last executing test programs:

18m8.5151436s ago: executing program 32 (id=878):
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x12d})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000080))
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

11m11.071748951s ago: executing program 33 (id=2266):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x1, 0x1, 0x1}, {0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}}], 0x20)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x2}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}]}}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, <r5=>0x0, <r6=>0xffffffffffffffff})
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'trusted:'}, 0x20, 0xfffffffffffffffd)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'sit0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x7c, 0x10, 0x403, 0x1, 0xa5dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xc}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x532d}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x7c}, 0x1, 0xba01, 0x0, 0x4005}, 0x810) (fail_nth: 10)
mount$tmpfs(0x0, 0x0, 0x0, 0x2a00a9, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x39, 0x0]}}]})
dup3(r4, r6, 0x0)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000000)={r5})

10m9.91301518s ago: executing program 2 (id=2484):
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000680)=""/204)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x108)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
accept(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
chdir(0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b80)=@bridge_getlink={0x1ac, 0x12, 0x100, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8509, 0x801}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_VFINFO_LIST={0x104, 0x16, 0x0, 0x1, [{0x100, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x75a, 0xf13, 0x8, 0x8100}}, {0x14, 0x1, {0x2, 0xfb0}}, {0x14, 0x1, {0x4, 0x96d, 0x7}}, {0x14, 0x1, {0x1000, 0x681}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @multicast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x7fff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x3}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x82a, 0x3, 0x88a8}}, {0x14, 0x1, {0x0, 0xcc7, 0x40, 0x88a8}}, {0x14, 0x1, {0x4, 0x73, 0xfffffeea, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x419, 0x379ce800, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x4}}]}]}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x4}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe}]}]}, @IFLA_PHYS_PORT_ID={0x9, 0x22, "a5b48b8dc0"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4c0d0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2202, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000080))
syz_clone3(&(0x7f0000000840)={0x0, &(0x7f0000000440), &(0x7f0000000580), &(0x7f00000005c0), {0x3}, &(0x7f0000000780)=""/98, 0x62, &(0x7f0000000600)=""/36, &(0x7f0000000800)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7, {r0}}, 0x58)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="140000005e00250c00000000ffdbdf250400c880"], 0x14}], 0x1}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x8001, "5897be96bfc69bb676bf59bc4f27e0d90a43ec3a55ff871898364b402922a0ae"})

10m9.314111742s ago: executing program 2 (id=2487):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fedbe2e049df2505000000040001807f932d35"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000030525bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000080029002c580400140012800900010076657468000000000400028008002900126d"], 0x5c}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES8=r7, @ANYRES32=r2], 0xf8}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000a95a6e870200010000000008004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r1, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x40000001)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xa)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x13}, 0x18)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r8 = io_uring_setup(0x3eae, &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0)

10m7.212427412s ago: executing program 2 (id=2495):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f0000"], 0x50)
r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000040)={0x16, 0x3, 0x103, 0x1, 'syz1\x00', 0x4})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0xc1105511, &(0x7f0000000040))

10m5.784487491s ago: executing program 2 (id=2497):
r0 = socket$packet(0x11, 0xa, 0x300)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1100}, 0x50) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x20000018) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a12900", 0x1e}], 0x1}, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)
r6 = syz_usb_connect(0x0, 0x21, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x6, 0xc0, 0x55, 0x8, 0x110a, 0x1450, 0x62cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa7, 0x0, 0x0, 0x67, 0xa0, 0x29}}]}}]}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
syz_usb_control_io(r6, 0x0, 0x0) (async)
socket(0x2c, 0xa, 0x7d)

10m1.889314416s ago: executing program 2 (id=2513):
syz_usb_connect(0x3, 0x355, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xe0, 0x17, 0x10, 0x40, 0x1266, 0x100c, 0x941e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x343, 0x3, 0x6, 0x7, 0x80, 0xff, [{{0x9, 0x4, 0xf0, 0x9, 0xa, 0xff, 0x4b, 0xdb, 0x67, [], [{{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x9, 0x22, 0x6, [@generic={0x4e, 0x6, "46c94b03eaba8d05cbfc90cce420132d4b593fa338c139e1de8a42e6410b0d46b6aa090a3825623cbe971be31a63244694b795ba3cfe72755e566f673d861ab55bd8c516c8e0d5eb16820b3c"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x4, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x5}, @generic={0x86, 0x7, "54f8586a0d8fb733d0802e18e04ec6f75006e46eb247f384c2c6d41359e318eb22a4d8649220b5b07a30138e0ae7340b80510dc0ab84ebf326ce7f31d740fbe24b60214c0db1f6b931a72dcc3459c3f2967072384b8a78e7e4f1e2767c83287db273f4ef4d649fe19e0c79d9c29da60a2cfcb2f5ce7d5d67dd41768428ef88a1a5710c44"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x4, 0x5, 0x9}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0xee, 0x7b, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xc}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x7, 0x0, 0x57, [@generic={0x3e, 0x7, "8175f1bf3fce28b3a1ed21a16277088c64598d25baba7f06ffe4b75ce7939a472f9e248bbff9a966e4b55e198e7105bf451407eca47e1403cf1615a9"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0xfe, 0x5, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x72d7}, @generic={0x59, 0x9, "8a0d366dfa68d569b6599bcd4daf53389c084ed2096716e7e45778980b3c3353e9f2412db951849705ade5df811f2396c22ddd9938b38ed9ddb8bc48f0ec09d9f2f41a79c62cde1726a56c7a514e2763641b5e0d2a9157"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x64, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x75, 0x3}, @generic={0x95, 0xe, "8fe0a691ea4dc4367ff08d8fe1ce8dbb937f65f1a382d6a0c3b62f798d5c65d3331fc1ec132d2b8ebf1946147324907462ea22481548e62ee2af5f79b57b108d1df035d737a0a7d9d06dc46378d6901c6eb620296e93d7f0677af24dfa85ae6ac9fd1c120ae68eb4ca0d636d09d9fde34b490a2819388c7c0bc800f96e6ad919c8654616fe7288f72fe13124daa2a1a8aba3aa"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x3, 0x3c, 0x6, [@generic={0x5d, 0x6, "e8a0f153703d16999e79066cedfb5d48fee6685c9cae49b072cc55c75c38845b9edae555cb91e4d3fbb9b53605a09c5d8f42e72bc409b1f9dd5b43a68dc9ade07dceb5bb0cce95a5ab21c4f4fbd23babb560a32d2747e8d4df27af"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x0, 0x6, 0x4}}, {{0x9, 0x5, 0xb, 0x0, 0x3f7, 0xe1, 0xe0, 0x26}}]}}, {{0x9, 0x4, 0xcc, 0xb1, 0x1, 0x40, 0x3a, 0x67, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x3}, [@processing_unit={0xb, 0x24, 0x7, 0x4, 0x0, 0x34, "1ded6297"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "bbe8072d81"}, {0x5, 0x24, 0x0, 0xbf21}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x20}, [@acm={0x4, 0x24, 0x2, 0x8}]}], [{{0x9, 0x5, 0xd, 0x2, 0x0, 0x8, 0x7, 0x6}}]}}, {{0x9, 0x4, 0xda, 0x3, 0x0, 0x69, 0xc0, 0x47, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x180, 0x31}}]}}]}}]}}, 0xfffffffffffffffe)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10)
mkdirat(r1, &(0x7f0000000200)='./bus/file0\x00', 0x152)
renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000380)={0x8, 0xf000, 0x1, r1, 0x8})

9m58.628322589s ago: executing program 2 (id=2524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r1, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x3}]}, 0x3c}}, 0x0) (fail_nth: 3)

9m42.659061862s ago: executing program 34 (id=2524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r1, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x3}]}, 0x3c}}, 0x0) (fail_nth: 3)

9m40.536234985s ago: executing program 5 (id=2576):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9m39.323383883s ago: executing program 5 (id=2579):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a4ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004e3b474c25d9b394820a4e3ab7"], 0x90)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[], 0x290)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x110)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYBLOB="5952817b1672020000000000e2ffffff000000000000000000006eea1793d7", @ANYRES32=0x0, @ANYBLOB="030000000000000002000000060000000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r4}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, 0x0, &(0x7f00000003c0)=""/28}, 0x20)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
r8 = syz_usbip_server_init(0x1)
write$usbip_server(r8, 0x0, 0x40)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000240)={{0xeeee0000, 0xeeef0000, 0x0, 0x2, 0x6, 0x8, 0x9, 0x2d, 0x0, 0x0, 0x4, 0x9}, {0xffff1000, 0x2, 0x9, 0x5, 0x7, 0x9, 0x46, 0x8, 0x8, 0x2a, 0x7, 0xa}, {0x80a0000, 0x100000, 0x8, 0x7, 0x5, 0x5, 0x2, 0x9, 0x3, 0x9, 0x2, 0x72}, {0xffff1000, 0x8080000, 0xc, 0x0, 0x0, 0x0, 0x1, 0x84, 0x81, 0x1, 0x81, 0xfe}, {0x8080000, 0x4000, 0xe, 0x9, 0x0, 0x6, 0x6, 0x7f, 0xd, 0x6, 0x8, 0x7}, {0x1000, 0xdddd0000, 0x8, 0x76, 0x4b, 0xd5, 0x0, 0x4, 0x1, 0x8, 0x3, 0x5}, {0x2000, 0x8080000, 0xd, 0x3, 0x59, 0x1, 0x3, 0x8, 0xf8, 0x8, 0x8}, {0x6000, 0x4, 0x0, 0x3, 0x7f, 0xe8, 0x3, 0x1, 0x7, 0xf1, 0x4, 0x8}, {0x100000, 0xab}, {0x2000, 0x2}, 0x1, 0x0, 0x3000, 0x8, 0x8, 0xb801, 0xdddd0000, [0x1, 0x10000, 0x40000000, 0x8001]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

9m36.443543142s ago: executing program 5 (id=2587):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000005580)={0x2020}, 0x2020)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40)
mount$nfs(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r4)
sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$RTC_AIE_ON(r5, 0x7001)
sendto$inet(r2, &(0x7f00000000c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7", 0x3d, 0x0, 0x0, 0x0)
dup2(r1, r1)
r6 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000000)=0x2)

9m34.263859726s ago: executing program 5 (id=2591):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
chdir(0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4a02, 0x174)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)
r3 = syz_clone(0x82008000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1101000, &(0x7f0000000600)=ANY=[@ANYBLOB="8f676966643d00a25620553ad15e6c2e3c713de3ec2a6af2b53aea5e32120a44af341cff80cc43f1c9f44c28a3f5c6fc3d93a546c32a8b872df0e77dc48792864ff2b92e7babe8fdaadb5c04ebdb151bcc72d83fe3ae2e4f260ca6b3515bcf6be35ee5df8f76849e493a2339c685ed3dac353e320a4a9a9c06c03fed712309264f4c2424899b20540c5b86960c6277c65b54f1d3dedeb94dfd19dc75d2735183b0908a3bf8e80e966a25dc5218c0d3b4251823fc1a0d072e256fe350fd", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,usmr_id=', @ANYRESHEX=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000003400,default_permissions,\x00'])
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, r5, &(0x7f00000000c0)={0x0, 0x5b81, 0x0, 0xffffffffffffffff, 0x9, 0x9, 0x0, 0x4, 0xde})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000280)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000002c0)='./file2\x00', &(0x7f00000001c0), 0x2291040, &(0x7f0000000340)={[{@uuid_off}, {@index_off}, {@default_permissions}, {@verity_on}, {@redirect_dir_nofollow}, {@volatile}], [{@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@subj_role={'subj_role', 0x3d, '!\xb3'}}]})
chroot(&(0x7f0000000000)='./bus\x00')
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2a)

