3551):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0xfc}}}}, 0x9)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000080))
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x10, 0xd658, 0xffffffff, 0x1850c00, 0x0, 0x0, 0x40, 0x2}}, 0x50)
read$FUSE(r2, 0x0, 0x0)

487.848314ms ago: executing program 7 (id=3552):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

439.624098ms ago: executing program 9 (id=3553):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x8)
landlock_restrict_self(r0, 0x3)
r1 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r1, 0x7)
landlock_restrict_self(r1, 0xf)
landlock_restrict_self(r1, 0x6)
landlock_restrict_self(r0, 0xb)
landlock_restrict_self(r1, 0xe)
landlock_restrict_self(r1, 0xa)
landlock_restrict_self(r0, 0xe)
landlock_restrict_self(r0, 0xa)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

438.21063ms ago: executing program 7 (id=3554):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2003, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

305.219057ms ago: executing program 9 (id=3555):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

113.157566ms ago: executing program 7 (id=3556):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0xfc}}}}, 0x9)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000080))
ioctl$KVM_RUN(r0, 0xae80, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x10, 0xd658, 0xffffffff, 0x1850c00, 0x0, 0x0, 0x40, 0x2}}, 0x50)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 9 (id=3557):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)="1728ebfa9643d40787ded5a3920020502a952b593ea1d99fc1f319bd6b6f94eea61f29b6ddad81ea7ae403147c1245b86b7c8a7e6f5c21106e40c225eed17e288059e008589af899af581ae608240954e676030ef7a0c5bd3e4eb69c2c92294557564cbbea10bf0e1fc541", 0x6b)
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='1', 0x1)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_pts(r4, 0x400001)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r5, &(0x7f0000000200)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)
write(r2, &(0x7f0000001400)='dummy_udc.0', 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xcc, @rand_addr=' \x01\x00', 0x2}, {0xa, 0x4e23, 0x8ae5, @empty, 0x1}, r7, 0xa}}, 0x48)

kernel console output (not intermixed with test programs):

2630][T11495] veth1_macvtap: entered promiscuous mode
[  482.711748][ T2229] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.742966][ T2229] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.763265][T11488] veth0_macvtap: entered promiscuous mode
[  482.772677][ T2229] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.793324][ T2229] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.841599][T11488] veth1_macvtap: entered promiscuous mode
[  482.983223][T11495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.347241][T11495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  483.787742][T11488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.787870][ T7243] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.794363][ T7243] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.800624][ T7243] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.879931][ T7243] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.945224][T11488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  484.462718][ T7243] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.466374][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  484.466394][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  484.503699][ T7243] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.519768][ T7243] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.585936][ T7243] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.930238][T11671] netlink: 'syz.9.1871': attribute type 27 has an invalid length.
[  486.251947][ T2229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.251968][ T2229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.230488][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.230514][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.771707][ T7249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.771729][ T7249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.483663][   T39] audit: type=1326 audit(1786110252.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11681 comm="syz.8.1875" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24b7dce0d9 code=0x0
[  488.576721][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.576744][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.882131][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.882153][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.580776][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1877'.
[  489.580803][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1877'.
[  491.408401][T11715] netlink: 'syz.7.1884': attribute type 1 has an invalid length.
[  491.408437][T11715] netlink: 'syz.7.1884': attribute type 4 has an invalid length.
[  491.408451][T11715] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1884'.
[  492.951798][T11747] syz_tun: entered allmulticast mode
[  493.321535][T11747] syz_tun (unregistering): left allmulticast mode
[  493.463857][T11760] kvm: pic: non byte read
[  495.935440][T11812] netlink: 'syz.6.1919': attribute type 11 has an invalid length.
[  496.025534][ T5702] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  496.188779][ T5702] usb 8-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config
[  496.188812][ T5702] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  496.188835][ T5702] usb 8-1: config 1 has no interface number 0
[  496.191710][ T5702] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40
[  496.191741][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.191763][ T5702] usb 8-1: Product: syz
[  496.191779][ T5702] usb 8-1: Manufacturer: syz
[  496.191795][ T5702] usb 8-1: SerialNumber: syz
[  496.628329][T11823] netlink: 'syz.8.1923': attribute type 4 has an invalid length.
[  496.680770][ T5702] usb 8-1: Audio class v2/v3 interfaces need an interface association
[  496.683040][T11824] netlink: 'syz.8.1923': attribute type 4 has an invalid length.
[  497.282937][ T5702] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22
[  497.381938][ T5702] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[  497.384922][ T5702] snd_usb_pod 8-1:1.1: set_interface failed
[  497.431458][ T5702] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[  497.431678][ T5702] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71
[  497.473793][ T5702] usb 8-1: USB disconnect, device number 2
[  497.857615][T11655] udevd[11655]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  500.385048][ T7255] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.772561][T11843] ceph: No mds server is up or the cluster is laggy
[  500.879522][ T5702] libceph: connect (1)[c::]:6789 error -101
[  500.879700][ T5702] libceph: mon0 (1)[c::]:6789 connect error
[  501.139055][   T32] libceph: connect (1)[c::]:6789 error -101
[  501.139264][   T32] libceph: mon0 (1)[c::]:6789 connect error
[  501.301953][T11860] fuse: Bad value for 'fd'
[  502.000310][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1936'.
[  502.555467][   T39] audit: type=1800 audit(1786110266.310:9): pid=11877 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.7.1941" name="file0" dev="overlay" ino=112 res=0 errno=0
[  502.669870][ T7255] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.105546][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1946'.
[  503.105574][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1946'.
[  503.578781][ T7255] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.702630][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1951'.
[  504.040472][ T7255] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.339142][ T5688] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  505.540667][ T5688] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  505.540703][ T5688] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  505.540725][ T5688] usb 7-1: Product: syz
[  505.540740][ T5688] usb 7-1: SerialNumber: syz
[  505.615478][ T5688] usb 7-1: config 0 descriptor??
[  505.735394][   T32] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  505.885323][   T32] usb 9-1: Using ep0 maxpacket: 8
[  505.910951][   T32] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  505.910987][   T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.911011][   T32] usb 9-1: Product: syz
[  505.911028][   T32] usb 9-1: Manufacturer: syz
[  505.911045][   T32] usb 9-1: SerialNumber: syz
[  505.951685][   T32] usb 9-1: config 0 descriptor??
[  506.107415][ T5688] hso 7-1:0.0: Failed to find BULK eps
[  506.225106][   T32] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  506.263206][ T5688] usb 7-1: USB disconnect, device number 2
[  506.905088][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  506.905588][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  507.026000][T11949] overlay: filesystem on ./bus not supported
[  507.403078][   T32] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  507.629190][ T5703] usb 9-1: USB disconnect, device number 2
[  509.324863][T11967] input: syz1 as /devices/virtual/input/input20
[  510.012454][ T7255] bridge_slave_1: left allmulticast mode
[  510.012493][ T7255] bridge_slave_1: left promiscuous mode
[  510.012809][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.586983][ T7255] bridge_slave_0: left allmulticast mode
[  510.605668][ T7255] bridge_slave_0: left promiscuous mode
[  510.605964][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.682571][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1979'.
[  511.760955][T12020] binder: 12019:12020 ioctl c0306201 200000000040 returned -14
[  511.761672][T12020] binder: 12019:12020 ioctl c0306201 200000000640 returned -22
[  513.179186][ T7255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  513.406192][ T7255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  513.472383][ T7255] bond0 (unregistering): Released all slaves
[  513.497839][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1995'.
[  513.734791][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9
[  514.299566][ T7255] tipc: Left network mode
[  514.515592][   T38] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  514.801638][   T38] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 57, changing to 9
[  514.801677][   T38] usb 7-1: config 0 interface 0 has no altsetting 0
[  514.801709][   T38] usb 7-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[  514.801733][   T38] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.808468][   T38] usb 7-1: config 0 descriptor??
[  515.020730][   T38] usbhid 7-1:0.0: can't add hid device: -71
[  515.020877][   T38] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  515.098613][   T38] usb 7-1: USB disconnect, device number 3
[  515.580545][T12051] gadgetfs: bound to dummy_udc driver
[  516.008526][T11590] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  516.012504][    C1] gadgetfs: connected
[  516.014606][T11590] gadgetfs: disconnected
[  516.175686][    C1] gadgetfs: connected
[  516.180262][T11590] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  516.180302][T11590] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  516.180321][T11590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.488237][ T5254] 8021q: adding VLAN 0 to HW filter on device eth10
[  516.508901][    C1] gadgetfs: configuration #1
[  516.725982][T12051] gadgetfs: suspended from state 3
[  516.748844][T12051] gadgetfs: disconnected
[  516.792888][T11590] usb 2-1: USB disconnect, device number 16
[  517.115396][ T5703] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  517.414984][ T5703] usb 9-1: Using ep0 maxpacket: 8
[  517.444958][ T5703] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  517.444992][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.445014][ T5703] usb 9-1: Product: syz
[  517.445029][ T5703] usb 9-1: Manufacturer: syz
[  517.445044][ T5703] usb 9-1: SerialNumber: syz
[  517.488119][ T5703] usb 9-1: config 0 descriptor??
[  517.768019][ T5703] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  518.993529][ T5703] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  519.025916][ T5703] usb 9-1: USB disconnect, device number 3
[  520.499477][ T5254] 8021q: adding VLAN 0 to HW filter on device eth11
[  520.838361][ T5702] libceph: connect (1)[c::]:6789 error -101
[  520.901726][ T5702] libceph: mon0 (1)[c::]:6789 connect error
[  520.942943][ T5702] libceph: connect (1)[c::]:6789 error -101
[  520.943142][ T5702] libceph: mon0 (1)[c::]:6789 connect error
[  520.944254][T12145] ceph: No mds server is up or the cluster is laggy
[  521.037492][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2023'.
[  521.037519][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2023'.
[  521.279181][ T5796] libceph: connect (1)[c::]:6789 error -101
[  521.279428][ T5796] libceph: mon0 (1)[c::]:6789 connect error
[  521.355313][ T7255] hsr_slave_0: left promiscuous mode
[  521.407051][ T7255] hsr_slave_1: left promiscuous mode
[  521.412078][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.412113][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.472745][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.472775][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.844197][ T7255] veth1_macvtap: left promiscuous mode
[  521.844312][ T7255] veth0_macvtap: left promiscuous mode
[  521.880200][ T7255] veth1_vlan: left promiscuous mode
[  521.956538][ T7255] veth0_vlan: left promiscuous mode
[  523.618389][T12195] CIFS: Attempting to mount //127.0.0.1/share
[  523.740109][T12196] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  523.754996][T12195] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11
[  523.755106][T12195] CIFS: VFS: cifs_mount failed w/return code = -11
[  524.513817][ T7255] team0 (unregistering): Port device team_slave_1 removed
[  524.637689][ T7255] team0 (unregistering): Port device team_slave_0 removed
[  526.936992][ T5596] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  527.115427][ T5596] usb 10-1: Using ep0 maxpacket: 16
[  527.117833][ T5596] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  527.117858][ T5596] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  527.121267][ T5596] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  527.121299][ T5596] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.121322][ T5596] usb 10-1: Product: syz
[  527.121338][ T5596] usb 10-1: Manufacturer: syz
[  527.121354][ T5596] usb 10-1: SerialNumber: syz
[  527.469642][ T5596] usb 10-1: USB disconnect, device number 2
[  528.086474][ T7255] IPVS: stop unused estimator thread 0...
[  528.750770][ T5254] 8021q: adding VLAN 0 to HW filter on device eth12
[  528.965381][ T5596] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  529.184297][ T5596] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  529.184333][ T5596] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.184455][ T5596] usb 10-1: Product: syz
[  529.184473][ T5596] usb 10-1: Manufacturer: syz
[  529.184491][ T5596] usb 10-1: SerialNumber: syz
[  529.865499][T12289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  530.403176][ T7255] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.155439][   T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  531.355400][   T10] usb 9-1: Using ep0 maxpacket: 32
[  531.379672][   T10] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  531.379730][   T10] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  531.379759][   T10] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  531.379782][   T10] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  531.406651][   T10] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  531.406684][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.406706][   T10] usb 9-1: Product: syz
[  531.406721][   T10] usb 9-1: Manufacturer: syz
[  531.406737][   T10] usb 9-1: SerialNumber: syz
[  531.476562][ T5596] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  531.558449][   T10] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  531.558556][   T10] imon 9-1:155.0: unable to initialize intf0, err -19
[  531.558574][   T10] imon:imon_probe: failed to initialize context!