9m33.858378923s ago: executing program 5 (id=2592):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10)
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x9}}, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000480)="b8ea08fe997e81639121ea0c5cd6d9833469065ee2a5d821e2d1f8287eaca0870fceb1478bc125b3203bd904cd58c89cf3ea38200647633eaf6c5ab293db0e171b2b9cb38e76d23885afc4d1987a4269040502db307659ec79642d0e68a6df742e2c5bec5eef06c0e78df10d16e504ea529b0ba9823ba317aa5c8c57095eedd9e0b5b3e20e6b01eab589ec8f6724010f8025451da64a64545010ba83e97cb5266e7345d9a302380626e947d9527a2deccce866525020aaa295fc21fbc1af97f9ad3368dc00a166bbe51dd494aef6c34361f78154b23da98ab618b2c785f9c5398de5aadf69a874", 0xe7)
ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x2b)
iopl(0x3)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb)
write$binfmt_misc(r3, &(0x7f0000000080)="b4ccbc9fe83d47dfc8ed218e212f9097cea701542e6bb96c8f95e7ca0a2e", 0x1e)
ioctl$FS_IOC_GETVERSION(r2, 0x5b07, 0x0)
write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000023201"], 0x138)
r9 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x40, 0x0, 0xed, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7}}}}}]}}]}}, 0x0)
r10 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=<r11=>0x0, &(0x7f0000000280)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r10, 0x47f9, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x200000006c832, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r10, 0x18, &(0x7f0000000000)={0x9, r10, 0x15, {0xf5e, 0x1007}, 0x5}, 0x1)
syz_usb_control_io(r9, 0x0, 0x0)

9m31.944226921s ago: executing program 5 (id=2597):
r0 = socket(0x8000000010, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0400d0}, 0x24048810)
write(r0, &(0x7f00000002c0)="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", 0xfc)
r3 = socket(0x15, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}}, 0xe, 0xc, 0x21fef0f9, 0x3, 0x20, 0xc, 0x2}, &(0x7f00000001c0)=0x9c)
getsockopt(r3, 0x200000000114, 0x271f, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x5, 0x9c, 0x0, 0x0)
r5 = gettid()
process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mount$cgroup2(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0xa06800, &(0x7f0000000140)={[{@subsystem='cpuacct'}, {@memory_recursiveprot}, {@pids_localevents}], [{@flag='ro'}, {@dont_measure}, {@context={'context', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, '-'}}]})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)

9m31.44308965s ago: executing program 35 (id=2597):
r0 = socket(0x8000000010, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0400d0}, 0x24048810)
write(r0, &(0x7f00000002c0)="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", 0xfc)
r3 = socket(0x15, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}}, 0xe, 0xc, 0x21fef0f9, 0x3, 0x20, 0xc, 0x2}, &(0x7f00000001c0)=0x9c)
getsockopt(r3, 0x200000000114, 0x271f, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x5, 0x9c, 0x0, 0x0)
r5 = gettid()
process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mount$cgroup2(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0xa06800, &(0x7f0000000140)={[{@subsystem='cpuacct'}, {@memory_recursiveprot}, {@pids_localevents}], [{@flag='ro'}, {@dont_measure}, {@context={'context', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, '-'}}]})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)

9m17.811999514s ago: executing program 1 (id=2643):
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x20, 0xe, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}}]}]}]}, 0x34}}, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}}, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x20000, 0x10020f58, 0x0, [{}, {}, {0x6, 0x0, 0x9}, {0x0, 0x35}, {}, {0x0, 0x0, 0x0, '\x00', 0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}]}})
ioctl$KVM_RUN(r2, 0x8004ae98, 0x20e10000) (async)
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async)
signalfd(r3, &(0x7f0000000000), 0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x3c102, 0x0)
pread64(r6, &(0x7f0000000040)=""/41, 0x29, 0x0)

9m17.47353273s ago: executing program 1 (id=2644):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000016050080ff00000069163e0000000000bf0700000000000026050700000000f06706000007000000150600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

9m17.21224444s ago: executing program 1 (id=2646):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

9m17.087707741s ago: executing program 1 (id=2647):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
chdir(0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4a02, 0x174)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)
syz_clone(0x82008000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x0)

9m16.552371034s ago: executing program 1 (id=2650):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000440)="d561a99b5900bb51396e8b4b15dcd95369bcfe1ec83b88c3f0c0324bbd563b94e1ca6fd0e61c6a42be1e38e20d07de32cdcb37574d94ff7a7944bf1f96c62f64cf9285c460b6f5b45ef941af0fcd", 0x4e}, {&(0x7f0000000300)="762c68513d283d0696a87e59f8305491adec5817dd1e43d7c11db2ffbc3bde5bf82cc3fccbbf123b74d26b75ce8f68d6ae164d949a5d748dce6a219a2fd9f61b81b17bc431c98317bc2492c8116e13ab419c909f8e6793d4006de460086b00f99b4a8f79e9af7a5f4b43686328210aa293a7e95c02cfa89e9cf967ce6f19e927a4a10d5fc9f90190dd5d5c0b117356be", 0x90}, {&(0x7f0000000540)="9da70f10c56ba6e2b4b90574625dc8cbd627003f10c17f01ca5c956dd1a0695034608392a9b92ab815c9771992e17907d00b01378287fbd3cc3f9bb633cdfa7453d4b7c18b680894a1f9fc8edf9ada3d52cfa68e67fa34070752586415f666319edcd465405dde4df3378a99ef073e6ee94411885ba05034ce80fc5b0056727deaad6e8409230c726a7fc3b81fc3949841deab75e9c520f92003dc01a79f7cc243f1a509f96465f0281fcce4a8166a7877514f2c61406ecf8e", 0xb9}, {&(0x7f0000000600)}], 0x4)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f384", 0x6}], 0x1, 0x0, 0x0, 0xfe00}, 0x48005)

9m15.50021894s ago: executing program 1 (id=2653):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000440)="d561a99b5900bb51396e8b4b15dcd95369bcfe1ec83b88c3f0c0324bbd563b94e1ca6fd0e61c6a42be1e38e20d07de32cdcb37574d94ff7a7944bf1f96c62f64cf9285c460b6f5b45ef941af0fcd", 0x4e}, {&(0x7f0000000300)="762c68513d283d0696a87e59f8305491adec5817dd1e43d7c11db2ffbc3bde5bf82cc3fccbbf123b74d26b75ce8f68d6ae164d949a5d748dce6a219a2fd9f61b81b17bc431c98317bc2492c8116e13ab419c909f8e6793d4006de460086b00f99b4a8f79e9af7a5f4b43686328210aa293a7e95c02cfa89e9cf967ce6f19e927a4a10d5fc9f90190dd5d5c0b117356be", 0x90}, {&(0x7f0000000540)="9da70f10c56ba6e2b4b90574625dc8cbd627003f10c17f01ca5c956dd1a0695034608392a9b92ab815c9771992e17907d00b01378287fbd3cc3f9bb633cdfa7453d4b7c18b680894a1f9fc8edf9ada3d52cfa68e67fa34070752586415f666319edcd465405dde4df3378a99ef073e6ee94411885ba05034ce80fc5b0056727deaad6e8409230c726a7fc3b81fc3949841deab75e9c520f92003dc01a79f7cc243f1a509f96465f0281fcce4a8166a7877514f2c61406ecf8e", 0xb9}, {&(0x7f0000000600)}], 0x4)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102389, 0x18ff5)
socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f384", 0x6}], 0x1}, 0x48005)

9m15.112111458s ago: executing program 36 (id=2653):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000440)="d561a99b5900bb51396e8b4b15dcd95369bcfe1ec83b88c3f0c0324bbd563b94e1ca6fd0e61c6a42be1e38e20d07de32cdcb37574d94ff7a7944bf1f96c62f64cf9285c460b6f5b45ef941af0fcd", 0x4e}, {&(0x7f0000000300)="762c68513d283d0696a87e59f8305491adec5817dd1e43d7c11db2ffbc3bde5bf82cc3fccbbf123b74d26b75ce8f68d6ae164d949a5d748dce6a219a2fd9f61b81b17bc431c98317bc2492c8116e13ab419c909f8e6793d4006de460086b00f99b4a8f79e9af7a5f4b43686328210aa293a7e95c02cfa89e9cf967ce6f19e927a4a10d5fc9f90190dd5d5c0b117356be", 0x90}, {&(0x7f0000000540)="9da70f10c56ba6e2b4b90574625dc8cbd627003f10c17f01ca5c956dd1a0695034608392a9b92ab815c9771992e17907d00b01378287fbd3cc3f9bb633cdfa7453d4b7c18b680894a1f9fc8edf9ada3d52cfa68e67fa34070752586415f666319edcd465405dde4df3378a99ef073e6ee94411885ba05034ce80fc5b0056727deaad6e8409230c726a7fc3b81fc3949841deab75e9c520f92003dc01a79f7cc243f1a509f96465f0281fcce4a8166a7877514f2c61406ecf8e", 0xb9}, {&(0x7f0000000600)}], 0x4)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102389, 0x18ff5)
socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f384", 0x6}], 0x1}, 0x48005)

7m27.478324471s ago: executing program 7 (id=2999):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000076ad9bb982585400"/44], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800003f000001000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000005001000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000de9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000237000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0404"], 0xd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

7m26.036351382s ago: executing program 7 (id=3002):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000240)=0x7, 0x4)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1d5}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000000), 0x0)
ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000100)=0x4000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)=@arm64={0x3, 0x1a, 0xf, '\x00', 0x8001})

7m25.536519414s ago: executing program 7 (id=3004):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9000, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/133)

7m24.62753833s ago: executing program 7 (id=3008):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(r0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
lsetxattr$smack_xattr_label(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100)='security.SMACK64EXEC\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="925b275e5c00353720b80840d591ba71b27d2b24e9d09716a81e791ad8ee93e50a2f9ca8f86a9515a5baf4702e788daa792f1025f0b14bdcd8788aab6c2b020520ae305f2aba6c77a962e272ef730d166e5fb83aedb81d0305569c29ec58f2372c193fc6d6f9f07d558dc428e97ea4a2fa1c3d56eff5d28b3d6ad8a356ea2e8a51e1e0666cb769455d75e7948d91e7c402d049220031e4629a4d4abf33c3af47f20cdea3a31d06d4426a18f6c8604805279fc69e1cc9004bd73a16e23f6608993e4c5073ccacb02a5fd4e00252f819e24afc0fe89fc7a5bed6099c93c89ed7d7828cf8a1208d026c6dfc0d5959f60ecbb5848465f5ecff60298b808cc2b9d29843bf79859b0eb92734a8121e5b954a8e561c2bc86a932636176779066fa87f3eaf13195246c488fbecef42f02135231f5030b257126f17afa972f5e92237876b4cfe35d075534ed8"], 0x6, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d3025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38)
sendfile(r0, r1, &(0x7f0000000100)=0x6, 0x100000000010001)

7m24.056356274s ago: executing program 7 (id=3011):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38)
recvmmsg(r2, &(0x7f0000003600), 0x58, 0x10020, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r5)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x80007}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x0, 0x0)

7m23.577678599s ago: executing program 7 (id=3014):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=ANY=[@ANYBLOB="00100000100001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000019", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000008001f00030000000c001500000000000400000008001d0000000000cd0e01007368613235360000"], 0x1000}}, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = dup(r1)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1402, 0x10, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)

7m22.567492718s ago: executing program 37 (id=3014):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=ANY=[@ANYBLOB="00100000100001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000019", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000008001f00030000000c001500000000000400000008001d0000000000cd0e01007368613235360000"], 0x1000}}, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = dup(r1)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1402, 0x10, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)

1m44.008533453s ago: executing program 4 (id=4246):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, <r4=>0x0}, &(0x7f00000004c0)=0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x15, 0x10, 0x80, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(r3)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r3, r6, 0x4, r0}, 0x10)

1m43.763158033s ago: executing program 4 (id=4249):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1m43.584826893s ago: executing program 4 (id=4252):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200)
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000380))
r4 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1)
write(r1, &(0x7f0000000140)="583b364ba17a00e3792327e94da400ebe1ee457b00302938ee2513db6b6b581c8f2ae8b84b58226f55cde91a72e8f6990dd00bb4c1e54e160d1134bf635cc5c8a2197701745929a4f536647871dd8bf841a15cd184079bb7d1f8a85a3e63586016d39ca39c70880ba7714f839ee408c843556e68a2a395ed05ae7b1d52f00c38fa94d8041404c785efffcb8c57715e9b56f95ccf1c", 0x95)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x3, 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0), 0x41, 0x2, 0x0)

1m42.16475611s ago: executing program 4 (id=4255):
r0 = getpid()
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x88901)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4140aecd, &(0x7f00000000c0))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYRES16=r8, @ANYRESHEX=r2, @ANYRESDEC=r8, @ANYBLOB="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"], 0x50}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000600)=""/162, 0xa2}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)

1m41.347864749s ago: executing program 4 (id=4260):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r4 = dup(r0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0x9}, 0xe)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sysfs$2(0x2, 0xde, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r7, 0x89f1, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)=<r8=>0x0)
sched_setaffinity(r8, 0x8, &(0x7f0000000380)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000280)={0xbc, 0x0, 0x6})
sched_setaffinity(0x0, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r4}, 0x18)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)

1m40.816359315s ago: executing program 4 (id=4263):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0x9}, 0xe)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sysfs$2(0x2, 0xde, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5cc6, 0x0, 0x0, 0x40000330}, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000300), 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r6)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1m40.268589455s ago: executing program 38 (id=4263):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0x9}, 0xe)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sysfs$2(0x2, 0xde, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5cc6, 0x0, 0x0, 0x40000330}, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000300), 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r6)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

8.855960448s ago: executing program 9 (id=4623):
socket$inet6_sctp(0xa, 0x1, 0x84)
pselect6(0x40, &(0x7f0000000180)={0x7f, 0x8000000000000000, 0xb, 0x9, 0x1ff, 0x6c2, 0xe, 0x3}, 0x0, 0x0, 0x0, 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1)
write$proc_mixer(r0, &(0x7f0000000100)=ANY=[], 0xb0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r4}, 0x10)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]})

8.395848949s ago: executing program 3 (id=4626):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x28, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void, @val={0xc, 0x99, {0x8, 0x4e}}}}}, 0x28}}, 0x0)
syz_usb_connect(0x0, 0x64, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a2401"], 0x0)

8.145970131s ago: executing program 6 (id=4628):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x55, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)}}], 0x2, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000200)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xd8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9eca}}, 0x24)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb", 0x64}, {&(0x7f0000000400)}, {0x0}, {&(0x7f0000000640)="4068745fc217775e9fca3477d3c9", 0xe}, {&(0x7f0000000180)="ee2b5d034c64d19d07448de12caed85a84bb7822ee46d8cdebe9c9b078e5854b15879f0d5e9b53d380b393c06e37a000b9109f9d8e971c0c4b2fe631a5d774cbd9b0b64cc3c1167f4ea6c62a1939a496aa08029af9b263b86adbb44ce41dbf505f46f6e7b10ab35194e93fd3ae3c8c0681d18bae656549aada5e23b325644237", 0x80}], 0x5}}], 0x1, 0xc0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004a80)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, 0x0, 0x809)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0)

6.036861604s ago: executing program 6 (id=4629):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x55, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0)

5.770587185s ago: executing program 6 (id=4632):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfd]}}], 0xffc8)

5.032415508s ago: executing program 3 (id=4633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800f8000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000d200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

4.99426429s ago: executing program 6 (id=4634):
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) (async)
mount(&(0x7f0000000200)=@filename='.\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') (async, rerun: 32)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async, rerun: 32)
timer_settime(0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) (async, rerun: 64)
timer_create(0x0, 0x0, 0x0) (async)
timer_settime(0x0, 0x0, 0x0, 0x0) (async)
timer_settime(0x0, 0x0, 0x0, 0x0) (async)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000240)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000080)='\xcd\xe3/c\x88\xfd?\x94Rh\xf1\xe4T\x906`__\xc9\x9f\xdbB\"\x85\\\xb9\xfc\xfdW\x8d\x0f\xd8\xe1p\xc4\xfb-`:\x95_\xcaJ9\x95\xe2\xa0\x87)\xc3\xa0@O<a\x02\xe1\xadR\xd9Rr\xd0m\xf5\x8b\xa6\x9a\xb1\xfa\xc3\xe7p%jEP\x84\xe6\xfb\xa5') (async)
timer_delete(r0) (async)
timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {0x77359400}}, &(0x7f0000000100)) (async, rerun: 64)
timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, &(0x7f00000005c0)) (async, rerun: 64)
pipe(&(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003) (async, rerun: 64)
clock_gettime(0x3, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {r3, r4+10000000}}, &(0x7f0000000280)) (async)
bind$inet6(r2, &(0x7f0000000300)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) (async)
open(0x0, 0x84000, 0x0) (async, rerun: 32)
clock_gettime(0x0, 0x0) (async, rerun: 32)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0x80, {{0xa, 0x4e21, 0x1, @empty}}}, 0x88)
timer_settime(0x0, 0x0, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0) (async)
sendto$inet6(r2, 0x0, 0x0, 0x20058041, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x10500, 0x0)

4.941426753s ago: executing program 3 (id=4635):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(&(0x7f0000000100)='.\x00', 0x5d5481, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffc, 0x4, 0x10000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6b}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000007049102b00000000000000000700"/28], 0x48)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="05d90c85f64564bf08453b0459de002e376b45d2a24f2aba8c914a7576109949370fb737126f4455de04bf321c67"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
lseek(0xffffffffffffffff, 0x0, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

4.600389153s ago: executing program 6 (id=4636):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)

3.681418318s ago: executing program 3 (id=4637):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x400, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000003", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000700)={0x9, 0x3, {0xffffffffffffffff}, {0xee01}, 0x100000001, 0x7fffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="61153000000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006116000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000607070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe320fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6ad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1878a04bbff4bbefc18f77700372471609e2c443e84ee5e9a5178f90512df04f3a0909c96632ae20c05073779fc3fa0e268c62b06e9fdc2977dfef1ced98270263fc81c30f1354b319fe9d59d3101c4ee7375ff8673de5caff9e6ee73ccae77d1bf8f22330e8840af1ded6d5be627f7f87d5b12a2d6317825d77bef85313f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.352574956s ago: executing program 3 (id=4640):
r0 = syz_usbip_server_init(0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x102, 0x48001050, r1, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = io_uring_setup(0x5, &(0x7f00000002c0))
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa4, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x38414762, 0x0, 0x0, 0x0, 0x7, 0xfeeddafe, 0x0, 0x0, 0x0, 0x4}})
r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000040)={@remote, @private=0xa010101}, 0xc)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000480)={0x24, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', <r13=>0x0, 0x2f, 0x5, 0x43, 0x8, 0x10, @private0, @local, 0x40, 0x20, 0x800, 0x7f}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r14=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x36db77f2869d42ed}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x15c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r12}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4c800}, 0x48000)
write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000030000000100000000000000010000008000000000000000200740000003000000"], 0x60)

3.351024849s ago: executing program 9 (id=4641):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x55, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)}}], 0x2, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000200)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xd8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9eca}}, 0x24)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb", 0x64}, {&(0x7f0000000400)}, {0x0}, {&(0x7f0000000640)="4068745fc217775e9fca3477d3c9", 0xe}, {&(0x7f0000000180)="ee2b5d034c64d19d07448de12caed85a84bb7822ee46d8cdebe9c9b078e5854b15879f0d5e9b53d380b393c06e37a000b9109f9d8e971c0c4b2fe631a5d774cbd9b0b64cc3c1167f4ea6c62a1939a496aa08029af9b263b86adbb44ce41dbf505f46f6e7b10ab35194e93fd3ae3c8c0681d18bae656549aada5e23b325644237", 0x80}], 0x5}}], 0x1, 0xc0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004a80)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, 0x0, 0x809)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0)

3.188182782s ago: executing program 0 (id=4643):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x5, 0x0, 0x8}}, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000f00)=ANY=[@ANYRES64, @ANYBLOB="d1e929a8c395925348611168a5f70947df8da5487ad067572c20bb3afc70d4ce5d7eabde78627c47f5e00067a8771ef056fa72bb3263f2c29be05946855f8a1a37cba07f132b993d1644f4e942efb4ceacd0d00dc7ba70bc38bdf9efa59ec61f35deb028af364b62ea4078f99ff5b59f7f48d55b756e2a8b4ace9de449c81a1d2469b8d6e35d1b65f548697bba8b02f61c49671fb3c7916682561ee9a22d924bd2e60ae9d03d11c83ce5051927de294e7f66d9ec5ef37b69eac7d6d784c3cac6e30b8415c8fa26b9fae2a30893deeff5c5db65eebd8775e90ba247554d615441092f3fdc3fac3b6e616490a54236bbc8d118784e4e29d9d2"], 0x7c}, 0x1, 0x0, 0x0, 0x6c010}, 0x1)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYRES64=r4, @ANYRES64=0x0, @ANYRESHEX=r4], 0x20)
r5 = syz_io_uring_setup(0x6020, &(0x7f0000000440)={0x0, 0xb2b, 0x40, 0x3, 0x271, 0x0, r2}, &(0x7f0000000300), &(0x7f0000000580))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x68}}, 0x40000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a010100"/20], 0x188}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, &(0x7f00000001c0)=0xffffffffffffffff, 0x80, 0x0)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2043, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r8=>r6, {0x9}}, './file0\x00'})
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000002c0)=0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x400})
r10 = socket(0x10, 0x3, 0x0)
syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r11=>0x0, &(0x7f0000000280)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r10, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}})
io_uring_enter(r5, 0x5a9d, 0x0, 0x30, 0x0, 0x0)
r13 = dup(r9)
ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000000000008e"])
bind$unix(r8, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
syz_clone3(&(0x7f0000000e00)={0x1000000, &(0x7f0000000200), &(0x7f00000004c0), &(0x7f0000000500), {0x3f}, &(0x7f00000005c0)=""/145, 0x91, &(0x7f0000000680)=""/141, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, {r2}}, 0x58)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

2.853136572s ago: executing program 0 (id=4644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x7000000, 0x0, 0x90}, 0x0)

2.786973173s ago: executing program 0 (id=4645):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfe]}}], 0xffc8)

2.488073077s ago: executing program 6 (id=4646):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000058066e23fba4e52a72a569000040ac05590200000000000109022d00010000000009040000020300000009210000fd0122050009058103000000"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000380)={{0xffffffffffffffff, 0x1, 0x8f, 0x0, 0x9}, 0xb, 0x8})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
inotify_init()
pipe2(&(0x7f00000003c0), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4002)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$caif_stream(0x25, 0x1, 0x2)
syz_open_procfs(0x0, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20)

2.227799928s ago: executing program 9 (id=4647):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa08004500001c000020"], 0x2e)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x185000, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000140)={0x40000000000000b, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], &(0x7f0000000240)='syzkaller\x00', 0x51, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
epoll_create(0x207ffd)
lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0)
accept4$vsock_stream(r4, &(0x7f00000003c0)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
pwritev(r7, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x9, 0x8, 0x18, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f943138fae1b43b3983d7433f8f9a2df4e1857ad78ca88090d709b29ee7c21514bb85393764aaa5f78a", "012a519a6f0231ce4623c52b637a4b34dcce6a392e161f8e3010abda97c64ba2", [0x7, 0xb]})
ioctl$LOOP_CLR_FD(r6, 0x4c01)

2.122096533s ago: executing program 0 (id=4648):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e9c31000000000001092224000100000000090400000103000000092100000001220700090581030000000000"], 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000002000010300fd0000000000000200000000000000000000001400110076"], 0x30}}, 0x0) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x62, &(0x7f0000000180)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private0}}}}}}, 0x0) (async)
ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0)
recvmsg(r3, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x22) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r5, 0xc048aec8, &(0x7f00000001c0)={0x401, 0xffffffffffffffff, 0x1})
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x2, "da2edd80"}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0)

1.86426303s ago: executing program 0 (id=4650):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x46}, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
setgid(0x0)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000010000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090080000000fb5509010000000000950000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})

1.701899295s ago: executing program 0 (id=4652):
socket$inet6_sctp(0xa, 0x1, 0x84)
pselect6(0x40, &(0x7f0000000180)={0x7f, 0x8000000000000000, 0xb, 0x9, 0x1ff, 0x6c2, 0xe, 0x3}, 0x0, 0x0, 0x0, 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1)
write$proc_mixer(r0, &(0x7f0000000100)=ANY=[], 0xb0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r4}, 0x10)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]})

1.608351626s ago: executing program 8 (id=4653):
r0 = syz_io_uring_setup(0x3f9f, &(0x7f0000000140)={0x0, 0x2, 0x2, 0x2, 0xdb}, &(0x7f00000001c0), &(0x7f00000005c0))
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x130, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd60}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x271}]}, @CTA_ZONE={0x6}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xf965}, @CTA_LABELS_MASK={0x10, 0x17, [0x8000, 0xce, 0x101]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x19c}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xef80}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xcb}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe2a}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xc004}, 0x4c040)
syz_io_uring_setup(0x2642, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x2, 0x1c2, 0x0, r0}, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)