[  531.558586][   T10] imon 9-1:155.0: unable to register, err -19
[  531.761355][ T5596] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2
[  531.801146][ T5596] usb 10-1: USB disconnect, device number 3
[  531.938464][T11655] udevd[11655]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  532.822077][ T5688] usb 9-1: USB disconnect, device number 4
[  532.823466][ T7255] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.958774][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2070'.
[  533.627662][ T7255] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.219341][ T7255] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.436945][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88804e207400: rx timeout, send abort
[  535.941662][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88804e207400: abort rx timeout. Force session deactivation
[  537.257274][ T7255] bridge_slave_1: left allmulticast mode
[  537.257315][ T7255] bridge_slave_1: left promiscuous mode
[  537.257630][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.465503][ T7255] bridge_slave_0: left allmulticast mode
[  537.465544][ T7255] bridge_slave_0: left promiscuous mode
[  537.472575][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.805455][ T5703] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  538.955370][ T5703] usb 8-1: Using ep0 maxpacket: 16
[  538.958188][ T5703] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[  538.958216][ T5703] usb 8-1: config 0 has no interface number 0
[  538.958261][ T5703] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  538.958288][ T5703] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  538.961888][ T5703] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  538.961917][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.961939][ T5703] usb 8-1: Product: syz
[  538.961953][ T5703] usb 8-1: Manufacturer: syz
[  538.961967][ T5703] usb 8-1: SerialNumber: syz
[  539.078980][ T5703] usb 8-1: config 0 descriptor??
[  539.081841][T12416] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  539.082510][T12416] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  539.382395][T12416] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  539.382496][T12416] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  539.601123][ T5703] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  539.961253][ T7255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  540.090802][ T7255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  540.282219][ T7255] bond0 (unregistering): Released all slaves
[  540.548944][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  541.028274][ T7255] tipc: Left network mode
[  541.059560][ T5703] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  541.059596][ T5703] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  541.059885][ T5703] asix 8-1:0.34: probe with driver asix failed with error -71
[  541.145795][ T5703] usb 8-1: USB disconnect, device number 3
[  542.580918][T12445] bond0: (slave bond_slave_1): Releasing backup interface
[  542.603546][T12454] nvmet: adding nsid 1 to subsystem testnqn
[  542.753075][T12462] syz.9.2103 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  544.323521][ T7255] hsr_slave_0: left promiscuous mode
[  544.381589][ T7255] hsr_slave_1: left promiscuous mode
[  544.390136][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.390166][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_0
[  544.509059][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2112'.
[  544.607310][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  544.607343][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.291279][T12496] ceph: No mds server is up or the cluster is laggy
[  545.392823][ T5703] libceph: connect (1)[c::]:6789 error -101
[  545.393040][ T5703] libceph: mon0 (1)[c::]:6789 connect error
[  545.421839][ T7255] veth1_macvtap: left promiscuous mode
[  545.421941][ T7255] veth0_macvtap: left promiscuous mode
[  545.422244][ T7255] veth1_vlan: left promiscuous mode
[  545.422431][ T7255] veth0_vlan: left promiscuous mode
[  546.054725][T12508] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[  549.110992][ T7255] team0 (unregistering): Port device team_slave_1 removed
[  549.236385][ T7255] team0 (unregistering): Port device team_slave_0 removed
[  549.512709][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14
[  550.794879][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2134'.
[  550.794908][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2134'.
[  550.846172][   T32] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  551.243062][   T32] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.243124][   T32] usb 10-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00
[  551.243150][   T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.313493][   T39] audit: type=1800 audit(1786110315.070:10): pid=12578 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.6.2136" name="file0" dev="overlay" ino=332 res=0 errno=0
[  551.381002][   T32] usb 10-1: config 0 descriptor??
[  551.473174][   T32] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  551.680982][ T5254] 8021q: adding VLAN 0 to HW filter on device eth15
[  551.947662][T12586] tipc: Failed to remove unknown binding: 66,0,0/0:181494190/181494191
[  552.053046][T12586] tipc: Failed to remove unknown binding: 66,0,0/0:181494190/181494191
[  552.322675][ T5796] usb 10-1: USB disconnect, device number 4
[  553.312280][T12592] vfio-pci 0000:00:00.0: probe with driver vfio-pci failed with error -22
[  554.013410][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2153'.
[  555.249983][T12659] netlink: 'syz.8.2160': attribute type 15 has an invalid length.
[  555.250014][T12659] netlink: 11870 bytes leftover after parsing attributes in process `syz.8.2160'.
[  555.251981][T12659] netlink: 'syz.8.2160': attribute type 6 has an invalid length.
[  555.252000][T12659] netlink: 'syz.8.2160': attribute type 7 has an invalid length.
[  555.252015][T12659] netlink: 'syz.8.2160': attribute type 11 has an invalid length.
[  555.252029][T12659] netlink: 'syz.8.2160': attribute type 15 has an invalid length.
[  555.252043][T12659] netlink: 'syz.8.2160': attribute type 16 has an invalid length.
[  555.252058][T12659] netlink: 'syz.8.2160': attribute type 21 has an invalid length.
[  555.252074][T12659] netlink: 'syz.8.2160': attribute type 25 has an invalid length.
[  555.252089][T12659] netlink: 13906 bytes leftover after parsing attributes in process `syz.8.2160'.
[  555.584708][T12665] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  555.584757][T12665] overlayfs: failed to set xattr on upper
[  555.584767][T12665] overlayfs: ...falling back to redirect_dir=nofollow.
[  555.584777][T12665] overlayfs: ...falling back to index=off.
[  555.584786][T12665] overlayfs: ...falling back to uuid=null.
[  555.676646][ T7255] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.798680][T12667] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  556.157695][ T5254] 8021q: adding VLAN 0 to HW filter on device eth16
[  556.345628][ T5703] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  556.543206][ T5703] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  556.566927][ T5703] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  556.566962][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.566984][ T5703] usb 9-1: Product: syz
[  556.567000][ T5703] usb 9-1: Manufacturer: syz
[  556.567018][ T5703] usb 9-1: SerialNumber: syz
[  556.717205][ T5703] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  557.557878][ T5703] gspca_mr97310a: reg write [21] error -71
[  557.557986][ T5703] mr97310a 9-1:1.0: probe with driver mr97310a failed with error -71
[  557.690573][ T5703] usb 9-1: USB disconnect, device number 5
[  558.510097][ T7255] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.994013][ T7255] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.606641][ T5796] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  560.798164][ T5796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  560.798222][ T5796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  560.798246][ T5796] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  560.798289][ T5796] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  560.798321][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.894880][ T5796] usb 8-1: config 0 descriptor??
[  561.667546][ T5796] hid-multitouch 0003:0457:07DA.0010: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.7-1/input0
[  562.145824][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2183'.
[  562.145854][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2183'.
[  562.377886][ T7255] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.985656][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888041b4b800: rx timeout, send abort
[  563.463773][ T5796] usb 8-1: USB disconnect, device number 4
[  563.485741][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888041b4b800: abort rx timeout. Force session deactivation
[  564.076899][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2189'.
[  564.213574][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2192'.
[  564.755667][T12802] bridge_slave_1: left allmulticast mode
[  564.755705][T12802] bridge_slave_1: left promiscuous mode
[  564.756088][T12802] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.973343][T12802] bridge_slave_0: left allmulticast mode
[  564.973371][T12802] bridge_slave_0: left promiscuous mode
[  564.973574][T12802] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.744061][T12823] tipc: Failed to remove unknown binding: 66,0,0/0:3532797819/3532797820
[  565.744681][T12823] tipc: Failed to remove unknown binding: 66,0,0/0:3532797819/3532797820
[  568.874463][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  568.874583][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  569.298368][ T7255] bridge_slave_1: left allmulticast mode
[  569.298408][ T7255] bridge_slave_1: left promiscuous mode
[  569.298726][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.368228][   T38] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  569.368266][   T38] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  569.414106][   T38] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  569.649460][  T198] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  569.867467][  T198] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  569.867502][  T198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.867525][  T198] usb 7-1: Product: syz
[  569.867541][  T198] usb 7-1: Manufacturer: syz
[  569.867557][  T198] usb 7-1: SerialNumber: syz
[  569.931973][  T198] usb 7-1: config 0 descriptor??
[  570.174734][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2210'.
[  570.175313][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2210'.
[  570.285464][  T198] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  571.772168][  T198] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  571.864500][  T198] usb 7-1: USB disconnect, device number 4
[  572.670904][   T39] audit: type=1800 audit(1786110337.386:11): pid=12902 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.7.2217" name="file1" dev="overlay" ino=519 res=0 errno=0
[  572.751337][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2218'.
[  572.751368][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2218'.
[  573.676941][T12924] binder: 12923:12924 ioctl c0306201 200000000080 returned -14
[  573.678898][T12922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.682165][T12924] binder: 12923:12924 ioctl c0306201 2000000003c0 returned -14
[  573.752698][T12922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.812113][T12922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  574.200706][T12933] tipc: Failed to remove unknown binding: 66,0,0/0:1787683953/1787683954
[  574.202690][T12933] tipc: Failed to remove unknown binding: 66,0,0/0:1787683953/1787683954
[  574.278584][ T7255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  574.345125][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2231'.
[  574.385939][ T7255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  574.422716][ T7255] bond0 (unregistering): Released all slaves
[  575.124637][T12944] netlink: 'syz.6.2234': attribute type 10 has an invalid length.
[  575.124667][T12944] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2234'.
[  575.295848][ T7255] tipc: Left network mode
[  575.830222][T12944] team0: Port device geneve1 added
[  576.872067][T12971] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  576.888846][    C1] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  576.941045][ T5688] IPVS: starting estimator thread 0...
[  577.004462][T12973] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  577.004700][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  577.019401][T12971] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  577.019504][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  577.284486][T12969] IPVS: using max 8 ests per chain, 19200 per kthread
[  577.816202][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2244'.
[  578.117540][ T5254] 8021q: adding VLAN 0 to HW filter on device eth17
[  578.312784][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2246'.
[  580.126075][ T7255] hsr_slave_0: left promiscuous mode
[  580.170812][T13052] netlink: 'syz.7.2261': attribute type 39 has an invalid length.
[  580.171661][T13051] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  580.171685][T13051] overlayfs: failed to set xattr on upper
[  580.171693][T13051] overlayfs: ...falling back to redirect_dir=nofollow.
[  580.171701][T13051] overlayfs: ...falling back to index=off.
[  580.171708][T13051] overlayfs: ...falling back to uuid=null.
[  580.231553][T13054] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  580.232737][ T7255] hsr_slave_1: left promiscuous mode
[  580.258268][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.258291][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.348177][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.348208][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.605579][T13002] Bluetooth: hci4: command 0x0406 tx timeout
[  580.620313][T11490] Bluetooth: hci5: command 0x0406 tx timeout
[  580.737876][ T7255] veth1_macvtap: left promiscuous mode
[  580.737974][ T7255] veth0_macvtap: left promiscuous mode
[  580.738283][ T7255] veth1_vlan: left promiscuous mode
[  580.738430][ T7255] veth0_vlan: left promiscuous mode
[  582.101776][T13079] netlink: 'syz.8.2268': attribute type 11 has an invalid length.
[  582.801352][ T7255] team0 (unregistering): Port device team_slave_1 removed
[  582.957627][ T7255] team0 (unregistering): Port device team_slave_0 removed
[  583.925852][ T5254] 8021q: adding VLAN 0 to HW filter on device eth18
[  584.042034][T13097] binder: 13096:13097 ioctl c0306201 200000000680 returned -14
[  585.712653][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2279'.
[  585.737946][T11504] Bluetooth: hci6: command 0x0406 tx timeout
[  586.746201][T13126] binder_alloc: 13125: binder_alloc_buf size 12336 failed, no address space
[  586.746400][T13126] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  588.058570][ T7255] IPVS: stop unused estimator thread 0...