1.459234686s ago: executing program 8 (id=4654):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x400, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000005", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000700)={0x9, 0x3, {0xffffffffffffffff}, {0xee01}, 0x100000001, 0x7fffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.436655707s ago: executing program 9 (id=4655):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
setresuid(0x0, 0xee00, 0x0)
syz_clone(0x16041100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00')
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="1c", 0x1, 0xfffffffffffffffd)
r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="db2f7dad313788a293e15ff8af63f98d9484d13e3bb5c24a10212cde843a575ce9383402d14fad703be9dac522954ffdfe0abf9d5435", 0x36, 0xfffffffffffffff9)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r4}, &(0x7f0000000200)=""/201, 0xc9, &(0x7f0000000380)={&(0x7f0000000300)={'tgr128-generic\x00'}, &(0x7f0000000340)="c1cda27073ef33b38a40f606aee6819f", 0x10})

960.356383ms ago: executing program 9 (id=4656):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)

944.313601ms ago: executing program 8 (id=4657):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7e5, 0x0, 0xfffffffb, 0xffe00000}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001900010029bd7000ffdbdf250a801000fc04fd07002f000014001680100002800b000200696e6f79653332000500140002000000080017"], 0x40}, 0x1, 0x0, 0x0, 0x6001}, 0x24000050)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000000c0)={[{0x9bdd, 0xfffc, 0x5, 0xa, 0x81, 0x18, 0x4, 0x5, 0x0, 0x2, 0x5, 0x3, 0x5}, {0x8, 0xc835, 0xe5, 0x9, 0x5, 0x2, 0x7, 0x90, 0x71, 0x4, 0xe, 0xff, 0x1}, {0xd18f, 0x6, 0x3, 0x5, 0xb, 0x2, 0x6, 0x1, 0x9, 0x5, 0x6, 0x4, 0x8}], 0x6})
ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000001c0))
io_uring_enter(r1, 0x47f4, 0x0, 0x1, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

543.876323ms ago: executing program 8 (id=4658):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000020000069163e0000000000bf0700000000000026050700000000f06706000007000000150600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

413.558155ms ago: executing program 8 (id=4659):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r1, 0xaea2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x0, 0x2800, 0x5, 0x0, 0x800003f, 0x19ef, 0x3, 0x3, 0x4, 0x2800, 0x2, 0xba2, 0x0, 0x10, {0x5, 0xffffffff}, 0xd0, 0x9}}) (async)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (rerun: 32)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32)
r3 = getpid() (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 64)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@loopback, 0x4e21, 0x2, 0x8f, 0xe1b2, 0xfffffffe}}, 0x44) (async, rerun: 32)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
r10 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@remote, @default, @default, @remote, @remote, @default, @rose, @bcast]}, &(0x7f0000000140)=0x48, 0x800) (rerun: 64)
ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1000}, {r9, 0x1000}, {r10, 0x100}, {r8, 0x2010}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={[0x2]}, 0x8)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

96.3623ms ago: executing program 8 (id=4660):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x1f00]}}], 0xffc8)

66.645838ms ago: executing program 3 (id=4661):
r0 = syz_open_dev$video(0x0, 0x20000000005, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0xb, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$dsp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
utimes(0x0, &(0x7f00000022c0)={{}, {0x0, 0xea60}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0)
personality(0x4000000)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={[0x7]}, 0x8)
clock_gettime(0xfffffffffffffffd, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)='@\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r3, 0x3)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r4 = semget$private(0x0, 0x4000000009, 0x0)
semop(r4, &(0x7f00000002c0)=[{0x0, 0xff}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0)
r6 = openat2(r5, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x40aa00, 0x84, 0x4}, 0x18)
semop(r4, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1)
semtimedop(r4, &(0x7f0000000340)=[{0x3, 0xc71, 0x2800}, {0x2, 0xff80, 0x1800}, {0x1, 0x9, 0x1000}, {0x3, 0x7f, 0x1000}, {0x3, 0xf6d3, 0x1000}, {0x0, 0x7, 0x1000}, {0x3, 0x1000}, {0x2, 0xfffb}], 0x8, &(0x7f0000000380))
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x2, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000229, &(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES16=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(r6, &(0x7f0000000440)='./file0\x00', 0x1)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)

0s ago: executing program 9 (id=4662):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000007000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

kernel console output (not intermixed with test programs):


[ 1249.177014][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.184215][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.191187][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.198096][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.205122][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.213528][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.220453][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.227471][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.234515][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.241520][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.249793][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.257023][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.263773][ T5887] usb 9-1: USB disconnect, device number 24
[ 1249.269917][    C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting
[ 1249.269941][    C0] gspca_main: Resubmit URB failed with error -19
[ 1249.404101][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1250.369060][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4216'.
[ 1250.442572][T20731] ALSA: mixer_oss: invalid OSS volume ''
[ 1250.515999][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1250.868934][ T5915] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1251.222107][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1251.222169][T20756] loop9: detected capacity change from 0 to 7
[ 1251.242878][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1251.252694][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1251.261885][T20756] Dev loop9: unable to read RDB block 7
[ 1251.283272][T20756]  loop9: unable to read partition table
[ 1251.304829][T20756] loop9: partition table beyond EOD, truncated
[ 1251.315351][T20756] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1251.368485][ T5915] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1251.379469][T20760] FAULT_INJECTION: forcing a failure.
[ 1251.379469][T20760] name failslab, interval 1, probability 0, space 0, times 0
[ 1251.422700][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.431031][T20760] CPU: 1 UID: 0 PID: 20760 Comm: syz.3.4221 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[ 1251.431053][T20760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1251.431063][T20760] Call Trace:
[ 1251.431070][T20760]  <TASK>
[ 1251.431077][T20760]  dump_stack_lvl+0x241/0x360
[ 1251.431108][T20760]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1251.431133][T20760]  ? __pfx__printk+0x10/0x10
[ 1251.431157][T20760]  ? __kmalloc_node_noprof+0xb9/0x4d0
[ 1251.431178][T20760]  ? __pfx___might_resched+0x10/0x10
[ 1251.431198][T20760]  should_fail_ex+0x40a/0x550
[ 1251.431218][T20760]  should_failslab+0xac/0x100
[ 1251.431238][T20760]  __kmalloc_node_noprof+0xe1/0x4d0
[ 1251.431258][T20760]  ? qdisc_alloc+0x9a/0xa80
[ 1251.431284][T20760]  qdisc_alloc+0x9a/0xa80
[ 1251.431313][T20760]  qdisc_create+0x182/0x11a0
[ 1251.431353][T20760]  ? __pfx_qdisc_create+0x10/0x10
[ 1251.431379][T20760]  tc_modify_qdisc+0xbbb/0x1f10
[ 1251.431409][T20760]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1251.431445][T20760]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1251.431465][T20760]  rtnetlink_rcv_msg+0x73f/0xcf0
[ 1251.431481][T20760]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 1251.431501][T20760]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1251.431523][T20760]  ? ref_tracker_free+0x643/0x7e0
[ 1251.431545][T20760]  netlink_rcv_skb+0x1e3/0x430
[ 1251.431569][T20760]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1251.431590][T20760]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1251.431628][T20760]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1251.431653][T20760]  netlink_unicast+0x7f6/0x990
[ 1251.431680][T20760]  ? __pfx_netlink_unicast+0x10/0x10
[ 1251.431698][T20760]  ? __virt_addr_valid+0x45f/0x530
[ 1251.431721][T20760]  ? __phys_addr_symbol+0x2f/0x70
[ 1251.431741][T20760]  ? __check_object_size+0x47a/0x730
[ 1251.431763][T20760]  netlink_sendmsg+0x8e4/0xcb0
[ 1251.431794][T20760]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1251.431826][T20760]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1251.431848][T20760]  __sock_sendmsg+0x221/0x270
[ 1251.431868][T20760]  ____sys_sendmsg+0x52a/0x7e0
[ 1251.431897][T20760]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1251.431918][T20760]  ? __fget_files+0x2a/0x410
[ 1251.431940][T20760]  ? __fget_files+0x2a/0x410
[ 1251.431965][T20760]  __sys_sendmsg+0x269/0x350
[ 1251.431992][T20760]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1251.432024][T20760]  ? do_sys_openat2+0x17a/0x1d0
[ 1251.432062][T20760]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1251.432083][T20760]  ? do_syscall_64+0x100/0x230
[ 1251.432106][T20760]  ? do_syscall_64+0xb6/0x230
[ 1251.432129][T20760]  do_syscall_64+0xf3/0x230
[ 1251.432152][T20760]  ? clear_bhb_loop+0x35/0x90
[ 1251.432191][T20760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1251.432220][T20760] RIP: 0033:0x7f570738cda9
[ 1251.432240][T20760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1251.432253][T20760] RSP: 002b:00007f570829f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1251.432270][T20760] RAX: ffffffffffffffda RBX: 00007f57075a5fa0 RCX: 00007f570738cda9
[ 1251.432281][T20760] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 1251.432290][T20760] RBP: 00007f570829f090 R08: 0000000000000000 R09: 0000000000000000
[ 1251.432300][T20760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1251.432309][T20760] R13: 0000000000000000 R14: 00007f57075a5fa0 R15: 00007ffffb9e1298
[ 1251.432341][T20760]  </TASK>
[ 1251.627614][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1251.872462][ T5915] usb 5-1: config 0 descriptor??
[ 1252.388171][ T5915] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[ 1252.416977][ T5915] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving
[ 1252.426185][T17040] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1252.462805][ T5915] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1252.646501][T17040] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1252.673311][ T5915] usb 5-1: USB disconnect, device number 74
[ 1252.684317][T17040] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1252.698658][T17040] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1252.716983][T17040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1252.739399][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1252.741437][T17040] usb 4-1: SerialNumber: syz
[ 1252.766365][T20785] 9pnet_fd: Insufficient options for proto=fd
[ 1252.977338][ T5885] usb 7-1: new low-speed USB device number 41 using dummy_hcd
[ 1253.346099][T20793] netlink: 140 bytes leftover after parsing attributes in process `syz.8.4231'.
[ 1253.364285][T20793] netlink: 140 bytes leftover after parsing attributes in process `syz.8.4231'.
[ 1253.702310][ T5885] usb 7-1: Invalid ep0 maxpacket: 32
[ 1253.851225][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1253.858720][ T5885] usb 7-1: new low-speed USB device number 42 using dummy_hcd
[ 1254.043773][ T5885] usb 7-1: Invalid ep0 maxpacket: 32
[ 1254.076215][ T5885] usb usb7-port1: attempt power cycle
[ 1254.497099][T20813] XFS (nullb0): Invalid superblock magic number
[ 1254.875174][T20802] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4234'.
[ 1254.974277][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1255.641794][T17040] usb 4-1: 0:2 : does not exist
[ 1255.668807][ T5885] usb 7-1: new low-speed USB device number 43 using dummy_hcd
[ 1255.681957][T17040] usb 4-1: USB disconnect, device number 30
[ 1255.742489][ T5885] usb 7-1: Invalid ep0 maxpacket: 32
[ 1255.890114][ T5885] usb 7-1: new low-speed USB device number 44 using dummy_hcd
[ 1255.938741][ T5885] usb 7-1: device descriptor read/8, error -71
[ 1255.989393][ T5915] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1256.074847][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1256.143829][ T5885] usb usb7-port1: unable to enumerate USB device
[ 1256.286877][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4241'.
[ 1256.342215][ T5915] usb 5-1: Using ep0 maxpacket: 32
[ 1257.071220][ T5915] usb 5-1: config 0 has an invalid interface number: 109 but max is 0
[ 1257.079594][ T5915] usb 5-1: config 0 has no interface number 0
[ 1257.089256][ T5915] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[ 1257.101269][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1257.109429][ T5915] usb 5-1: Product: syz
[ 1257.115925][ T5915] usb 5-1: Manufacturer: syz
[ 1257.120619][ T5915] usb 5-1: SerialNumber: syz
[ 1257.131187][ T5915] usb 5-1: config 0 descriptor??
[ 1257.186702][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1257.447458][ T5915] mdc800 5-1:0.109: probe fails -> wrong Interface
[ 1257.468723][ T5915] usb 5-1: USB disconnect, device number 75
[ 1257.502128][T20842] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4243'.
[ 1258.303431][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1259.187331][T17040] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1259.399734][T17040] usb 9-1: Using ep0 maxpacket: 32
[ 1259.410312][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1259.412460][T17040] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1259.421669][T20869] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4251'.
[ 1259.666969][T17040] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1259.675634][T17040] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1259.699136][T17040] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1259.708153][T17040] usb 9-1: config 1 has no interface number 0
[ 1259.788929][T20873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4253'.
[ 1260.522318][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1260.731217][T17040] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1260.758041][T17040] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.982111][T14040] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1261.048981][T17040] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[ 1261.230840][T14040] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1261.260705][T14040] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0
[ 1261.281401][T14040] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1261.303066][T14040] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1261.326304][T20889] loop9: detected capacity change from 0 to 7
[ 1261.332978][T20889] buffer_io_error: 4 callbacks suppressed
[ 1261.332999][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.347015][T14040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.355074][T14040] usb 4-1: Product: syz
[ 1261.367054][T14040] usb 4-1: Manufacturer: syz
[ 1261.371768][T14040] usb 4-1: SerialNumber: syz
[ 1261.377692][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.385860][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.399634][T14040] usb 4-1: config 0 descriptor??
[ 1261.407405][T14040] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected
[ 1261.415506][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.424183][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[ 1261.442732][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[ 1261.465211][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.486834][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[ 1261.515683][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.524073][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[ 1261.538629][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[ 1261.546549][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[ 1261.559259][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.567318][T20889] ldm_validate_partition_table(): Disk read failed.
[ 1261.581832][T14040] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1261.593935][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[ 1261.601721][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[ 1261.623949][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[ 1261.633315][T20875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1261.633980][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1261.642258][T20875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1261.656802][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.665350][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.684073][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86
[ 1261.693700][T14040] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[ 1261.701967][T20889] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1261.711392][T14040] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1261.720083][T20889] Dev loop9: unable to read RDB block 0
[ 1261.736866][T20889]  loop9: unable to read partition table
[ 1261.742886][T20889] loop9: partition table beyond EOD, truncated
[ 1261.749150][T20889] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1261.946074][T17040] snd_usb_pod 9-1:1.1: set_interface failed
[ 1261.952167][T17040] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[ 1261.959718][T17040] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -71
[ 1261.973083][T17040] usb 9-1: USB disconnect, device number 25
[ 1262.207166][T15778] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1262.653590][T15778] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1262.724687][ T7785] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1262.745857][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1262.869019][T17040] usb 4-1: USB disconnect, device number 31
[ 1262.895326][T17040] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1262.914393][T17040] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1262.931088][T15778] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1262.944475][T17040] keyspan 4-1:0.0: device disconnected
[ 1262.985264][ T7785] usb 10-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[ 1263.065324][ T7785] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.076359][ T7785] usb 10-1: Product: syz
[ 1263.139031][ T7785] usb 10-1: Manufacturer: syz
[ 1263.202236][ T7785] usb 10-1: SerialNumber: syz
[ 1263.270752][ T7785] usb 10-1: config 0 descriptor??
[ 1263.343891][ T7785] usb 10-1: interface 1 not found
[ 1263.361978][T15778] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1263.857644][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1264.008735][T20916] netlink: 'syz.3.4267': attribute type 30 has an invalid length.
[ 1264.016799][T20916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4267'.
[ 1264.030965][T20916] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1264.040857][T20916] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1264.062770][T15778] bridge_slave_1: left allmulticast mode
[ 1264.068621][T15778] bridge_slave_1: left promiscuous mode
[ 1264.105129][T15778] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1264.231090][T15778] bridge_slave_0: left allmulticast mode
[ 1264.285594][T15778] bridge_slave_0: left promiscuous mode
[ 1264.323230][T15778] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1264.531307][T14040] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1264.813791][T16476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1264.826283][T16476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1264.852257][T16476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1264.864591][T16476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1264.876327][T16476] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1264.884201][T16476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1264.969486][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1265.563453][ T5885] usb 10-1: USB disconnect, device number 25
[ 1265.693451][T14040] usb 9-1: Using ep0 maxpacket: 32
[ 1265.696903][T20934] loop9: detected capacity change from 0 to 7
[ 1265.716935][T14040] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1265.732746][T14040] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1265.741591][T20934] ldm_validate_partition_table(): Disk read failed.
[ 1265.758695][T14040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.767328][T14040] usb 9-1: Product: syz
[ 1265.768720][T20934] Dev loop9: unable to read RDB block 0
[ 1265.778815][T20934]  loop9: unable to read partition table
[ 1265.785222][T20934] loop9: partition table beyond EOD, truncated
[ 1265.791721][T20934] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1265.799917][T14040] usb 9-1: Manufacturer: syz
[ 1265.849330][T14040] usb 9-1: SerialNumber: syz
[ 1265.856276][T20937] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1265.876867][T14040] usb 9-1: config 0 descriptor??
[ 1265.891943][T14040] usb 9-1: bad CDC descriptors
[ 1265.897314][T14040] usb 9-1: unsupported MDLM descriptors
[ 1266.081315][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1266.128616][T14040] usb 9-1: USB disconnect, device number 26
[ 1266.567436][T20947] tmpfs: Bad value for 'mpol'
[ 1267.193211][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1267.356864][T15778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1267.368466][T15778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1267.380757][T15778] bond0 (unregistering): Released all slaves
[ 1267.649278][ T5885] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1267.668606][T15778] tipc: Disabling bearer <udp:syz2>
[ 1267.696037][T15778] tipc: Left network mode
[ 1267.834625][ T5885] usb 9-1: Using ep0 maxpacket: 32
[ 1267.874992][ T5885] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[ 1267.890422][ T5845] Bluetooth: hci4: command tx timeout
[ 1267.909755][ T5885] usb 9-1: config 0 has no interface number 0
[ 1267.924117][ T5885] usb 9-1: config 0 interface 184 has no altsetting 0
[ 1267.973942][ T5885] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1267.983078][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.995621][ T5885] usb 9-1: Product: syz
[ 1267.999861][ T5885] usb 9-1: Manufacturer: syz
[ 1268.016759][ T5885] usb 9-1: SerialNumber: syz
[ 1268.027909][ T5885] usb 9-1: config 0 descriptor??
[ 1268.038633][ T5885] smsc75xx v1.0.0
[ 1268.194866][T15778] hsr_slave_0: left promiscuous mode
[ 1268.304970][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1268.352318][ T5885] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1268.374502][T15778] hsr_slave_1: left promiscuous mode
[ 1268.385262][ T5885] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[ 1268.396287][T15778] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1268.415341][T15778] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1268.425636][ T5885] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1268.462836][T20961] ALSA: mixer_oss: invalid OSS volume ''
[ 1268.608715][T15778] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1268.621652][ T5885] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32
[ 1268.644138][T15778] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1268.651934][T18001] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1268.680426][T18001] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1268.739046][T15778] veth1_macvtap: left promiscuous mode
[ 1268.752756][T15778] veth0_macvtap: left promiscuous mode
[ 1268.758999][T15778] veth1_vlan: left promiscuous mode
[ 1268.770058][T15778] veth0_vlan: left promiscuous mode
[ 1269.218509][T20977] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4287'.