[  588.198202][ T5254] 8021q: adding VLAN 0 to HW filter on device eth19
[  589.286810][  T198] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  589.441108][  T198] usb 10-1: unable to get BOS descriptor or descriptor too short
[  589.443309][  T198] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  589.471791][  T198] usb 10-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  589.471827][  T198] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.471851][  T198] usb 10-1: Product: syz
[  589.471869][  T198] usb 10-1: Manufacturer: syz
[  589.471886][  T198] usb 10-1: SerialNumber: syz
[  589.851745][  T198] usb 10-1: unit 0 not found!
[  590.100258][  T198] usb 10-1: USB disconnect, device number 5
[  590.196613][T11656] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  590.334469][T11655] udevd[11655]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  590.345374][T11656] usb 9-1: Using ep0 maxpacket: 32
[  590.361172][T11656] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  590.361205][T11656] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  590.361241][T11656] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  590.361263][T11656] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.438028][T11656] usb 9-1: config 0 descriptor??
[  590.484093][T13193] netlink: 'syz.6.2298': attribute type 2 has an invalid length.
[  590.484122][T13193] netlink: 'syz.6.2298': attribute type 2 has an invalid length.
[  590.935134][T11656] ft260 0003:0403:6030.0012: unknown main item tag 0x0
[  590.935174][T11656] ft260 0003:0403:6030.0012: unknown main item tag 0x0
[  591.006400][ T4908] Bluetooth: hci7: command 0x0406 tx timeout
[  591.099102][T11656] ft260 0003:0403:6030.0012: chip code: 0000 0000
[  591.308552][T11656] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0
[  591.412480][ T5254] 8021q: adding VLAN 0 to HW filter on device eth20
[  591.512217][T11656] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup
[  591.513814][T11656] ft260 0003:0403:6030.0012: failed to retrieve status: -32
[  591.860266][T13185] ft260 0003:0403:6030.0012: unsupported smbus transaction size 7
[  591.861035][T13185] i2c i2c-1: adapter quirk: msg too long (addr 0x0000, size 14, write)
[  591.864688][T11656] usb 9-1: USB disconnect, device number 6
[  591.995619][T13215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer.
[  592.073822][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2304'.
[  593.269762][T13242] GUP no longer grows the stack in syz.7.2311 (13242): 200000004000-200000b36000 (200000000000)
[  593.269820][T13242] CPU: 0 UID: 0 PID: 13242 Comm: syz.7.2311 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  593.269853][T13242] Tainted: [L]=SOFTLOCKUP
[  593.269861][T13242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  593.269880][T13242] Call Trace:
[  593.269964][T13242]  <TASK>
[  593.270033][T13242]  dump_stack_lvl+0xe8/0x150
[  593.270133][T13242]  __get_user_pages+0x22b5/0x2650
[  593.270178][T13242]  ? down_read_killable+0x14c/0x220
[  593.270252][T13242]  get_user_pages_unlocked+0x1ee/0x6f0
[  593.270295][T13242]  hva_to_pfn+0x365/0xf10
[  593.270337][T13242]  ? arch_stack_walk+0xfb/0x150
[  593.270389][T13242]  ? __pfx_hva_to_pfn+0x10/0x10
[  593.270422][T13242]  ? __lock_acquire+0x6df/0x2e40
[  593.270457][T13242]  ? xa_load+0x60/0x210
[  593.270494][T13242]  ? kvm_follow_pfn+0x21a/0x3c0
[  593.270533][T13242]  __kvm_faultin_pfn+0xaa/0x100
[  593.270577][T13242]  kvm_mmu_faultin_pfn+0x73b/0x1610
[  593.270618][T13242]  ? rt_mutex_slowunlock+0x440/0xa20
[  593.270657][T13242]  ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10
[  593.270702][T13242]  kvm_tdp_page_fault+0x273/0x370
[  593.270737][T13242]  kvm_mmu_do_page_fault+0x31d/0x640
[  593.270781][T13242]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  593.270824][T13242]  ? vmx_vcpu_run+0x1035/0x2ee0
[  593.270861][T13242]  ? kvm_requeue_exception+0xd0/0x280
[  593.270902][T13242]  kvm_mmu_page_fault+0x1f2/0xaa0
[  593.270944][T13242]  ? __pfx_handle_ept_violation+0x10/0x10
[  593.270969][T13242]  vmx_handle_exit+0xfa4/0x16e0
[  593.271014][T13242]  vcpu_run+0x4cc0/0x7780
[  593.271081][T13242]  ? vcpu_run+0x293e/0x7780
[  593.271155][T13242]  ? __pfx_vcpu_run+0x10/0x10
[  593.271188][T13242]  ? lock_acquire+0x115/0x350
[  593.271242][T13242]  kvm_arch_vcpu_ioctl_run+0xe23/0x1920
[  593.271283][T13242]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920
[  593.271328][T13242]  kvm_vcpu_ioctl+0xa64/0xfe0
[  593.271371][T13242]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  593.271419][T13242]  ? do_futex+0x3e7/0x4e0
[  593.271469][T13242]  ? __fget_files+0x2a/0x420
[  593.271499][T13242]  ? __fget_files+0x3a8/0x420
[  593.271522][T13242]  ? __fget_files+0x2a/0x420
[  593.271550][T13242]  ? bpf_lsm_file_ioctl+0x9/0x20
[  593.271585][T13242]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  593.271620][T13242]  __se_sys_ioctl+0xff/0x170
[  593.271654][T13242]  do_syscall_64+0x17b/0x530
[  593.271678][T13242]  ? irqentry_exit+0x10f/0x8f0
[  593.271700][T13242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.271724][T13242]  ? clear_bhb_loop+0x40/0x90
[  593.271752][T13242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.271783][T13242] RIP: 0033:0x7f9bc7e2e0d9
[  593.271847][T13242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  593.271894][T13242] RSP: 002b:00007f9bc6086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  593.271960][T13242] RAX: ffffffffffffffda RBX: 00007f9bc80b5fa0 RCX: 00007f9bc7e2e0d9
[  593.271978][T13242] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  593.271993][T13242] RBP: 00007f9bc7ec5024 R08: 0000000000000000 R09: 0000000000000000
[  593.272008][T13242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  593.272022][T13242] R13: 00007f9bc80b6038 R14: 00007f9bc80b5fa0 R15: 00007ffdccca20a8
[  593.272060][T13242]  </TASK>
[  594.189089][T13257] overlayfs: statfs failed on './file0'
[  594.289101][T13261] tipc: Started in network mode
[  594.289168][T13261] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  594.443535][T13261] tipc: Enabled bearer <udp:syz0>, priority 10
[  594.836448][ T5701] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  595.559745][   T38] tipc: Node number set to 4269801491
[  595.575417][ T5701] usb 10-1: Using ep0 maxpacket: 8
[  595.641488][ T5701] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  595.641524][ T5701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.641546][ T5701] usb 10-1: Product: syz
[  595.641563][ T5701] usb 10-1: Manufacturer: syz
[  595.641579][ T5701] usb 10-1: SerialNumber: syz
[  595.715654][ T5701] usb 10-1: config 0 descriptor??
[  595.949985][ T5701] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  597.323392][T13313] tipc: Started in network mode
[  597.323421][T13313] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  597.344035][T13313] tipc: Enabled bearer <udp:syz0>, priority 10
[  597.397724][T13313] tipc: Enabled bearer <eth:dummy0>, priority 10
[  597.435691][T13313] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  597.435779][T13313] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  597.781114][T13313] tipc: New replicast peer: 255.255.255.255
[  598.111379][ T5701] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  598.210501][ T5701] usb 10-1: USB disconnect, device number 6
[  598.283804][T13313] tipc: Enabled bearer <udp:syz2>, priority 9
[  598.775843][ T5701] tipc: Node number set to 4269801491
[  599.735363][T13355] syzkaller0: entered promiscuous mode
[  599.735395][T13355] syzkaller0: entered allmulticast mode
[  600.911885][   T39] audit: type=1326 audit(1786110365.666:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13361 comm="syz.9.2344" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483d30e0d9 code=0x7fc00000
[  600.919745][   T39] audit: type=1326 audit(1786110365.666:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13361 comm="syz.9.2344" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f483d30e0d9 code=0x7fc00000
[  601.293765][T13369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  602.154217][T13384] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  602.154249][T13384] overlayfs: failed to set xattr on upper
[  602.154258][T13384] overlayfs: ...falling back to redirect_dir=nofollow.
[  602.154267][T13384] overlayfs: ...falling back to index=off.
[  602.154275][T13384] overlayfs: ...falling back to uuid=null.
[  602.154447][T13384] overlayfs: failed to clone lowerpath
[  602.707863][T13396] netlink: 'syz.6.2357': attribute type 39 has an invalid length.
[  604.804916][   T39] audit: type=1800 audit(1786110369.556:14): pid=13438 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.7.2367" name="file0" dev="overlay" ino=694 res=0 errno=0
[  605.155730][T13443] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  605.296736][T13457] netlink: 'syz.7.2372': attribute type 4 has an invalid length.
[  606.345333][    T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  606.506611][    T9] usb 10-1: Using ep0 maxpacket: 8
[  606.553131][    T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  606.553166][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.553189][    T9] usb 10-1: Product: syz
[  606.553205][    T9] usb 10-1: Manufacturer: syz
[  606.553221][    T9] usb 10-1: SerialNumber: syz
[  606.595092][    T9] usb 10-1: config 0 descriptor??
[  606.826711][    T9] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  608.507469][    T9] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  608.534522][    T9] usb 10-1: USB disconnect, device number 7
[  610.272098][T13540] can-isotp: uninit cfecho 00002104
[  611.485976][ T5796] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  611.537274][ T5702] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  611.645955][ T5796] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  611.645989][ T5796] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.646011][ T5796] usb 10-1: Product: syz
[  611.646026][ T5796] usb 10-1: Manufacturer: syz
[  611.646042][ T5796] usb 10-1: SerialNumber: syz
[  611.705450][ T5702] usb 7-1: Using ep0 maxpacket: 8
[  611.719611][ T5702] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  611.719667][ T5702] usb 7-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00
[  611.719693][ T5702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.792446][ T5702] usb 7-1: config 0 descriptor??
[  612.063543][   T39] audit: type=1800 audit(1786110376.816:15): pid=13583 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.8.2399" name="file0" dev="overlay" ino=725 res=0 errno=0
[  612.154912][ T5796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  612.155042][ T5796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  612.312670][ T5702] chicony 0003:04F2:0418.0013: unknown main item tag 0x0
[  612.312708][ T5702] chicony 0003:04F2:0418.0013: unknown main item tag 0x0
[  612.312735][ T5702] chicony 0003:04F2:0418.0013: unknown main item tag 0x0
[  612.312760][ T5702] chicony 0003:04F2:0418.0013: unknown main item tag 0x0
[  612.312836][ T5702] chicony 0003:04F2:0418.0013: unknown main item tag 0x0
[  612.312863][ T5702] chicony 0003:04F2:0418.0013: unknown main item tag 0x0
[  612.312891][ T5702] chicony 0003:04F2:0418.0013: unknown main item tag 0x0
[  612.312919][ T5702] chicony 0003:04F2:0418.0013: unknown main item tag 0x0
[  612.313052][ T5702] chicony 0003:04F2:0418.0013: unknown global tag 0xd
[  612.313070][ T5702] chicony 0003:04F2:0418.0013: item 0 0 1 13 parsing failed
[  612.401871][ T5702] chicony 0003:04F2:0418.0013: Chicony hid parse failed: -22
[  612.402022][ T5702] chicony 0003:04F2:0418.0013: probe with driver chicony failed with error -22
[  612.555369][T13569] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2397'.
[  612.579815][ T5596] usb 7-1: USB disconnect, device number 5
[  615.439513][ T5796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  615.440174][ T5796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  615.600115][ T5796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  615.669796][ T5796] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[  615.695130][ T5796] usb 10-1: USB disconnect, device number 8
[  617.135897][T13652] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  618.546511][T13677] binder: 13676:13677 ioctl c0306201 200000000080 returned -14
[  618.579261][T13677] binder: 13676:13677 ioctl c0306201 2000000003c0 returned -14
[  622.204303][T13717] binder_alloc: 13716: binder_alloc_buf, no vma
[  622.240499][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880202b3c00: rx timeout, send abort
[  622.243722][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805fd7a000: rx timeout, send abort
[  622.740578][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880202b3c00: abort rx timeout. Force session deactivation
[  622.744075][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805fd7a000: abort rx timeout. Force session deactivation
[  625.323678][ T5796] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  625.475940][ T5796] usb 8-1: Using ep0 maxpacket: 32
[  625.501428][ T5796] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  625.501464][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.501487][ T5796] usb 8-1: Product: syz
[  625.501502][ T5796] usb 8-1: Manufacturer: syz
[  625.501518][ T5796] usb 8-1: SerialNumber: syz
[  625.553622][ T5796] usb 8-1: config 0 descriptor??