[ 1269.262626][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1269.269447][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1269.416725][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1269.874876][  T837] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1270.061494][  T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1270.082476][  T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1270.091220][T15778] team0 (unregistering): Port device team_slave_1 removed
[ 1270.093096][  T837] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1270.113257][T16476] Bluetooth: hci4: command tx timeout
[ 1270.118883][  T837] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1270.128394][  T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.144878][  T837] usb 7-1: config 0 descriptor??
[ 1270.207338][T15778] team0 (unregistering): Port device team_slave_0 removed
[ 1270.526581][ T5885] usb 9-1: USB disconnect, device number 27
[ 1270.532639][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1270.589215][  T837] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0
[ 1270.601755][  T837] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving
[ 1270.660493][  T837] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1270.794176][T16476] Bluetooth: hci5: command 0x1003 tx timeout
[ 1270.794587][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1271.133819][T20923] chnl_net:caif_netlink_parms(): no params data found
[ 1271.640601][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1272.108032][T20923] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1272.144482][T20923] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1272.161140][T20923] bridge_slave_0: entered allmulticast mode
[ 1272.170907][T20996] ALSA: mixer_oss: invalid OSS volume ''
[ 1272.286458][T20923] bridge_slave_0: entered promiscuous mode
[ 1272.296409][T20923] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1272.305905][T20923] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1272.313212][T20923] bridge_slave_1: entered allmulticast mode
[ 1272.324845][ T5845] Bluetooth: hci4: command tx timeout
[ 1272.331475][T20923] bridge_slave_1: entered promiscuous mode
[ 1272.752192][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1272.901452][T20923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1272.934852][T21012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1273.045406][T20923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1273.072432][  T837] usb 7-1: USB disconnect, device number 45
[ 1273.333806][T21017] trusted_key: encrypted_key: master key parameter 'trustl:' is invalid
[ 1273.356655][T21017] tmpfs: Unknown parameter 'Ÿù@÷[úls'
[ 1273.839701][T21019] loop9: detected capacity change from 0 to 7
[ 1273.846804][T21019] buffer_io_error: 18 callbacks suppressed
[ 1273.846826][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1273.860921][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1273.864043][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1273.869287][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1273.884487][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1273.897999][T21004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1273.911042][T20923] team0: Port device team_slave_0 added
[ 1273.931616][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1273.941442][T20923] team0: Port device team_slave_1 added
[ 1273.948824][T21021] netlink: 'syz.6.4301': attribute type 33 has an invalid length.
[ 1273.951104][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1273.979737][T21004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1273.995687][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1274.004908][T21019] ldm_validate_partition_table(): Disk read failed.
[ 1274.013783][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1274.021920][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1274.060394][T21019] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1274.096203][T21019] Dev loop9: unable to read RDB block 0
[ 1274.220323][T20923] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1274.224638][T21019]  loop9: unable to read partition table
[ 1274.227325][T20923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1274.235413][T21019] loop9: partition table beyond EOD, truncated
[ 1274.269292][T21019] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1274.550577][ T5845] Bluetooth: hci4: command tx timeout
[ 1274.977735][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1275.033733][T20923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1275.053286][T20923] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1275.060287][T20923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1275.087253][T20923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1275.262786][T20923] hsr_slave_0: entered promiscuous mode
[ 1275.285672][T20923] hsr_slave_1: entered promiscuous mode
[ 1275.309172][T20923] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1275.329932][T20923] Cannot create hsr debugfs directory
[ 1275.688727][T21037] FAULT_INJECTION: forcing a failure.
[ 1275.688727][T21037] name failslab, interval 1, probability 0, space 0, times 0
[ 1275.743011][T21037] CPU: 1 UID: 0 PID: 21037 Comm: syz.6.4306 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[ 1275.743049][T21037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1275.743063][T21037] Call Trace:
[ 1275.743072][T21037]  <TASK>
[ 1275.743082][T21037]  dump_stack_lvl+0x241/0x360
[ 1275.743122][T21037]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1275.743154][T21037]  ? __pfx__printk+0x10/0x10
[ 1275.743188][T21037]  ? __kmalloc_node_noprof+0xb9/0x4d0
[ 1275.743218][T21037]  ? __pfx___might_resched+0x10/0x10
[ 1275.743245][T21037]  should_fail_ex+0x40a/0x550
[ 1275.743273][T21037]  should_failslab+0xac/0x100
[ 1275.743301][T21037]  __kmalloc_node_noprof+0xe1/0x4d0
[ 1275.743329][T21037]  ? qdisc_alloc+0x9a/0xa80
[ 1275.743366][T21037]  qdisc_alloc+0x9a/0xa80
[ 1275.743407][T21037]  qdisc_create_dflt+0x62/0x4b0
[ 1275.743445][T21037]  taprio_init+0x424/0xc80
[ 1275.743476][T21037]  ? ____sys_sendmsg+0x52a/0x7e0
[ 1275.743507][T21037]  ? __sys_sendmsg+0x269/0x350
[ 1275.743537][T21037]  ? do_syscall_64+0xf3/0x230
[ 1275.743580][T21037]  ? __pfx_taprio_init+0x10/0x10
[ 1275.743615][T21037]  ? lockdep_rtnl_is_held+0x26/0x40
[ 1275.743646][T21037]  ? qdisc_lookup+0x350/0x6b0
[ 1275.743670][T21037]  ? __pfx_taprio_init+0x10/0x10
[ 1275.743701][T21037]  qdisc_create+0x9d4/0x11a0
[ 1275.743736][T21037]  ? irqentry_exit+0x63/0x90
[ 1275.743770][T21037]  ? __pfx_qdisc_create+0x10/0x10
[ 1275.743807][T21037]  tc_modify_qdisc+0xbbb/0x1f10
[ 1275.743852][T21037]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1275.743905][T21037]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1275.743934][T21037]  rtnetlink_rcv_msg+0x73f/0xcf0
[ 1275.743957][T21037]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 1275.743986][T21037]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1275.744018][T21037]  ? ref_tracker_free+0x643/0x7e0
[ 1275.744051][T21037]  netlink_rcv_skb+0x1e3/0x430
[ 1275.744084][T21037]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1275.744111][T21037]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1275.744167][T21037]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1275.744203][T21037]  netlink_unicast+0x7f6/0x990
[ 1275.744241][T21037]  ? __pfx_netlink_unicast+0x10/0x10
[ 1275.744269][T21037]  ? __virt_addr_valid+0x45f/0x530
[ 1275.744328][T21037]  ? __phys_addr_symbol+0x2f/0x70
[ 1275.744357][T21037]  ? __check_object_size+0x47a/0x730
[ 1275.744388][T21037]  netlink_sendmsg+0x8e4/0xcb0
[ 1275.744434][T21037]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1275.744481][T21037]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1275.744513][T21037]  __sock_sendmsg+0x221/0x270
[ 1275.744542][T21037]  ____sys_sendmsg+0x52a/0x7e0
[ 1275.744584][T21037]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1275.744616][T21037]  ? __fget_files+0x2a/0x410
[ 1275.744647][T21037]  ? __fget_files+0x2a/0x410
[ 1275.744684][T21037]  __sys_sendmsg+0x269/0x350
[ 1275.744723][T21037]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1275.744776][T21037]  ? do_sys_openat2+0x17a/0x1d0
[ 1275.744832][T21037]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1275.744862][T21037]  ? do_syscall_64+0x100/0x230
[ 1275.744894][T21037]  ? do_syscall_64+0xb6/0x230
[ 1275.744925][T21037]  do_syscall_64+0xf3/0x230
[ 1275.744952][T21037]  ? clear_bhb_loop+0x35/0x90
[ 1275.744987][T21037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1275.745016][T21037] RIP: 0033:0x7f988a98cda9
[ 1275.745036][T21037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1275.745053][T21037] RSP: 002b:00007f988b71f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1275.745077][T21037] RAX: ffffffffffffffda RBX: 00007f988aba5fa0 RCX: 00007f988a98cda9
[ 1275.745093][T21037] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 1275.745107][T21037] RBP: 00007f988b71f090 R08: 0000000000000000 R09: 0000000000000000
[ 1275.745120][T21037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1275.745133][T21037] R13: 0000000000000000 R14: 00007f988aba5fa0 R15: 00007fff931722a8
[ 1275.745165][T21037]  </TASK>
[ 1276.087682][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1276.528636][T21042] ALSA: mixer_oss: invalid OSS volume ''
[ 1276.922570][T21048] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1277.199486][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1277.970232][T21070] loop9: detected capacity change from 0 to 7
[ 1278.003179][T21070] Dev loop9: unable to read RDB block 7
[ 1278.009008][T21070]  loop9: unable to read partition table
[ 1278.027974][T21070] loop9: partition table beyond EOD, truncated
[ 1278.044178][T21070] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1278.169413][T21076] FAULT_INJECTION: forcing a failure.
[ 1278.169413][T21076] name failslab, interval 1, probability 0, space 0, times 0
[ 1278.198051][T21076] CPU: 0 UID: 0 PID: 21076 Comm: syz.6.4318 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[ 1278.198085][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1278.198099][T21076] Call Trace:
[ 1278.198107][T21076]  <TASK>
[ 1278.198116][T21076]  dump_stack_lvl+0x241/0x360
[ 1278.198159][T21076]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1278.198194][T21076]  ? __pfx__printk+0x10/0x10
[ 1278.198228][T21076]  ? __kmalloc_node_noprof+0xb9/0x4d0
[ 1278.198258][T21076]  ? __pfx___might_resched+0x10/0x10
[ 1278.198287][T21076]  should_fail_ex+0x40a/0x550
[ 1278.198316][T21076]  should_failslab+0xac/0x100
[ 1278.198344][T21076]  __kmalloc_node_noprof+0xe1/0x4d0
[ 1278.198372][T21076]  ? qdisc_alloc+0x9a/0xa80
[ 1278.198410][T21076]  qdisc_alloc+0x9a/0xa80
[ 1278.198452][T21076]  qdisc_create_dflt+0x62/0x4b0
[ 1278.198489][T21076]  taprio_init+0x424/0xc80
[ 1278.198520][T21076]  ? ____sys_sendmsg+0x52a/0x7e0
[ 1278.198551][T21076]  ? __sys_sendmsg+0x269/0x350
[ 1278.198582][T21076]  ? do_syscall_64+0xf3/0x230
[ 1278.198624][T21076]  ? __pfx_taprio_init+0x10/0x10
[ 1278.198660][T21076]  ? lockdep_rtnl_is_held+0x26/0x40
[ 1278.198690][T21076]  ? qdisc_lookup+0x350/0x6b0
[ 1278.198714][T21076]  ? __pfx_taprio_init+0x10/0x10
[ 1278.198746][T21076]  qdisc_create+0x9d4/0x11a0
[ 1278.198790][T21076]  ? __pfx_qdisc_create+0x10/0x10
[ 1278.198829][T21076]  tc_modify_qdisc+0xbbb/0x1f10
[ 1278.198872][T21076]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1278.198926][T21076]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1278.198955][T21076]  rtnetlink_rcv_msg+0x73f/0xcf0
[ 1278.198978][T21076]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 1278.199007][T21076]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1278.199039][T21076]  ? ref_tracker_free+0x643/0x7e0
[ 1278.199072][T21076]  netlink_rcv_skb+0x1e3/0x430
[ 1278.199105][T21076]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1278.199132][T21076]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1278.199189][T21076]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1278.199224][T21076]  netlink_unicast+0x7f6/0x990
[ 1278.199264][T21076]  ? __pfx_netlink_unicast+0x10/0x10
[ 1278.199291][T21076]  ? __virt_addr_valid+0x45f/0x530
[ 1278.199323][T21076]  ? __phys_addr_symbol+0x2f/0x70
[ 1278.199352][T21076]  ? __check_object_size+0x47a/0x730
[ 1278.199383][T21076]  netlink_sendmsg+0x8e4/0xcb0
[ 1278.199429][T21076]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1278.199476][T21076]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1278.199507][T21076]  __sock_sendmsg+0x221/0x270
[ 1278.199537][T21076]  ____sys_sendmsg+0x52a/0x7e0
[ 1278.199592][T21076]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1278.199623][T21076]  ? __fget_files+0x2a/0x410
[ 1278.199653][T21076]  ? __fget_files+0x2a/0x410
[ 1278.199689][T21076]  __sys_sendmsg+0x269/0x350
[ 1278.199726][T21076]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1278.199776][T21076]  ? do_sys_openat2+0x17a/0x1d0
[ 1278.199832][T21076]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1278.199861][T21076]  ? do_syscall_64+0x100/0x230
[ 1278.199891][T21076]  ? do_syscall_64+0xb6/0x230
[ 1278.199920][T21076]  do_syscall_64+0xf3/0x230
[ 1278.199947][T21076]  ? clear_bhb_loop+0x35/0x90
[ 1278.199979][T21076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1278.200007][T21076] RIP: 0033:0x7f988a98cda9
[ 1278.200025][T21076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1278.200043][T21076] RSP: 002b:00007f988b71f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1278.200064][T21076] RAX: ffffffffffffffda RBX: 00007f988aba5fa0 RCX: 00007f988a98cda9
[ 1278.200080][T21076] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 1278.200093][T21076] RBP: 00007f988b71f090 R08: 0000000000000000 R09: 0000000000000000
[ 1278.200124][T21076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1278.200136][T21076] R13: 0000000000000000 R14: 00007f988aba5fa0 R15: 00007fff931722a8
[ 1278.200167][T21076]  </TASK>
[ 1278.575615][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1278.610044][T21078] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4319'.
[ 1278.702094][T21079] tmpfs: Bad value for 'grpquota_block_hardlimit'
[ 1278.815107][T21086] sctp: [Deprecated]: syz.6.4321 (pid 21086) Use of int in maxseg socket option.
[ 1278.815107][T21086] Use struct sctp_assoc_value instead
[ 1279.679753][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1279.798333][T21100] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1279.804615][T21100] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1280.385411][T21100] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1280.391427][T21100] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1280.419403][T21100] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1280.425462][T21100] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1280.470352][T21100] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1280.476922][T21100] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1280.553632][T21100] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1280.560020][T21100] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1280.578216][T21100] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1280.791596][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1281.578890][T21110] netlink: 'syz.3.4329': attribute type 30 has an invalid length.
[ 1281.587320][T21110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4329'.
[ 1281.601956][T21110] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1281.611583][T21110] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1281.654037][T20923] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1281.837717][T20923] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1281.903528][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1281.987215][T20923] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1281.999943][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[ 1282.027987][T20923] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1282.235181][T21123] FAULT_INJECTION: forcing a failure.
[ 1282.235181][T21123] name failslab, interval 1, probability 0, space 0, times 0
[ 1282.364348][T21123] CPU: 0 UID: 0 PID: 21123 Comm: syz.3.4334 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[ 1282.364378][T21123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1282.364390][T21123] Call Trace:
[ 1282.364396][T21123]  <TASK>
[ 1282.364404][T21123]  dump_stack_lvl+0x241/0x360
[ 1282.364441][T21123]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1282.364472][T21123]  ? __pfx__printk+0x10/0x10
[ 1282.364509][T21123]  ? __kmalloc_node_noprof+0xb9/0x4d0
[ 1282.364535][T21123]  ? __pfx___might_resched+0x10/0x10
[ 1282.364561][T21123]  should_fail_ex+0x40a/0x550
[ 1282.364584][T21123]  should_failslab+0xac/0x100
[ 1282.364606][T21123]  __kmalloc_node_noprof+0xe1/0x4d0
[ 1282.364628][T21123]  ? qdisc_alloc+0x9a/0xa80
[ 1282.364657][T21123]  qdisc_alloc+0x9a/0xa80
[ 1282.364682][T21123]  ? qdisc_hash_add+0x7a/0x2c0
[ 1282.364709][T21123]  qdisc_create_dflt+0x62/0x4b0
[ 1282.364742][T21123]  taprio_init+0x424/0xc80
[ 1282.364767][T21123]  ? ____sys_sendmsg+0x52a/0x7e0
[ 1282.364791][T21123]  ? __sys_sendmsg+0x269/0x350
[ 1282.364815][T21123]  ? do_syscall_64+0xf3/0x230
[ 1282.364848][T21123]  ? __pfx_taprio_init+0x10/0x10
[ 1282.364875][T21123]  ? lockdep_rtnl_is_held+0x26/0x40
[ 1282.364899][T21123]  ? qdisc_lookup+0x350/0x6b0
[ 1282.364917][T21123]  ? __pfx_taprio_init+0x10/0x10
[ 1282.364941][T21123]  qdisc_create+0x9d4/0x11a0
[ 1282.364963][T21123]  ? irqentry_exit+0x63/0x90
[ 1282.364989][T21123]  ? __pfx_qdisc_create+0x10/0x10
[ 1282.365019][T21123]  tc_modify_qdisc+0xbbb/0x1f10
[ 1282.365057][T21123]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1282.365121][T21123]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1282.365147][T21123]  rtnetlink_rcv_msg+0x73f/0xcf0
[ 1282.365169][T21123]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 1282.365194][T21123]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1282.365220][T21123]  ? ref_tracker_free+0x643/0x7e0
[ 1282.365249][T21123]  netlink_rcv_skb+0x1e3/0x430
[ 1282.365281][T21123]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1282.365305][T21123]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1282.365357][T21123]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1282.365402][T21123]  netlink_unicast+0x7f6/0x990
[ 1282.365438][T21123]  ? __pfx_netlink_unicast+0x10/0x10
[ 1282.365464][T21123]  ? __virt_addr_valid+0x45f/0x530
[ 1282.365494][T21123]  ? __phys_addr_symbol+0x2f/0x70
[ 1282.365527][T21123]  ? __check_object_size+0x47a/0x730
[ 1282.365554][T21123]  netlink_sendmsg+0x8e4/0xcb0
[ 1282.365597][T21123]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1282.365637][T21123]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1282.365664][T21123]  __sock_sendmsg+0x221/0x270
[ 1282.365688][T21123]  ____sys_sendmsg+0x52a/0x7e0
[ 1282.365724][T21123]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1282.365753][T21123]  ? __fget_files+0x2a/0x410
[ 1282.365772][T21125] Can't find a SQUASHFS superblock on nullb0
[ 1282.365783][T21123]  ? __fget_files+0x2a/0x410
[ 1282.365819][T21123]  __sys_sendmsg+0x269/0x350
[ 1282.365855][T21123]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1282.365897][T21123]  ? do_sys_openat2+0x17a/0x1d0
[ 1282.365945][T21123]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1282.365971][T21123]  ? do_syscall_64+0x100/0x230
[ 1282.365998][T21123]  ? do_syscall_64+0xb6/0x230
[ 1282.366026][T21123]  do_syscall_64+0xf3/0x230
[ 1282.366055][T21123]  ? clear_bhb_loop+0x35/0x90
[ 1282.366091][T21123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1282.366120][T21123] RIP: 0033:0x7f570738cda9
[ 1282.366139][T21123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1282.366157][T21123] RSP: 002b:00007f570829f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1282.366182][T21123] RAX: ffffffffffffffda RBX: 00007f57075a5fa0 RCX: 00007f570738cda9
[ 1282.366198][T21123] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 1282.366212][T21123] RBP: 00007f570829f090 R08: 0000000000000000 R09: 0000000000000000
[ 1282.366227][T21123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1282.366240][T21123] R13: 0000000000000000 R14: 00007f57075a5fa0 R15: 00007ffffb9e1298
[ 1282.366271][T21123]  </TASK>
[ 1282.619857][ T5845] Bluetooth: hci3: command 0x0406 tx timeout
[ 1282.641103][T16476] Bluetooth: hci2: command 0x0406 tx timeout
[ 1282.677450][ T5845] Bluetooth: hci1: command 0x0405 tx timeout
[ 1282.759418][T16476] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1283.015227][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1283.329475][T20923] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1283.501937][T21137] 9pnet_fd: Insufficient options for proto=fd
[ 1283.510145][T21137] trusted_key: encrypted_key: keylen parameter is missing
[ 1283.552927][T21131] ALSA: mixer_oss: invalid OSS volume ''
[ 1283.558838][T20923] 8021q: adding VLAN 0 to HW filter on device team0
[ 1283.593681][T18000] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1283.600788][T18000] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1283.985696][T18000] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1283.992931][T18000] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1284.127075][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1284.215685][T16476] Bluetooth: hci0: command 0x0406 tx timeout
[ 1284.447441][T21155] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4343'.
[ 1284.695396][T21160] netlink: 'syz.3.4344': attribute type 30 has an invalid length.
[ 1284.703639][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4344'.
[ 1284.721771][T21160] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1284.731759][T21160] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1285.002621][T16476] Bluetooth: hci3: command 0x0406 tx timeout
[ 1285.013192][T16476] Bluetooth: hci2: command 0x0406 tx timeout
[ 1285.019411][ T5845] Bluetooth: hci1: command 0x0405 tx timeout
[ 1285.025807][T16476] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1285.238881][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1285.857676][T12485] kworker/0:3 (12485) used greatest stack depth: 15856 bytes left
[ 1285.903250][T20923] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1285.911665][T21174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4349'.
[ 1286.053795][T21180] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4350'.
[ 1286.097666][T20923] veth0_vlan: entered promiscuous mode
[ 1286.163638][T20923] veth1_vlan: entered promiscuous mode
[ 1286.307325][T20923] veth0_macvtap: entered promiscuous mode
[ 1286.341591][T20923] veth1_macvtap: entered promiscuous mode
[ 1286.350791][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1286.915119][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1286.925706][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1286.964991][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1286.997431][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1287.045558][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1287.066938][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1287.087696][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1287.131062][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1287.164468][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1287.175227][T21193] netlink: 'syz.9.4354': attribute type 5 has an invalid length.
[ 1287.206879][T21161] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1287.216612][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1287.226504][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1287.308329][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1287.346565][T20923] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1287.443660][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1287.462540][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1287.495988][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1287.523251][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1287.556648][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1287.628034][T21198] loop9: detected capacity change from 0 to 7
[ 1287.705669][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1287.708963][T21198] buffer_io_error: 4 callbacks suppressed
[ 1287.708983][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1287.816177][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1287.866224][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1287.888256][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1287.935423][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1288.093460][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1288.103702][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1288.155541][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1288.197861][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1288.266432][T20923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1288.284297][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1288.306261][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1288.318075][T20923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1288.319653][T21209] netlink: 'syz.8.4358': attribute type 30 has an invalid length.
[ 1288.337812][T21209] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4358'.
[ 1288.398653][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1288.551230][T21198] ldm_validate_partition_table(): Disk read failed.
[ 1288.553556][T20923] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1288.574344][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1288.623352][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1288.654479][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1288.666443][T20923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.676097][T21198] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1288.686802][T20923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.696809][T21198] Dev loop9: unable to read RDB block 0
[ 1288.702944][T20923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.711936][T21198]  loop9: unable to read partition table
[ 1288.717744][T20923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.727259][T21198] loop9: partition table beyond EOD, truncated
[ 1288.750876][T21198] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1288.763507][T21209] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1288.810388][T21209] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1289.686215][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1290.145425][ T6431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1290.653565][ T6431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1290.789979][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4363'.
[ 1290.799249][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1291.225705][  T837] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1291.274255][T17994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1291.318688][T17994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1291.392338][  T837] usb 9-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1291.414574][  T837] usb 9-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0
[ 1291.427808][T21235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4365'.
[ 1291.437567][  T837] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1291.456168][  T837] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1291.468039][  T837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1291.481680][  T837] usb 9-1: Product: syz
[ 1291.500332][  T837] usb 9-1: Manufacturer: syz
[ 1291.506202][T21238] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4366'.
[ 1291.511160][  T837] usb 9-1: SerialNumber: syz
[ 1291.527062][  T837] usb 9-1: config 0 descriptor??
[ 1291.541903][  T837] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[ 1291.551169][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[ 1291.560460][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[ 1291.568717][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[ 1291.576461][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[ 1291.584414][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[ 1291.593981][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[ 1291.602995][  T837] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1291.613653][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[ 1291.623586][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3
[ 1291.638009][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[ 1291.685345][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[ 1291.716460][  T837] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[ 1291.737676][  T837] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1291.756339][T21221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1291.765116][T21221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1291.909823][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1292.013507][T21251] loop9: detected capacity change from 0 to 7
[ 1292.047756][T21251] ldm_validate_partition_table(): Disk read failed.
[ 1292.294769][T21251] Dev loop9: unable to read RDB block 0
[ 1292.317141][T21251]  loop9: unable to read partition table
[ 1292.333598][T21251] loop9: partition table beyond EOD, truncated
[ 1292.352762][T21251] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1292.370259][T21256] netlink: 'syz.6.4372': attribute type 30 has an invalid length.
[ 1292.378710][T21256] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4372'.
[ 1292.390916][T21256] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1292.400190][T21256] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1292.962524][  T837] usb 9-1: USB disconnect, device number 28
[ 1292.979493][  T837] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1292.997538][  T837] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1293.008090][  T837] keyspan 9-1:0.0: device disconnected
[ 1293.021633][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1293.120441][T21265] FAULT_INJECTION: forcing a failure.
[ 1293.120441][T21265] name failslab, interval 1, probability 0, space 0, times 0
[ 1293.144954][T21265] CPU: 1 UID: 0 PID: 21265 Comm: syz.3.4376 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[ 1293.144986][T21265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1293.145000][T21265] Call Trace:
[ 1293.145008][T21265]  <TASK>
[ 1293.145018][T21265]  dump_stack_lvl+0x241/0x360
[ 1293.145059][T21265]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1293.145111][T21265]  ? __pfx__printk+0x10/0x10
[ 1293.145147][T21265]  ? __kmalloc_node_noprof+0xb9/0x4d0
[ 1293.145177][T21265]  ? __pfx___might_resched+0x10/0x10
[ 1293.145206][T21265]  should_fail_ex+0x40a/0x550
[ 1293.145235][T21265]  should_failslab+0xac/0x100
[ 1293.145264][T21265]  __kmalloc_node_noprof+0xe1/0x4d0
[ 1293.145292][T21265]  ? qdisc_alloc+0x9a/0xa80
[ 1293.145330][T21265]  qdisc_alloc+0x9a/0xa80
[ 1293.145372][T21265]  qdisc_create_dflt+0x62/0x4b0
[ 1293.145411][T21265]  taprio_init+0x424/0xc80
[ 1293.145442][T21265]  ? ____sys_sendmsg+0x52a/0x7e0
[ 1293.145473][T21265]  ? __sys_sendmsg+0x269/0x350
[ 1293.145508][T21265]  ? do_syscall_64+0xf3/0x230
[ 1293.145551][T21265]  ? __pfx_taprio_init+0x10/0x10
[ 1293.145595][T21265]  ? lockdep_rtnl_is_held+0x26/0x40
[ 1293.145625][T21265]  ? qdisc_lookup+0x350/0x6b0
[ 1293.145650][T21265]  ? __pfx_taprio_init+0x10/0x10
[ 1293.145682][T21265]  qdisc_create+0x9d4/0x11a0
[ 1293.145719][T21265]  ? __pfx_qdisc_create+0x10/0x10
[ 1293.145758][T21265]  tc_modify_qdisc+0xbbb/0x1f10
[ 1293.145815][T21265]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1293.145867][T21265]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1293.145896][T21265]  rtnetlink_rcv_msg+0x73f/0xcf0
[ 1293.145917][T21265]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[ 1293.145964][T21265]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1293.145997][T21265]  ? ref_tracker_free+0x643/0x7e0
[ 1293.146030][T21265]  netlink_rcv_skb+0x1e3/0x430
[ 1293.146064][T21265]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1293.146091][T21265]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1293.146149][T21265]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1293.146185][T21265]  netlink_unicast+0x7f6/0x990
[ 1293.146225][T21265]  ? __pfx_netlink_unicast+0x10/0x10
[ 1293.146264][T21265]  ? __virt_addr_valid+0x45f/0x530
[ 1293.146295][T21265]  ? __phys_addr_symbol+0x2f/0x70
[ 1293.146323][T21265]  ? __check_object_size+0x47a/0x730
[ 1293.146354][T21265]  netlink_sendmsg+0x8e4/0xcb0
[ 1293.146400][T21265]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1293.146446][T21265]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1293.146476][T21265]  __sock_sendmsg+0x221/0x270
[ 1293.146511][T21265]  ____sys_sendmsg+0x52a/0x7e0
[ 1293.146553][T21265]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1293.146583][T21265]  ? __fget_files+0x2a/0x410
[ 1293.146614][T21265]  ? __fget_files+0x2a/0x410
[ 1293.146651][T21265]  __sys_sendmsg+0x269/0x350
[ 1293.146689][T21265]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1293.146754][T21265]  ? do_sys_openat2+0x17a/0x1d0
[ 1293.146813][T21265]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1293.146843][T21265]  ? do_syscall_64+0x100/0x230
[ 1293.146881][T21265]  ? do_syscall_64+0xb6/0x230
[ 1293.146912][T21265]  do_syscall_64+0xf3/0x230
[ 1293.146940][T21265]  ? clear_bhb_loop+0x35/0x90
[ 1293.146975][T21265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1293.147009][T21265] RIP: 0033:0x7f570738cda9
[ 1293.147029][T21265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1293.147047][T21265] RSP: 002b:00007f570829f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1293.147070][T21265] RAX: ffffffffffffffda RBX: 00007f57075a5fa0 RCX: 00007f570738cda9
[ 1293.147086][T21265] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 1293.147099][T21265] RBP: 00007f570829f090 R08: 0000000000000000 R09: 0000000000000000
[ 1293.147113][T21265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1293.147126][T21265] R13: 0000000000000000 R14: 00007f57075a5fa0 R15: 00007ffffb9e1298
[ 1293.147158][T21265]  </TASK>
[ 1293.738331][  T837] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1294.090750][  T837] usb 9-1: Using ep0 maxpacket: 32
[ 1294.129087][  T837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1294.140301][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1294.143309][T21270] syzkaller0: entered allmulticast mode
[ 1294.162973][  T837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1294.185798][  T837] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1294.201624][T21270] syzkaller0 (unregistering): left allmulticast mode
[ 1294.214075][  T837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1294.271209][T21273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4378'.
[ 1294.289417][  T837] usb 9-1: config 0 descriptor??
[ 1294.326669][  T837] hub 9-1:0.0: USB hub found
[ 1294.575081][T21262] Bluetooth: MGMT ver 1.23
[ 1294.606895][  T837] hub 9-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1294.642432][  T837] usbhid 9-1:0.0: can't add hid device: -71
[ 1294.684349][  T837] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1294.766954][  T837] usb 9-1: USB disconnect, device number 29
[ 1295.247029][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1296.204150][T17998] Bluetooth: (null): Invalid header checksum
[ 1296.220960][T17998] Bluetooth: (null): Invalid header checksum
[ 1296.314633][T17994] Bluetooth: (null): Invalid header checksum
[ 1296.357124][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1296.434694][T17994] Bluetooth: (null): Invalid header checksum
[ 1296.552545][ T1323] Bluetooth: (null): Invalid header checksum
[ 1297.373189][T17998] Bluetooth: (null): Invalid header checksum
[ 1297.419006][T15255] Bluetooth: (null): Invalid header checksum
[ 1297.468917][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1297.556018][ T6431] Bluetooth: (null): Invalid header checksum
[ 1297.604360][T21309] loop9: detected capacity change from 0 to 7
[ 1297.701233][T21309] Dev loop9: unable to read RDB block 7
[ 1297.744992][T17998] Bluetooth: (null): Invalid header checksum
[ 1297.764973][T21309]  loop9: unable to read partition table
[ 1297.789137][T17998] Bluetooth: (null): Invalid header checksum
[ 1297.811284][T21309] loop9: partition table beyond EOD, truncated
[ 1297.817658][T21309] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1297.835025][T17998] Bluetooth: (null): Invalid header checksum
[ 1297.869659][T17998] Bluetooth: (null): Invalid header checksum
[ 1297.955944][T17998] Bluetooth: (null): Invalid header checksum
[ 1297.997626][T17998] Bluetooth: (null): Invalid header checksum
[ 1298.008656][T17998] Bluetooth: (null): Invalid header checksum
[ 1298.018703][T17998] Bluetooth: (null): Invalid header checksum
[ 1298.030757][T17998] Bluetooth: (null): Invalid header checksum
[ 1298.110432][ T7785] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1298.161628][T17998] Bluetooth: (null): Invalid header checksum
[ 1298.290467][T18001] Bluetooth: (null): Invalid header checksum
[ 1298.299585][ T7785] usb 10-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1298.310037][ T7785] usb 10-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0
[ 1298.320339][ T7785] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1298.401162][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4390'.
[ 1298.580774][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1299.140859][ T7785] usb 10-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1299.150158][ T7785] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.158302][ T7785] usb 10-1: Product: syz
[ 1299.163503][ T7785] usb 10-1: Manufacturer: syz
[ 1299.169050][ T7785] usb 10-1: SerialNumber: syz
[ 1299.178618][ T1323] Bluetooth: (null): Invalid header checksum
[ 1299.182839][ T7785] usb 10-1: config 0 descriptor??
[ 1299.202026][ T7785] keyspan 10-1:0.0: Keyspan 2 port adapter converter detected
[ 1299.209730][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 7
[ 1299.220216][ T1323] Bluetooth: (null): Invalid header checksum
[ 1299.303404][ T1323] Bluetooth: (null): Invalid header checksum
[ 1299.322540][ T1323] Bluetooth: (null): Invalid header checksum
[ 1299.346238][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81
[ 1299.351052][ T1323] Bluetooth: (null): Invalid header checksum
[ 1299.365404][ T1323] Bluetooth: (null): Invalid header checksum
[ 1299.374491][ T1323] Bluetooth: (null): Invalid header checksum
[ 1299.394700][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1
[ 1299.414633][T21302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1299.424115][T21302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1299.433680][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2
[ 1299.453929][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 85