[  626.000924][ T5796] airspy 8-1:0.0: Board ID: 00
[  626.000949][ T5796] airspy 8-1:0.0: Firmware version: 
[  626.621436][ T5796] airspy 8-1:0.0: usb_control_msg() failed -71 request 12
[  626.663416][ T5796] airspy 8-1:0.0: Registered as swradio24
[  626.663441][ T5796] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  626.689918][ T5796] usb 8-1: USB disconnect, device number 5
[  627.231845][T13789] syzkaller0: entered promiscuous mode
[  627.231873][T13789] syzkaller0: entered allmulticast mode
[  627.983957][T13805] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2462'.
[  628.178431][T13804] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2462'.
[  629.325404][ T5796] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  629.489413][ T5796] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  629.489444][ T5796] usb 8-1: config 0 has no interface number 0
[  629.489491][ T5796] usb 8-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  629.489521][ T5796] usb 8-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  630.361355][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  630.361469][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  630.441990][ T5796] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  630.442024][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.442046][ T5796] usb 8-1: Product: syz
[  630.442062][ T5796] usb 8-1: Manufacturer: syz
[  630.442078][ T5796] usb 8-1: SerialNumber: syz
[  630.553169][ T5796] usb 8-1: config 0 descriptor??
[  630.565925][T13823] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  630.566203][T13823] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  630.784668][T13823] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  630.784803][T13823] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  630.989815][ T5796] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  630.989841][ T5796] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  631.655104][   T39] audit: type=1326 audit(1786110396.406:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13845 comm="syz.6.2477" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda220fe0d9 code=0x0
[  632.629097][ T5796] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[  632.629427][ T5796] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71
[  632.702205][ T5796] usb 8-1: USB disconnect, device number 6
[  632.795416][ T5703] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  632.900430][T13866] futex_wake_op: syz.9.2485 tries to shift op by 144; fix this program
[  632.989224][ T5703] usb 9-1: Using ep0 maxpacket: 16
[  632.991809][ T5703] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.991871][ T5703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  632.991902][ T5703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  632.991926][ T5703] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  632.991949][ T5703] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  633.011133][ T5703] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  633.011746][ T5703] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  633.011813][ T5703] usb 9-1: Manufacturer: syz
[  633.084587][ T5703] usb 9-1: config 0 descriptor??
[  633.474981][   T39] audit: type=1804 audit(1786110398.206:17): pid=13873 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.6.2488" name="bus" dev="ramfs" ino=51395 res=1 errno=0
[  633.478336][ T5703] rc_core: IR keymap rc-hauppauge not found
[  633.478397][ T5703] Registered IR keymap rc-empty
[  633.478825][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.501758][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.514394][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  633.526216][ T5703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  633.555692][ T5703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input21
[  633.567983][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.616328][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.652158][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.671306][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.697807][    T9] usb 8-1: Using ep0 maxpacket: 8
[  633.698740][   T39] audit: type=1804 audit(1786110398.376:18): pid=13874 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=ToMToU comm="syz.6.2488" name="bus" dev="ramfs" ino=51395 res=1 errno=0
[  633.751739][    T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  633.751762][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.751777][    T9] usb 8-1: Product: syz
[  633.751788][    T9] usb 8-1: Manufacturer: syz
[  633.751799][    T9] usb 8-1: SerialNumber: syz
[  633.803290][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.840280][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.857266][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.875550][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.896900][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  633.897437][    T9] usb 8-1: config 0 descriptor??
[  633.946915][ T5703] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  634.093250][ T5703] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  634.093279][ T5703] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  634.121042][    T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  634.172254][ T5703] usb 9-1: USB disconnect, device number 7
[  635.936233][   T32] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  636.126216][   T32] usb 10-1: Using ep0 maxpacket: 16
[  636.151145][   T32] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  636.151180][   T32] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  636.167432][   T32] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  636.167467][   T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.167490][   T32] usb 10-1: Product: syz
[  636.167506][   T32] usb 10-1: Manufacturer: syz
[  636.167521][   T32] usb 10-1: SerialNumber: syz
[  636.239003][   T32] usb 10-1: config 0 descriptor??
[  636.247293][    T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  636.331379][   T32] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  636.331445][   T32] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  636.339698][    T9] usb 8-1: USB disconnect, device number 7
[  636.639600][T13915] dlm: no local IP address has been set
[  636.639616][T13915] dlm: cannot start dlm midcomms -107
[  636.904640][   T32] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  636.908229][   T32] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[  636.912687][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88806024b800: rx timeout, send abort
[  637.069491][T13921] cgroup: No subsys list or none specified
[  637.412752][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88806024b800: abort rx timeout. Force session deactivation
[  637.416847][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88802c655c00: rx timeout, send abort
[  637.517356][   T32] em28xx 10-1:0.0: Unknown AC97 audio processor detected!
[  637.754599][   T32] em28xx 10-1:0.0: couldn't setup AC97 register 2
[  637.758362][   T32] em28xx 10-1:0.0: couldn't setup AC97 register 4
[  637.762596][   T32] em28xx 10-1:0.0: couldn't setup AC97 register 6
[  637.771753][   T32] em28xx 10-1:0.0: couldn't setup AC97 register 54
[  637.775091][   T32] em28xx 10-1:0.0: couldn't setup AC97 register 56
[  637.816635][   T32] usb 10-1: USB disconnect, device number 9
[  637.917356][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88802c655c00: abort rx timeout. Force session deactivation
[  637.924018][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880318ac800: rx timeout, send abort
[  637.924332][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880318ac800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  638.862935][T13951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2514'.
[  639.353909][   T39] audit: type=1800 audit(1786110404.046:19): pid=13960 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.6.2516" name="memory_backed" dev="configfs" ino=50580 res=0 errno=0
[  639.353973][   T39] audit: type=1800 audit(1786110404.056:20): pid=13956 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.6.2516" name="zoned" dev="configfs" ino=51737 res=0 errno=0
[  639.429951][   T39] audit: type=1800 audit(1786110404.186:21): pid=13956 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.6.2516" name="power" dev="configfs" ino=51744 res=0 errno=0
[  639.731480][   T39] audit: type=1800 audit(1786110404.496:22): pid=13964 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.6.2516" name="zone_nr_conv" dev="configfs" ino=50584 res=0 errno=0
[  639.936306][T13956] null_blk: disk nullb1 created
[  641.148262][T13985] netlink: 'syz.8.2525': attribute type 4 has an invalid length.
[  642.321790][T14010] binder_alloc: 14009: pid 14009 spamming oneway? 1 buffers allocated for a total size of 4096
[  642.518852][T14015] tipc: Failed to remove unknown binding: 66,0,0/4269801491:3143063620/3143063622
[  642.518893][T14015] tipc: Failed to remove unknown binding: 66,0,0/4269801491:3143063620/3143063621
[  642.522907][T14015] tipc: Failed to remove unknown binding: 66,0,0/4269801491:3143063620/3143063622
[  642.522948][T14015] tipc: Failed to remove unknown binding: 66,0,0/4269801491:3143063620/3143063621
[  644.100219][    T9] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  644.141804][  T198] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  644.156712][    T9] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX)
[  644.430707][T14032] ceph: No mds server is up or the cluster is laggy
[  644.431493][T14034] ceph: No mds server is up or the cluster is laggy
[  644.431713][T14033] ceph: No mds server is up or the cluster is laggy
[  644.568068][    T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  644.568395][    T9] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  644.741684][  T198] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  644.942509][T14049] overlayfs: upper fs does not support tmpfile.
[  645.133151][ T5703] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  645.217276][ T5703] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  645.952230][T14062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  646.069935][T14063] kvm: pic: level sensitive irq not supported
[  646.070020][T14063] kvm: pic: non byte read
[  646.209409][T14063] kvm: pic: level sensitive irq not supported
[  646.209962][T14063] kvm: pic: non byte read
[  646.230382][T14063] kvm: pic: level sensitive irq not supported
[  646.230748][T14066] netlink: 'syz.7.2553': attribute type 1 has an invalid length.
[  646.230782][T14066] netlink: 'syz.7.2553': attribute type 2 has an invalid length.
[  646.311060][T14063] kvm: pic: non byte read
[  646.311554][T14063] kvm: pic: level sensitive irq not supported
[  646.311627][T14063] kvm: pic: non byte read
[  646.429698][ T4908] Bluetooth: hci5: hardware error 0x09
[  646.873476][T14073] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2555'.
[  646.951392][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2555'.
[  648.305329][  T198] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  648.458313][  T198] usb 9-1: Using ep0 maxpacket: 8
[  648.467074][  T198] usb 9-1: config 0 has no interfaces?
[  648.470052][  T198] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  648.470083][  T198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.470105][  T198] usb 9-1: Product: syz
[  648.470120][  T198] usb 9-1: Manufacturer: syz
[  648.470136][  T198] usb 9-1: SerialNumber: syz
[  648.639876][  T198] usb 9-1: config 0 descriptor??
[  648.852217][ T4908] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  651.316184][  T198] usb 9-1: USB disconnect, device number 8
[  652.403768][T14141] binder_alloc: 14140: binder_alloc_buf, no vma
[  653.335908][   T32] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  653.510394][ T5701] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  653.530472][   T32] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  653.530549][   T32] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  653.530575][   T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.639909][   T32] usb 10-1: config 0 descriptor??
[  653.652895][T14155] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  653.665397][ T5701] usb 7-1: Using ep0 maxpacket: 16
[  653.669141][ T5701] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  653.669169][ T5701] usb 7-1: config 0 has no interface number 0
[  653.669216][ T5701] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  653.669244][ T5701] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  653.672873][ T5701] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  653.672915][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.672937][ T5701] usb 7-1: Product: syz
[  653.672952][ T5701] usb 7-1: Manufacturer: syz
[  653.672967][ T5701] usb 7-1: SerialNumber: syz
[  653.737058][   T32] pwc: Askey VC010 type 2 USB webcam detected.
[  653.780041][ T5701] usb 7-1: config 0 descriptor??
[  653.781993][T14153] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  653.782210][T14153] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  653.859915][   T32] pwc: send_video_command error -71
[  653.860026][   T32] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  653.860166][   T32] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71
[  653.894725][   T32] usb 10-1: USB disconnect, device number 10
[  653.999156][T14153] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  653.999331][T14153] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  654.415293][   T32] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  654.647075][   T32] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  654.647133][   T32] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  654.647233][   T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.776877][   T32] usb 10-1: config 0 descriptor??
[  654.833259][   T32] pwc: Askey VC010 type 2 USB webcam detected.
[  655.201418][   T32] pwc: recv_control_msg error -32 req 02 val 2b00
[  655.262812][   T32] pwc: recv_control_msg error -32 req 02 val 2700
[  655.265008][   T32] pwc: recv_control_msg error -32 req 02 val 2c00
[  655.282444][   T32] pwc: recv_control_msg error -32 req 04 val 1000
[  655.283660][   T32] pwc: recv_control_msg error -32 req 04 val 1300
[  655.308427][   T32] pwc: recv_control_msg error -32 req 04 val 1400
[  655.519204][   T32] pwc: recv_control_msg error -71 req 02 val 2100
[  655.520739][   T32] pwc: recv_control_msg error -71 req 04 val 1500
[  655.521990][   T32] pwc: recv_control_msg error -71 req 02 val 2500
[  655.522648][   T32] pwc: recv_control_msg error -71 req 02 val 2400
[  655.523477][   T32] pwc: recv_control_msg error -71 req 02 val 2600
[  655.524502][   T32] pwc: recv_control_msg error -71 req 02 val 2900
[  655.577963][   T32] pwc: recv_control_msg error -71 req 02 val 2800
[  655.579109][   T32] pwc: recv_control_msg error -71 req 04 val 1100
[  655.581693][   T32] pwc: recv_control_msg error -71 req 04 val 1200
[  655.697958][ T5701] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  655.793662][   T32] pwc: Registered as video103.
[  655.827669][   T32] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input22
[  655.872341][   T32] usb 10-1: USB disconnect, device number 11
[  656.127734][ T5701] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71
[  656.178839][ T5701] asix 7-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus
[  656.180277][ T5701] asix 7-1:0.251: probe with driver asix failed with error -5
[  656.228263][ T5701] usb 7-1: USB disconnect, device number 6
[  656.473666][T14174] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  656.473666][T14174] The task syz.9.2584 (14174) triggered the difference, watch for misbehavior.
[  656.587100][   T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  656.757853][   T10] usb 8-1: Using ep0 maxpacket: 16
[  656.760578][   T10] usb 8-1: config index 0 descriptor too short (expected 37359, got 202)
[  656.760608][   T10] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  656.760631][   T10] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  656.760652][   T10] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95
[  656.763320][   T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  656.763350][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.763384][   T10] usb 8-1: Product: syz
[  656.763395][   T10] usb 8-1: Manufacturer: syz
[  656.763406][   T10] usb 8-1: SerialNumber: syz
[  656.869861][   T10] usb 8-1: 0:2 : does not exist
[  657.095865][   T10] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  657.198493][   T10] usb 8-1: USB disconnect, device number 8
[  657.419514][T11655] udevd[11655]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  657.581787][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2589'.
[  658.045034][   T39] audit: type=1800 audit(1786110422.796:23): pid=14202 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.9.2595" name="zoned" dev="configfs" ino=51195 res=0 errno=0
[  658.069869][   T39] audit: type=1800 audit(1786110422.826:24): pid=14202 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.9.2595" name="memory_backed" dev="configfs" ino=51196 res=0 errno=0
[  658.071375][   T39] audit: type=1800 audit(1786110422.826:25): pid=14202 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.9.2595" name="zone_nr_conv" dev="configfs" ino=51197 res=0 errno=0
[  658.072878][   T39] audit: type=1800 audit(1786110422.826:26): pid=14202 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.9.2595" name="power" dev="configfs" ino=51198 res=0 errno=0
[  658.568297][T14213] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967294 (8589934588 ns) > initial count (88 ns). Using initial count to start timer.
[  659.875470][   T32] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  660.005518][T14239] fuse: Bad value for 'fd'
[  660.040066][T14242] binder_alloc: 14240: pid 14240 spamming oneway? 1 buffers allocated for a total size of 4096
[  660.061391][T14242] binder_alloc: 14240: pid 14240 spamming oneway? 2 buffers allocated for a total size of 5120
[  660.245331][   T32] usb 7-1: Using ep0 maxpacket: 16
[  660.249540][   T32] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  660.249570][   T32] usb 7-1: config 0 has no interface number 0
[  660.250468][   T32] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  660.250500][   T32] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  660.253078][   T32] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  660.253114][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.253134][   T32] usb 7-1: Product: syz
[  660.253149][   T32] usb 7-1: Manufacturer: syz
[  660.253163][   T32] usb 7-1: SerialNumber: syz
[  660.382739][   T32] usb 7-1: config 0 descriptor??
[  660.383675][T14232] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  660.383807][T14232] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  660.645712][T14232] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  660.645846][T14232] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  660.729501][T14252] openvswitch: netlink: Missing key (keys=40, expected=100)
[  660.848664][   T32] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  660.931852][T14255] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  660.995534][T13280] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  661.135362][T13280] usb 9-1: device descriptor read/64, error -71
[  662.136946][T13280] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  662.286022][T13280] usb 9-1: device descriptor read/64, error -71
[  662.407104][T13280] usb usb9-port1: attempt power cycle
[  662.855887][T13280] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  662.879878][T13280] usb 9-1: device descriptor read/8, error -71
[  663.125390][T13280] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  663.147828][T13280] usb 9-1: device descriptor read/8, error -71
[  663.257996][T13280] usb usb9-port1: unable to enumerate USB device
[  663.374266][   T32] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  663.374569][   T32] asix 7-1:0.34: probe with driver asix failed with error -71
[  663.409560][   T32] usb 7-1: USB disconnect, device number 7
[  665.015435][   T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  665.179037][   T10] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  665.179073][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.179094][   T10] usb 10-1: Product: syz
[  665.179109][   T10] usb 10-1: Manufacturer: syz
[  665.195472][   T10] usb 10-1: SerialNumber: syz
[  665.799216][   T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  665.799284][   T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  666.147587][    T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  666.306871][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.306991][    T9] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  666.307018][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.362628][    T9] usb 8-1: config 0 descriptor??
[  666.399358][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  666.630515][    T9] pwc: send_video_command error -71
[  666.631092][    T9] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  666.632456][    T9] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71
[  666.747605][    T9] usb 8-1: USB disconnect, device number 9
[  667.026632][   T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  667.265375][    T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  667.427602][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.427655][    T9] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  667.427720][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.434428][   T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO
[  667.435433][   T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  667.435502][   T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  667.436429][   T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  667.514200][   T10] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[  667.538919][   T10] usb 10-1: USB disconnect, device number 12
[  667.563263][    T9] usb 8-1: config 0 descriptor??
[  667.587508][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  667.989870][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  667.990986][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  667.991909][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  667.993039][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  667.994007][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  667.994972][    T9] pwc: recv_control_msg error -32 req 04 val 1400
[  668.036381][    T9] pwc: recv_control_msg error -32 req 02 val 2000
[  668.038494][    T9] pwc: recv_control_msg error -32 req 02 val 2100
[  668.240936][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  668.242465][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  668.245704][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  668.247043][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  668.247586][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  668.249970][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  668.250992][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  668.344371][    T9] pwc: Registered as video103.
[  668.354121][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input23
[  668.434902][    T9] usb 8-1: USB disconnect, device number 10
[  668.769815][T14329] binder: BINDER_SET_CONTEXT_MGR already set
[  668.769832][T14329] binder: 14328:14329 ioctl 4018620d 200000000100 returned -16
[  668.789794][T14329] binder: BINDER_SET_CONTEXT_MGR already set
[  668.789810][T14329] binder: 14328:14329 ioctl 4018620d 200000004a80 returned -16
[  669.189217][ T4908] Bluetooth: hci7: unexpected subevent 0x0e length: 30 > 15
[  669.189290][ T4908] Bluetooth: hci7: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  670.145614][    T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  670.295390][    T9] usb 8-1: Using ep0 maxpacket: 16
[  670.300382][    T9] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  670.300415][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.300437][    T9] usb 8-1: Product: syz
[  670.300453][    T9] usb 8-1: Manufacturer: syz
[  670.300468][    T9] usb 8-1: SerialNumber: syz
[  672.022682][    T9] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71
[  672.120877][    T9] usb 8-1: USB disconnect, device number 11
[  672.861051][T14404] netlink: 'syz.9.2662': attribute type 25 has an invalid length.
[  674.607148][T14413] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  676.991930][T14455] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2686'.
[  677.119531][T14459] syzkaller0: entered promiscuous mode
[  677.119561][T14459] syzkaller0: entered allmulticast mode
[  677.748630][T14464] netlink: 'syz.7.2680': attribute type 4 has an invalid length.
[  677.777466][T14463] netlink: 'syz.7.2680': attribute type 4 has an invalid length.
[  678.125441][ T5796] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  678.185390][ T5596] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  678.319865][ T5796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.319903][ T5796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.319930][ T5796] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  678.319976][ T5796] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  678.320001][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.338070][ T5596] usb 9-1: Using ep0 maxpacket: 32
[  678.354059][ T5596] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  678.354142][ T5596] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  678.354214][ T5596] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  678.354374][ T5596] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  678.354431][ T5596] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  678.354505][ T5596] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  678.354583][ T5596] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  678.354617][ T5596] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.510567][ T5796] usb 8-1: config 0 descriptor??
[  678.557879][ T5596] usb 9-1: config 0 descriptor??
[  678.790539][ T5596] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  678.824647][ T5596] usb 9-1: USB disconnect, device number 13
[  679.023759][ T5596] usblp0: removed
[  679.032340][T14480] program syz.6.2685 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  679.167514][ T5796] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  679.377330][T14483] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2682'.
[  679.380518][T14483] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2682'.
[  679.535828][ T5596] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  679.631122][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2688'.
[  679.686784][ T5596] usb 9-1: Using ep0 maxpacket: 32
[  679.694193][ T5596] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  679.694216][ T5596] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  679.694231][ T5596] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  679.694269][ T5596] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  679.694329][ T5596] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  679.694355][ T5596] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  679.694389][ T5596] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  679.694407][ T5596] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.852216][ T5596] usb 9-1: config 0 descriptor??
[  680.335509][ T5596] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  680.686710][ T5596] usb 9-1: USB disconnect, device number 14
[  680.693689][ T5596] usblp1: removed
[  681.280800][T14497] netlink: 'syz.7.2691': attribute type 10 has an invalid length.
[  681.294771][T14497] 8021q: adding VLAN 0 to HW filter on device team0
[  681.298578][T14497] bond0: (slave team0): Enslaving as an active interface with an up link
[  681.398642][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2690'.
[  681.398666][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2690'.
[  682.789739][  T198] usb 8-1: USB disconnect, device number 12
[  684.625341][T14523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  684.728188][ T5796] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  684.905463][ T5796] usb 9-1: Using ep0 maxpacket: 8
[  684.922328][ T5796] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  684.922362][ T5796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.922539][ T5796] usb 9-1: Product: syz
[  684.922557][ T5796] usb 9-1: Manufacturer: syz
[  684.922574][ T5796] usb 9-1: SerialNumber: syz
[  684.970880][ T5796] usb 9-1: config 0 descriptor??
[  685.095415][   T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  685.191954][ T5796] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  685.246968][   T10] usb 7-1: Using ep0 maxpacket: 16
[  685.259472][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  685.264529][   T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  685.264562][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.264584][   T10] usb 7-1: Product: syz
[  685.264600][   T10] usb 7-1: Manufacturer: syz
[  685.264615][   T10] usb 7-1: SerialNumber: syz
[  685.316044][   T10] usb 7-1: config 0 descriptor??
[  685.355127][   T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  685.355327][   T10] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  685.456891][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2703'.
[  685.456921][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2703'.
[  686.022223][   T10] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  686.539873][   T10] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  686.540012][   T10] em28xx 7-1:0.0: board has no eeprom
[  686.679372][ T5796] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  686.825285][ T5796] usb 9-1: USB disconnect, device number 15
[  686.935709][   T10] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  686.935740][   T10] em28xx 7-1:0.0: dvb set to bulk mode.
[  687.029493][  T198] em28xx 7-1:0.0: Binding DVB extension
[  688.406903][T14530] em28xx 7-1:0.0: writing to i2c device at 0xe failed (error=-5)
[  688.662550][ T5796] usb 7-1: USB disconnect, device number 8
[  688.665845][ T5796] em28xx 7-1:0.0: Disconnecting em28xx
[  688.883081][  T198] em28xx 7-1:0.0: Registering input extension
[  688.884769][ T5796] em28xx 7-1:0.0: Closing input extension
[  689.470230][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2714'.
[  689.470250][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2714'.
[  689.724874][T14589] netlink: 'syz.9.2715': attribute type 10 has an invalid length.
[  689.757676][T14589] 8021q: adding VLAN 0 to HW filter on device team0
[  689.761688][T14589] bond0: (slave team0): Enslaving as an active interface with an up link
[  690.680727][ T5596] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  690.847868][ T5596] usb 10-1: Using ep0 maxpacket: 8
[  690.878568][ T5596] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  690.878603][ T5596] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.878626][ T5596] usb 10-1: Product: syz
[  690.878641][ T5596] usb 10-1: Manufacturer: syz
[  690.878658][ T5596] usb 10-1: SerialNumber: syz
[  690.986073][ T5596] usb 10-1: config 0 descriptor??
[  691.179743][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  691.179863][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  691.255425][ T5596] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  691.491289][ T5796] em28xx: Freeing device
[  691.753090][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2724'.
[  692.003106][T14611] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2725'.
[  692.129788][T14614] netlink: 'syz.6.2726': attribute type 2 has an invalid length.
[  692.129813][T14614] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2726'.
[  692.207449][T14614] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2726'.
[  692.376929][T14614] team0: Port device team_slave_1 removed
[  692.690770][ T5596] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  692.698935][ T5596] usb 10-1: USB disconnect, device number 13
[  693.945565][  T198] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  694.115530][  T198] usb 10-1: Using ep0 maxpacket: 32
[  694.149074][  T198] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  694.149107][  T198] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  694.149131][  T198] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  694.149210][  T198] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  694.149235][  T198] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  694.149262][  T198] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  694.149309][  T198] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  694.149336][  T198] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.272376][  T198] usb 10-1: config 0 descriptor??
[  694.555960][  T198] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  694.609050][  T198] usb 10-1: USB disconnect, device number 14
[  694.631355][  T198] usblp0: removed
[  694.644310][T14653] netlink: 'syz.8.2737': attribute type 2 has an invalid length.
[  694.644332][T14653] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2737'.
[  694.703214][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2737'.
[  695.063178][  T198] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  695.146673][T14654] team0: Port device team_slave_1 removed
[  695.275361][  T198] usb 10-1: Using ep0 maxpacket: 32
[  695.284326][  T198] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  695.284355][  T198] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  695.284379][  T198] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  695.284432][  T198] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  695.284455][  T198] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  695.284482][  T198] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  695.284525][  T198] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  695.284549][  T198] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.374414][  T198] usb 10-1: config 0 descriptor??
[  696.824772][  T198] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  696.844060][  T198] usb 10-1: USB disconnect, device number 15
[  696.858713][  T198] usblp0: removed
[  697.564148][T14675] binder: 14674:14675 ioctl c0306201 200000000080 returned -14
[  697.590914][T14675] binder: BINDER_SET_CONTEXT_MGR already set
[  697.590926][T14675] binder: 14674:14675 ioctl 4018620d 200000000040 returned -16
[  697.592666][T14675] binder: 14674:14675 ioctl c0306201 2000000003c0 returned -14
[  697.862288][T14680] binder: 14676:14680 ioctl c0306201 200000000480 returned -14
[  698.745396][T13280] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  698.948747][T13280] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  698.952312][T13280] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01
[  698.952600][T13280] usb 8-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1
[  698.952626][T13280] usb 8-1: Product: syz
[  698.952721][T13280] usb 8-1: Manufacturer: syz
[  698.952739][T13280] usb 8-1: SerialNumber: syz
[  699.071328][T13280] em28xx 8-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0)
[  699.071367][T13280] em28xx 8-1:1.0: DVB interface 0 found: bulk
[  699.702462][T13280] em28xx 8-1:1.0: unknown em28xx chip ID (0)
[  701.127984][ T5596] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  701.255978][ T5596] usb 10-1: device descriptor read/64, error -71
[  701.443437][T13280] em28xx 8-1:1.0: failed to get i2c transfer status from bridge register (error=-5)
[  701.443473][T13280] em28xx 8-1:1.0: board has no eeprom
[  701.495383][ T5596] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  701.506928][T13280] em28xx 8-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44)
[  701.507033][T13280] em28xx 8-1:1.0: dvb set to bulk mode.
[  701.507209][   T32] em28xx 8-1:1.0: Binding DVB extension
[  701.571075][T13280] usb 8-1: USB disconnect, device number 13
[  701.625370][ T5596] usb 10-1: device descriptor read/64, error -71
[  701.695320][T13280] em28xx 8-1:1.0: Disconnecting em28xx
[  701.735655][ T5596] usb usb10-port1: attempt power cycle
[  701.761341][   T32] em28xx 8-1:1.0: writing to i2c device at 0x1e failed (error=-19)
[  701.761364][   T32] zl10353_read_register: readreg error (reg=127, ret==-19)
[  701.761392][   T32] em28xx 8-1:1.0: frontend initialization failed
[  701.761628][   T32] em28xx 8-1:1.0: Remote control support is not available for this card.
[  701.761682][T13280] em28xx 8-1:1.0: Closing input extension
[  702.063488][T13280] em28xx: Freeing device
[  702.095343][ T5596] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  702.122288][ T5596] usb 10-1: device descriptor read/8, error -71
[  702.137123][  T198] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  702.288577][  T198] usb 7-1: Using ep0 maxpacket: 16
[  702.328275][  T198] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  702.328308][  T198] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  702.364327][  T198] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  702.364368][  T198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.364390][  T198] usb 7-1: Product: syz
[  702.364406][  T198] usb 7-1: Manufacturer: syz
[  702.364421][  T198] usb 7-1: SerialNumber: syz
[  702.390273][ T5596] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  702.422524][ T5596] usb 10-1: device descriptor read/8, error -71
[  702.445088][  T198] usb 7-1: config 0 descriptor??
[  702.482643][  T198] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  702.482682][  T198] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  702.525954][ T5596] usb usb10-port1: unable to enumerate USB device
[  703.068159][  T198] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  703.068965][  T198] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  703.693033][  T198] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  704.330176][  T198] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  704.333989][  T198] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  704.337703][  T198] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  704.344499][  T198] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  704.408196][  T198] usb 7-1: USB disconnect, device number 9
[  705.227707][T14755] netlink: 'syz.7.2775': attribute type 16 has an invalid length.
[  705.793671][T14765] binder: 14762:14765 ioctl c0306201 200000000480 returned -14
[  708.488691][  T198] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  708.652341][T14800] binder: 14797:14800 ioctl c0306201 200000000480 returned -14
[  708.711852][  T198] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  708.711903][  T198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.711942][  T198] usb 7-1: Product: syz
[  708.711973][  T198] usb 7-1: Manufacturer: syz
[  708.712011][  T198] usb 7-1: SerialNumber: syz
[  709.476155][  T198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  709.476216][  T198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  709.646281][ T5796] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  709.820569][ T5796] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  709.820603][ T5796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.820625][ T5796] usb 9-1: Product: syz
[  709.820640][ T5796] usb 9-1: Manufacturer: syz
[  709.820657][ T5796] usb 9-1: SerialNumber: syz
[  710.310961][ T4908] Bluetooth: hci7: unexpected event for opcode 0x1003
[  710.342577][ T5796] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  710.342633][ T5796] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  710.702296][  T198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  710.703220][  T198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  711.338627][  T198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO
[  711.338692][  T198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  711.339554][  T198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  711.414917][  T198] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  711.450794][  T198] usb 7-1: USB disconnect, device number 10
[  711.986394][ T5796] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO
[  711.986462][ T5796] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  711.987408][ T5796] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  712.042939][ T5796] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[  712.135425][ T5796] usb 9-1: USB disconnect, device number 16
[  713.028543][ T5796] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  714.370737][ T4908] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[  714.371597][ T4908] Bluetooth: hci7: Injecting HCI hardware error event
[  714.375510][T11504] Bluetooth: hci7: hardware error 0x00
[  714.385312][ T5796] usb 9-1: Using ep0 maxpacket: 8
[  714.412290][ T5796] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  714.412326][ T5796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.412341][ T5796] usb 9-1: Product: syz
[  714.412352][ T5796] usb 9-1: Manufacturer: syz
[  714.412362][ T5796] usb 9-1: SerialNumber: syz
[  714.453466][ T5796] usb 9-1: config 0 descriptor??
[  714.707465][ T5796] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  715.559157][T14856] netlink: 'syz.7.2816': attribute type 4 has an invalid length.
[  716.036385][   T32] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  716.327451][   T32] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  716.330621][   T32] usb 8-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  716.330644][   T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.330704][   T32] usb 8-1: Product: syz
[  716.330715][   T32] usb 8-1: Manufacturer: syz
[  716.330728][   T32] usb 8-1: SerialNumber: syz
[  716.478162][   T32] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  716.506915][   T10] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  716.538318][T14875] CIFS: Attempting to mount //127.0.0.1/share
[  716.659093][   T10] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  716.659125][   T10] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  716.659149][   T10] usb 10-1: config 220 has no interface number 2
[  716.659222][   T10] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  716.659251][   T10] usb 10-1: config 220 interface 0 has no altsetting 0
[  716.659269][   T10] usb 10-1: config 220 interface 76 has no altsetting 0
[  716.659293][   T10] usb 10-1: config 220 interface 1 has no altsetting 0
[  716.663881][   T10] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  716.663916][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.663939][   T10] usb 10-1: Product: syz
[  716.663955][   T10] usb 10-1: Manufacturer: syz
[  716.663970][   T10] usb 10-1: SerialNumber: syz
[  716.711248][T11504] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[  716.799143][ T5796] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  716.841196][ T5796] usb 9-1: USB disconnect, device number 17
[  717.057652][   T10] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  717.057714][   T10] uvcvideo 10-1:220.0: No valid video chain found.
[  717.057875][   T10] usb 10-1: selecting invalid altsetting 0
[  717.221195][   T10] usb 10-1: selecting invalid altsetting 0
[  717.221237][   T10] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[  717.239213][   T10] usb 10-1: USB disconnect, device number 20
[  717.621748][T14875] CIFS: VFS: Error connecting to socket. Aborting operation.
[  717.621811][T14875] CIFS: VFS: cifs_mount failed w/return code = -4
[  717.671185][   T32] gspca_mr97310a: reg write [21] error -71
[  717.671282][   T32] mr97310a 8-1:1.0: probe with driver mr97310a failed with error -71
[  717.699341][   T32] usb 8-1: USB disconnect, device number 14
[  718.486804][T14899] cgroup: No subsys list or none specified
[  720.945335][   T32] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  721.194481][   T32] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[  721.194518][   T32] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  721.194534][   T32] usb 8-1: config 220 has no interface number 2
[  721.194590][   T32] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  721.194611][   T32] usb 8-1: config 220 interface 0 has no altsetting 0
[  721.194624][   T32] usb 8-1: config 220 interface 76 has no altsetting 0
[  721.194640][   T32] usb 8-1: config 220 interface 1 has no altsetting 0
[  721.273024][   T32] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  721.273049][   T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.273064][   T32] usb 8-1: Product: syz
[  721.273075][   T32] usb 8-1: Manufacturer: syz
[  721.273085][   T32] usb 8-1: SerialNumber: syz
[  721.697196][   T32] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  721.697222][   T32] uvcvideo 8-1:220.0: No valid video chain found.
[  721.697268][   T32] usb 8-1: selecting invalid altsetting 0
[  721.814782][   T32] usb 8-1: selecting invalid altsetting 0
[  721.814812][   T32] usbtest 8-1:220.1: probe with driver usbtest failed with error -22
[  721.844344][   T32] usb 8-1: USB disconnect, device number 15
[  724.965323][   T32] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  725.125388][   T32] usb 9-1: Using ep0 maxpacket: 16
[  725.128877][   T32] usb 9-1: config 0 interface 0 has no altsetting 0
[  725.128907][   T32] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  725.128925][   T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.135058][   T32] usb 9-1: config 0 descriptor??
[  725.874727][    C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[  726.136733][ T5701] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  726.337934][ T5701] usb 7-1: Using ep0 maxpacket: 16
[  726.362509][ T5701] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  726.362550][ T5701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  726.362571][ T5701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  726.362629][ T5701] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  726.362647][ T5701] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  726.364629][ T5701] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  726.365012][ T5701] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  726.365029][ T5701] usb 7-1: Manufacturer: syz
[  726.562941][ T5701] usb 7-1: config 0 descriptor??
[  726.870862][   T32] usbhid 9-1:0.0: can't add hid device: -71
[  726.870994][   T32] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  726.928049][ T5701] rc_core: IR keymap rc-hauppauge not found
[  726.928071][ T5701] Registered IR keymap rc-empty
[  726.928230][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  726.943706][   T32] usb 9-1: USB disconnect, device number 18
[  726.948690][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  726.992779][ T5701] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  727.076302][ T5701] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input29
[  727.207453][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.236630][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.253034][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.267544][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.290899][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.305448][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.337216][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.355306][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.382830][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.404473][ T5701] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  727.553558][ T5701] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  727.553587][ T5701] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  727.594089][ T5701] usb 7-1: USB disconnect, device number 11
[  730.370339][T15030] ceph: No mds server is up or the cluster is laggy
[  730.370374][T15029] ceph: No mds server is up or the cluster is laggy
[  730.378440][T15033] ceph: No mds server is up or the cluster is laggy
[  733.230556][T15074] binder_alloc: 15070: binder_alloc_buf, no vma
[  733.653129][ T5596] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  733.821168][ T5596] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  733.827326][  T198] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  734.102918][ T5596] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  734.108080][  T198] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  734.161719][ T5596] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  734.232704][T15089] binder_alloc: 15088: binder_alloc_buf, no vma
[  734.290431][T15077] ceph: No mds server is up or the cluster is laggy
[  734.294803][T15079] ceph: No mds server is up or the cluster is laggy
[  734.328166][T15076] ceph: No mds server is up or the cluster is laggy
[  735.506252][   T39] audit: type=1326 audit(1786110500.256:27): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15107 comm="syz.6.2886" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda220fe0d9 code=0x0
[  737.985451][ T5701] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[  738.148450][ T5701] usb 10-1: unable to get BOS descriptor or descriptor too short
[  738.149057][ T5701] usb 10-1: not running at top speed; connect to a high speed hub
[  738.150339][ T5701] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 4
[  738.154266][ T5701] usb 10-1: string descriptor 0 read error: -22
[  738.154388][ T5701] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40
[  738.154407][ T5701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.235551][ T5701] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  738.478504][T15156] fuse: Bad value for 'rootmode'
[  738.513955][ T5701] usb 10-1: unit 2 not found!
[  738.753155][T15164] tipc: Failed to remove unknown binding: 66,0,0/4269801491:2727342536/2727342538
[  738.753202][T15164] tipc: Failed to remove unknown binding: 66,0,0/4269801491:2727342536/2727342537
[  738.757085][T15164] tipc: Failed to remove unknown binding: 66,0,0/4269801491:2727342536/2727342538
[  738.757127][T15164] tipc: Failed to remove unknown binding: 66,0,0/4269801491:2727342536/2727342537
[  739.920063][ T5701] usb 10-1: USB disconnect, device number 21
[  742.929208][T15232] netlink: 'syz.8.2924': attribute type 1 has an invalid length.
[  742.929233][T15232] netlink: 'syz.8.2924': attribute type 2 has an invalid length.
[  742.936774][T11504] Bluetooth: hci6: hardware error 0x09
[  743.980913][T15243] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2928'.
[  744.661969][   T39] audit: type=1326 audit(1786110509.396:28): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15250 comm="syz.7.2930" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bc7e2e0d9 code=0x0
[  745.330069][T11504] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  746.071164][   T39] audit: type=1326 audit(1786110510.826:29): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15278 comm="syz.8.2942" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24b7dce0d9 code=0x0
[  747.392940][T15296] binder_alloc: 15295: binder_alloc_buf, no vma
[  748.132376][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2952'.
[  748.166797][  T198] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  748.316378][  T198] usb 9-1: Using ep0 maxpacket: 8
[  748.320839][  T198] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  748.320862][  T198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.320877][  T198] usb 9-1: Product: syz
[  748.320887][  T198] usb 9-1: Manufacturer: syz
[  748.320898][  T198] usb 9-1: SerialNumber: syz
[  748.336251][  T198] usb 9-1: config 0 descriptor??
[  748.557180][T15324] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[  748.607351][  T198] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  748.632655][T15324] dvmrp0: entered allmulticast mode
[  748.826187][   T32] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  748.976308][   T32] usb 10-1: Using ep0 maxpacket: 16
[  748.983505][   T32] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  748.983538][   T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.983561][   T32] usb 10-1: Product: syz
[  748.983576][   T32] usb 10-1: Manufacturer: syz
[  748.983593][   T32] usb 10-1: SerialNumber: syz
[  749.120065][T15330] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2960'.
[  750.144531][  T198] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  750.210244][  T198] usb 9-1: USB disconnect, device number 19
[  750.732330][   T32] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71
[  750.764098][   T32] usb 10-1: USB disconnect, device number 22
[  752.625742][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  752.625865][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  752.826354][  T198] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  752.995757][  T198] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  752.995820][  T198] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  752.995847][  T198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.131643][  T198] usb 7-1: config 0 descriptor??
[  753.151199][  T198] pwc: Askey VC010 type 2 USB webcam detected.
[  753.419172][  T198] pwc: send_video_command error -71
[  753.419196][  T198] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  753.419378][  T198] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  753.571937][  T198] usb 7-1: USB disconnect, device number 12
[  754.110079][  T198] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  754.131672][T15402] netlink: 'syz.9.2982': attribute type 4 has an invalid length.
[  754.206768][T15405] netlink: 'syz.9.2982': attribute type 4 has an invalid length.
[  754.272403][  T198] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  754.272466][  T198] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  754.272492][  T198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.348246][  T198] usb 7-1: config 0 descriptor??
[  754.413611][  T198] pwc: Askey VC010 type 2 USB webcam detected.
[  754.813776][  T198] pwc: recv_control_msg error -32 req 02 val 2b00
[  754.824966][  T198] pwc: recv_control_msg error -32 req 02 val 2700
[  754.833173][  T198] pwc: recv_control_msg error -32 req 02 val 2c00
[  754.843754][  T198] pwc: recv_control_msg error -32 req 04 val 1000
[  754.852223][  T198] pwc: recv_control_msg error -32 req 04 val 1300
[  754.861772][  T198] pwc: recv_control_msg error -32 req 04 val 1400
[  755.079757][  T198] pwc: recv_control_msg error -71 req 02 val 2100
[  755.087806][  T198] pwc: recv_control_msg error -71 req 04 val 1500
[  755.089160][  T198] pwc: recv_control_msg error -71 req 02 val 2500
[  755.090269][  T198] pwc: recv_control_msg error -71 req 02 val 2400
[  755.092791][  T198] pwc: recv_control_msg error -71 req 02 val 2600
[  755.122929][  T198] pwc: recv_control_msg error -71 req 02 val 2900
[  755.170479][  T198] pwc: recv_control_msg error -71 req 02 val 2800
[  755.171272][  T198] pwc: recv_control_msg error -71 req 04 val 1100
[  755.189134][  T198] pwc: recv_control_msg error -71 req 04 val 1200
[  755.214825][T15413] MTD: Couldn't look up './dev/mtdblock0': -2
[  755.235315][  T198] pwc: Registered as video103.
[  755.249725][  T198] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input30
[  755.357595][  T198] usb 7-1: USB disconnect, device number 13
[  755.995985][ T5596] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  756.170265][ T5596] usb 10-1: Using ep0 maxpacket: 16
[  756.191220][ T5596] usb 10-1: config 0 has an invalid interface number: 251 but max is 0
[  756.191252][ T5596] usb 10-1: config 0 has no interface number 0
[  756.191300][ T5596] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  756.191330][ T5596] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  756.238927][ T5596] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  756.238963][ T5596] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.238986][ T5596] usb 10-1: Product: syz
[  756.239002][ T5596] usb 10-1: Manufacturer: syz
[  756.239018][ T5596] usb 10-1: SerialNumber: syz
[  756.306499][ T5596] usb 10-1: config 0 descriptor??
[  756.320976][T15419] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  756.322590][T15419] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  756.581960][T15419] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  756.582153][T15419] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  757.203630][ T1414] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.226924][ T5596] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  758.667777][ T5596] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71
[  758.716181][T15446] netlink: 'syz.6.2994': attribute type 4 has an invalid length.
[  758.768432][T15447] netlink: 'syz.6.2994': attribute type 4 has an invalid length.
[  758.790322][ T5596] asix 10-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus
[  758.792781][ T5596] asix 10-1:0.251: probe with driver asix failed with error -5
[  758.821941][ T5596] usb 10-1: USB disconnect, device number 23
[  758.975941][ T1414] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.188737][ T1414] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.824790][   T38] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  761.145279][   T38] usb 10-1: Using ep0 maxpacket: 8
[  761.185907][   T38] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  761.185943][   T38] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.185968][   T38] usb 10-1: Product: syz
[  761.185986][   T38] usb 10-1: Manufacturer: syz
[  761.186003][   T38] usb 10-1: SerialNumber: syz
[  761.237232][   T38] usb 10-1: config 0 descriptor??
[  761.391897][ T1414] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.446310][   T38] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  761.762989][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3007'.
[  762.066121][T15485] netlink: 'syz.8.3008': attribute type 4 has an invalid length.
[  762.092348][T15489] netlink: 'syz.8.3008': attribute type 4 has an invalid length.
[  762.961764][   T38] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  763.004334][   T38] usb 10-1: USB disconnect, device number 24
[  764.174842][T15517] IPVS: rr: TCP 127.0.0.1:5376 - no destination available
[  765.339050][    C1] IPVS: rr: TCP 127.0.0.1:5376 - no destination available
[  767.283267][T15558] MTD: Couldn't look up './dev/mtdblock0': -2
[  767.284457][ T1414] bridge_slave_1: left allmulticast mode
[  767.284496][ T1414] bridge_slave_1: left promiscuous mode
[  767.284854][ T1414] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.537775][ T1414] bridge_slave_0: left allmulticast mode
[  767.537818][ T1414] bridge_slave_0: left promiscuous mode
[  767.542353][ T1414] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.788262][ T1414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  769.867697][ T1414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  769.921470][ T1414] bond0 (unregistering): Released all slaves
[  770.224585][ T5254] 8021q: adding VLAN 0 to HW filter on device eth21
[  772.793204][T15663] netlink: 1232 bytes leftover after parsing attributes in process `syz.9.3066'.
[  773.266808][  T198] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  773.418130][  T198] usb 10-1: device descriptor read/64, error -71
[  773.656955][  T198] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  773.785486][  T198] usb 10-1: device descriptor read/64, error -71
[  773.819194][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3074'.
[  773.896243][  T198] usb usb10-port1: attempt power cycle
[  774.115591][ T5254] 8021q: adding VLAN 0 to HW filter on device eth22
[  774.258310][  T198] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  774.281324][  T198] usb 10-1: device descriptor read/8, error -71
[  774.745300][  T198] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  774.766090][  T198] usb 10-1: device descriptor read/8, error -71
[  774.889181][  T198] usb usb10-port1: unable to enumerate USB device
[  776.870085][T15755] dlm: no local IP address has been set
[  776.870103][T15755] dlm: cannot start dlm midcomms -107
[  776.988144][ T1414] hsr_slave_0: left promiscuous mode
[  777.223669][ T1414] hsr_slave_1: left promiscuous mode
[  777.225802][ T1414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  777.225853][ T1414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  777.324302][ T1414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  777.324326][ T1414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  777.603364][ T1414] veth1_macvtap: left promiscuous mode
[  777.604061][ T1414] veth0_macvtap: left promiscuous mode
[  777.624687][ T1414] veth1_vlan: left promiscuous mode
[  777.624787][ T1414] veth0_vlan: left promiscuous mode
[  778.781741][T15788] MTD: Couldn't look up './dev/mtdblock0': -2
[  779.188135][ T1414] team0 (unregistering): Port device team_slave_1 removed
[  779.289365][ T1414] team0 (unregistering): Port device team_slave_0 removed
[  780.221878][ T5254] 8021q: adding VLAN 0 to HW filter on device eth23
[  782.398228][ T1414] IPVS: stop unused estimator thread 0...
[  783.330629][T15892] MTD: Couldn't look up './dev/mtdblock0': -2
[  783.582221][ T5254] 8021q: adding VLAN 0 to HW filter on device eth24
[  783.846070][T15855] udc dummy_udc.0: failed to start g1: -105
[  783.846105][T15855] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -105
[  784.012288][T15908] MTD: Couldn't look up './dev/mtdblock0': -2
[  784.201616][T15855] UDC core: g1: couldn't find an available UDC or it's busy
[  784.603414][T15934] MTD: Couldn't look up './dev/mtdblock0': -2
[  784.867800][T15941] netlink: 1232 bytes leftover after parsing attributes in process `syz.7.3150'.
[  784.944152][T15939] tipc: Started in network mode
[  784.944170][T15939] tipc: Node identity 4, cluster identity 4711
[  784.944179][T15939] tipc: Node number set to 4
[  784.975254][T15943] MTD: Couldn't look up './dev/mtdblock0': -2
[  785.427796][T15963] jffs2: notice: (15963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  785.615072][T15971] MTD: Couldn't look up './dev/mtdblock0': -2
[  786.348654][T15992] MTD: Couldn't look up './dev/mtdblock0': -2
[  786.541324][T15999] MTD: Couldn't look up './dev/mtdblock0': -2
[  787.094800][T16013] MTD: Couldn't look up './dev/mtdblock0': -2
[  787.330440][T16017] jffs2: notice: (16017) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  789.705322][    T9] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  789.855431][    T9] usb 10-1: Using ep0 maxpacket: 8
[  789.864181][    T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  789.864214][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.864234][    T9] usb 10-1: Product: syz
[  789.864250][    T9] usb 10-1: Manufacturer: syz
[  789.864265][    T9] usb 10-1: SerialNumber: syz
[  789.908726][    T9] usb 10-1: config 0 descriptor??
[  790.026278][T16095] MTD: Couldn't look up './dev/mtdblock0': -2
[  790.152048][    T9] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  791.600059][    T9] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  791.620659][    T9] usb 10-1: USB disconnect, device number 29
[  792.117786][T16136] MTD: Couldn't look up './dev/mtdblock0': -2
[  792.744277][T16152] jffs2: notice: (16152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  794.325709][T16206] MTD: Couldn't look up './dev/mtdblock0': -2
[  795.130680][T16238] jffs2: notice: (16238) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  796.020634][   T39] audit: type=1800 audit(1786110560.776:30): pid=16245 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.9.3266" name="test2" dev="jffs2" ino=5 res=0 errno=0
[  797.173220][T16300] MTD: Couldn't look up './dev/mtdblock0': -2
[  797.281623][T16305] MTD: Couldn't look up './dev/mtdblock0': -2
[  798.876952][T16356] MTD: Couldn't look up './dev/mtdblock0': -2
[  799.127242][T16360] jffs2: notice: (16360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  800.252536][T16392] jffs2: notice: (16392) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  801.025542][T16424] jffs2: notice: (16424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  801.151751][T16430] MTD: Couldn't look up './dev/mtdblock0': -2
[  805.942750][T16541] jffs2: notice: (16541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  807.585001][T16574] MTD: Couldn't look up './dev/mtdblock0': -2
[  808.593575][T16599] jffs2: notice: (16599) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  809.576038][T16626] jffs2: notice: (16626) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  810.393786][T16653] MTD: Couldn't look up './dev/mtdblock0': -2
[  811.029612][T16674] jffs2: notice: (16674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  812.345412][T15969] usb 10-1: new full-speed USB device number 30 using dummy_hcd
[  812.367738][T16720] MTD: Couldn't look up './dev/mtdblock0': -2
[  812.506164][T15969] usb 10-1: config 0 has an invalid interface number: 11 but max is 0
[  812.506194][T15969] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  812.506215][T15969] usb 10-1: config 0 has no interface number 0
[  812.506258][T15969] usb 10-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  812.506287][T15969] usb 10-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  812.506314][T15969] usb 10-1: config 0 interface 11 has no altsetting 0
[  812.506346][T15969] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  812.506369][T15969] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.534557][T15969] usb 10-1: config 0 descriptor??
[  812.642980][T16711] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  812.657619][T15969] keyspan 10-1:0.11: Keyspan 2 port adapter converter detected
[  812.659306][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 87
[  812.686193][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 81
[  812.686292][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 82
[  812.686381][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 1
[  812.686515][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 2
[  812.686607][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 85
[  812.686841][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 5
[  812.821148][T15969] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  812.923489][T16711] netlink: 'syz.9.3425': attribute type 12 has an invalid length.
[  812.973808][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 83
[  812.973916][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 84
[  812.978689][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 3
[  812.978991][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 4
[  812.979249][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 86
[  812.979503][T15969] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 6
[  813.033726][T15969] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  813.518258][T16747] MTD: Couldn't look up './dev/mtdblock0': -2
[  814.060466][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  814.060595][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  814.473201][T16781] MTD: Couldn't look up './dev/mtdblock0': -2
[  815.240788][T11590] usb 10-1: USB disconnect, device number 30
[  815.289521][T11590] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  815.312782][T11590] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  815.313791][T11590] keyspan 10-1:0.11: device disconnected
[  815.414081][T16815] jffs2: notice: (16815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  818.307019][T16904] MTD: Couldn't look up './dev/mtdblock0': -2
[  819.554421][T16955] MTD: Couldn't look up './dev/mtdblock0': -2
[  821.815278][    T9] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  821.975338][    T9] usb 10-1: Using ep0 maxpacket: 8
[  821.981902][    T9] usb 10-1: config 0 has no interfaces?
[  821.987612][    T9] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  821.987702][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.987764][    T9] usb 10-1: Product: syz
[  821.987805][    T9] usb 10-1: Manufacturer: syz
[  821.987847][    T9] usb 10-1: SerialNumber: syz
[  822.079491][    T9] usb 10-1: config 0 descriptor??
[  823.018275][ T5701] usb 10-1: USB disconnect, device number 31
[  824.946458][ T5701] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  825.111243][ T5701] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  825.111281][ T5701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.138517][ T5701] usb 7-1: config 0 descriptor??
[  825.449539][T17129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  825.450250][T17129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  825.512245][T17147] ------------[ cut here ]-[  825.512245][T17147] ------------[ cut here ]------------
[  825.512266][T17147] kernel BUG at net/core/dev.c:11346!
[  825.512742][T17147] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  825.512943][T17147] CPU: 0 UID: 0 PID: 17147 Comm: syz.9.3557 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  825.512975][T17147] Tainted: [L]=SOFTLOCKUP
[  825.512982][T17147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  825.512996][T17147] RIP: 0010:register_netdevice+0x1eac/0x1ed0
[  825.513063][T17147] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c bd fb ff ff 4c 89 f7 e8 a7 e0 0a f9 e9 b0 fb ff ff e8 4d 8a 9e f8 90 0f 0b e8 45 8a 9e f8 90 <0f> 0b e8 3d 8a 9e f8 90 0f 0b e8 35 8a 9e f8 41 be 42 00 00 00 e9
[  825.513084][T17147] RSP: 0018:ffffc90007387560 EFLAGS: 00010283
[  825.513106][T17147] RAX: ffffffff8927196b RBX: 1ffff92000e70ec0 RCX: 0000000000080000
[  825.513123][T17147] RDX: ffffc9002913b000 RSI: 0000000000000860 RDI: 0000000000000861
[  825.513137][T17147] RBP: ffffc900073876e0 R08: 0000000000000000 R09: 0000000000000000
[  825.513151][T17147] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff88804f8a0898
[  825.513172][T17147] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88804f8a0000
[  825.513184][T17147] FS:  00007f483b5666c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000
[  825.513197][T17147] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  825.513208][T17147] CR2: 00007fda20335d58 CR3: 000000003db86000 CR4: 00000000003526f0
[  825.513243][T17147] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  825.513259][T17147] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  825.513275][T17147] Call Trace:
[  825.513284][T17147]  <TASK>
[  825.513293][T17147]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  825.513323][T17147]  ? do_raw_spin_lock+0x12b/0x2f0
[  825.513359][T17147]  ? __pfx_register_netdevice+0x10/0x10
[  825.513384][T17147]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  825.513419][T17147]  ? lockdep_hardirqs_on+0x7a/0x110
[  825.513441][T17147]  ? _mutex_lock_killable+0x152/0x1d0
[  825.513471][T17147]  ? register_netdev+0x18/0x60
[  825.513504][T17147]  register_netdev+0x40/0x60
[  825.513538][T17147]  gether_register_netdev+0x84/0x180
[  825.513557][T17147]  ncm_bind+0x717/0xdc0
[  825.513597][T17147]  ? rcu_is_watching+0x15/0xb0
[  825.513626][T17147]  usb_add_function+0x290/0x930
[  825.513654][T17147]  ? check_remote_wakeup_config+0x58/0x1c0
[  825.513682][T17147]  configfs_composite_bind+0xde0/0x1410
[  825.513717][T17147]  ? __pfx_configfs_composite_bind+0x10/0x10
[  825.513737][T17147]  gadget_bind_driver+0x2ca/0x9e0
[  825.513775][T17147]  ? __pfx_gadget_bind_driver+0x10/0x10
[  825.513796][T17147]  really_probe+0x254/0xae0
[  825.513836][T17147]  __driver_probe_device+0x1e8/0x360
[  825.513863][T17147]  driver_probe_device+0x4f/0x240
[  825.513893][T17147]  __driver_attach+0x339/0x600
[  825.513913][T17147]  bus_for_each_dev+0x23e/0x2c0
[  825.513959][T17147]  ? __pfx___driver_attach+0x10/0x10
[  825.513985][T17147]  ? __pfx_bus_for_each_dev+0x10/0x10
[  825.514022][T17147]  ? rt_spin_unlock+0x163/0x200
[  825.514051][T17147]  bus_add_driver+0x348/0x670
[  825.514091][T17147]  driver_register+0x23a/0x320
[  825.514133][T17147]  usb_gadget_register_driver_owner+0xf9/0x270
[  825.514173][T17147]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  825.514196][T17147]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  825.514219][T17147]  configfs_write_iter+0x33a/0x430
[  825.514248][T17147]  vfs_write+0x61e/0xbb0
[  825.514269][T17147]  ? __pfx_vfs_write+0x10/0x10
[  825.514306][T17147]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  825.514329][T17147]  ? lockdep_hardirqs_on+0x7a/0x110
[  825.514351][T17147]  ? mutex_lock_nested+0x152/0x1d0
[  825.514378][T17147]  ? fdget_pos+0x252/0x320
[  825.514402][T17147]  ksys_write+0x156/0x270
[  825.514447][T17147]  ? __pfx_ksys_write+0x10/0x10
[  825.514478][T17147]  do_syscall_64+0x17b/0x530
[  825.514500][T17147]  ? irqentry_exit+0x10f/0x8f0
[  825.514519][T17147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.514542][T17147]  ? clear_bhb_loop+0x40/0x90
[  825.514567][T17147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.514587][T17147] RIP: 0033:0x7f483d30e0d9
[  825.514626][T17147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  825.514646][T17147] RSP: 002b:00007f483b566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  825.514670][T17147] RAX: ffffffffffffffda RBX: 00007f483d595fa0 RCX: 00007f483d30e0d9
[  825.514688][T17147] RDX: 000000000000000b RSI: 0000200000001400 RDI: 0000000000000005
[  825.514701][T17147] RBP: 00007f483d3a5024 R08: 0000000000000000 R09: 0000000000000000
[  825.514714][T17147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  825.514726][T17147] R13: 00007f483d596038 R14: 00007f483d595fa0 R15: 00007ffd7a87f568
[  825.514754][T17147]  </TASK>
[  825.514766][T17147] Modules linked in:
[  825.514824][T17147] ---[ end trace 0000000000000000 ]---
[  825.518500][T17147] RIP: 0010:register_netdevice+0x1eac/0x1ed0
[  825.518589][T17147] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c bd fb ff ff 4c 89 f7 e8 a7 e0 0a f9 e9 b0 fb ff ff e8 4d 8a 9e f8 90 0f 0b e8 45 8a 9e f8 90 <0f> 0b e8 3d 8a 9e f8 90 0f 0b e8 35 8a 9e f8 41 be 42 00 00 00 e9
[  825.518650][T17147] RSP: 0018:ffffc90007387560 EFLAGS: 00010283
[  825.518672][T17147] RAX: ffffffff8927196b RBX: 1ffff92000e70ec0 RCX: 0000000000080000
[  825.518690][T17147] RDX: ffffc9002913b000 RSI: 0000000000000860 RDI: 0000000000000861
[  825.518734][T17147] RBP: ffffc900073876e0 R08: 0000000000000000 R09: 0000000000000000
[  825.518777][T17147] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff88804f8a0898
[  825.518822][T17147] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88804f8a0000
[  825.518840][T17147] FS:  00007f483b5666c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000
[  825.518868][T17147] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  825.518939][T17147] CR2: 00007fda20335d58 CR3: 000000003db86000 CR4: 00000000003526f0
[  825.518979][T17147] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  825.518996][T17147] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  825.519092][T17147] Kernel panic - not syncing: Fatal exception
[  825.519704][T17147] Kernel Offset: disabled