[ 1299.468494][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 5
[ 1299.478532][ T7785] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1299.487949][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 83
[ 1299.498182][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 3
[ 1299.506035][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4
[ 1299.515978][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 86
[ 1299.523970][ T7785] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 6
[ 1299.538757][ T7785] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1299.586493][T21324] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1299.596550][T21324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4393'.
[ 1299.692563][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1299.735500][ T5915] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1299.929702][ T5915] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.954742][ T5915] usb 7-1: config 9 has no interfaces?
[ 1299.974765][ T5915] usb 7-1: New USB device found, idVendor=0357, idProduct=0000, bcdDevice= 0.00
[ 1299.989210][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1300.624317][  T837] usb 10-1: USB disconnect, device number 26
[ 1300.701131][  T837] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1300.804924][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1300.852339][ T5915] usb 7-1: string descriptor 0 read error: -71
[ 1300.930888][ T5915] usb 7-1: USB disconnect, device number 46
[ 1300.965290][  T837] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1300.975168][  T837] keyspan 10-1:0.0: device disconnected
[ 1301.401842][T21338] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10)
[ 1301.408521][T21338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1301.458399][T21346] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4397'.
[ 1301.479007][T21338] vhci_hcd vhci_hcd.0: Device attached
[ 1301.734582][ T7785] usb 49-1: new low-speed USB device number 4 using vhci_hcd
[ 1301.780378][T21341] vhci_hcd: connection reset by peer
[ 1301.808436][T17994] vhci_hcd: stop threads
[ 1301.812929][T17994] vhci_hcd: release socket
[ 1301.828298][T17994] vhci_hcd: disconnect device
[ 1301.916272][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1302.023131][T16985] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[ 1302.321224][T16985] usb 7-1: config 5 has an invalid interface number: 123 but max is 0
[ 1302.354590][T16985] usb 7-1: config 5 has no interface number 0
[ 1302.368232][T21362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4402'.
[ 1302.540704][T16985] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[ 1302.553329][T16985] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1302.564496][T16985] usb 7-1: config 5 interface 123 has no altsetting 0
[ 1302.575389][T16985] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[ 1302.584863][T16985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1302.593675][T16985] usb 7-1: Product: syz
[ 1302.598014][T16985] usb 7-1: Manufacturer: syz
[ 1302.602925][T16985] usb 7-1: SerialNumber: syz
[ 1302.870824][T21366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4403'.
[ 1303.028063][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1303.878918][T16985] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device.
[ 1303.916032][T16985] usb 7-1: USB disconnect, device number 47
[ 1304.140376][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1304.154576][T21376] loop9: detected capacity change from 0 to 7
[ 1304.164706][T21376] Dev loop9: unable to read RDB block 7
[ 1304.170302][T21376]  loop9: unable to read partition table
[ 1304.176601][T21376] loop9: partition table beyond EOD, truncated
[ 1304.183921][T21376] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1304.274283][T21378] loop9: detected capacity change from 0 to 7
[ 1304.294211][T21378] buffer_io_error: 18 callbacks suppressed
[ 1304.294232][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.321453][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.352050][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.375255][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.392439][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.401757][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.411199][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.424968][T21378] ldm_validate_partition_table(): Disk read failed.
[ 1304.432822][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.518231][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.557515][T21378] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1304.596483][T21378] Dev loop9: unable to read RDB block 0
[ 1304.629430][T21378]  loop9: unable to read partition table
[ 1304.658750][T21378] loop9: partition table beyond EOD, truncated
[ 1304.681632][T21378] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1305.234301][T21388] vxcan0: tx drop: invalid sa for name 0x0000000000000005
[ 1305.251696][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1305.627215][T21408] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4415'.
[ 1306.070861][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4421'.
[ 1306.352866][T17040] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1306.363510][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1306.499609][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4427'.
[ 1306.516603][T17040] usb 9-1: Using ep0 maxpacket: 32
[ 1306.530326][T17040] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1306.543473][T17040] usb 9-1: config 196 has an invalid interface number: 14 but max is 0
[ 1306.555981][T16985] usb 7-1: new full-speed USB device number 48 using dummy_hcd
[ 1306.568533][T17040] usb 9-1: config 196 has no interface number 0
[ 1306.587424][T17040] usb 9-1: config 196 interface 14 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 1306.605242][T17040] usb 9-1: config 196 interface 14 has no altsetting 0
[ 1306.628656][T17040] usb 9-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=d5.bf
[ 1306.639079][T17040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.652198][T17040] usb 9-1: Product: syz
[ 1306.704844][T17040] usb 9-1: Manufacturer: syz
[ 1306.718866][T16985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1306.723577][T17040] usb 9-1: SerialNumber: syz
[ 1306.740008][T16985] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1306.757695][T16985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28770, setting to 64
[ 1306.769405][T16985] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1306.786548][T16985] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1306.796366][T16985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1306.804725][T16985] usb 7-1: Product: syz
[ 1306.809248][T16985] usb 7-1: Manufacturer: syz
[ 1306.829936][T16985] usb 7-1: SerialNumber: syz
[ 1306.837197][T16985] usb 7-1: config 0 descriptor??
[ 1306.843293][T21438] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1307.032189][T21446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1307.046514][T21446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1307.066696][T17040] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2
[ 1307.077538][T17040] usb 9-1: USB disconnect, device number 30
[ 1307.116191][T16985] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1307.127226][T16985] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1307.227688][ T7785] vhci_hcd: vhci_device speed not set
[ 1307.336905][T16985] radio-si470x 7-1:0.0: software version 0, hardware version 0
[ 1307.344543][T16985] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[ 1307.411240][T16985] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 1307.475365][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1307.493461][T21455] loop6: detected capacity change from 0 to 16384
[ 1307.551634][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.558480][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.566873][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.573833][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.580485][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.587223][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.594630][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.601915][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.608715][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.615623][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.624741][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.635500][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.646089][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.652835][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.659637][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.666327][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.673170][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.678511][ T5915] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1307.679893][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.694259][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.701295][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.709118][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.715845][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.722559][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.729202][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.735932][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.742758][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.749426][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.756325][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.763020][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.769712][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.776508][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.783355][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.790373][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.797380][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.804178][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.811700][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.819007][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.825704][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.832500][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.839288][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.845963][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.852731][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.859379][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.866100][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.872818][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.879475][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.886225][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.892984][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.899646][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.903403][ T5915] usb 10-1: Using ep0 maxpacket: 16
[ 1307.906474][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.918182][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.925616][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.932682][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.939684][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.946395][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.949586][ T5915] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1307.953042][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.973787][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.980553][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.987220][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1307.993974][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.000714][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.007379][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.014073][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.020813][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.027454][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.034895][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.038208][ T5915] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1308.042316][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.057480][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.064268][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.070922][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.077658][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.083414][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1308.084300][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.099217][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.106308][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.113319][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.120032][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.123720][ T5915] usb 10-1: config 0 descriptor??
[ 1308.126741][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.138421][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.146032][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.152700][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.159327][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.166635][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.173358][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.180008][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.186872][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.193898][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.200799][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input66
[ 1308.201015][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.217238][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.224206][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.231047][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.237794][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.244488][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.252050][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.259233][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.265917][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.272699][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.279661][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.286432][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.293270][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.299863][T16985] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1308.308364][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.315070][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.321813][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.328441][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.335180][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.342017][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.348654][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.355288][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.361850][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.373220][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.379944][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.386658][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.393337][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.400067][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.406804][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.413622][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.420306][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.427019][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.432332][ T5184] bcm5974 10-1:0.0: could not read from device
[ 1308.433647][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.446516][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.453269][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.459927][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.466672][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.476728][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.483894][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.484080][ T5184] bcm5974 10-1:0.0: could not read from device
[ 1308.490527][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.504216][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.510606][ T5915] usb 10-1: USB disconnect, device number 27
[ 1308.510851][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.523488][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.530147][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.537184][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.544341][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.551304][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.558015][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.564664][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.571372][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.579121][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4437'.
[ 1308.579712][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.595136][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1308.602793][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.609461][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.616122][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.622806][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.629458][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.636149][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.642878][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.649537][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.656240][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.663101][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.669764][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.676461][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.683098][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.691366][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.698103][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.704963][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.711643][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.718344][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.724999][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.731730][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.738393][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[ 1308.745303][T16985] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22
[ 1308.758004][T16985] usb 7-1: USB disconnect, device number 48
[ 1309.699062][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1310.014967][T21481] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[ 1310.021724][T21481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1310.033896][T21481] vhci_hcd vhci_hcd.0: Device attached
[ 1310.194011][T21489] vhci_hcd: connection closed
[ 1310.194843][T18004] vhci_hcd: stop threads
[ 1310.217507][T18004] vhci_hcd: release socket
[ 1310.226964][T18004] vhci_hcd: disconnect device
[ 1310.810792][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1311.870762][T21511] fuse: Bad value for 'user_id'
[ 1311.889595][T21511] fuse: Bad value for 'user_id'
[ 1311.922657][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1312.823841][T21536] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1312.900128][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4458'.
[ 1312.915444][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4458'.
[ 1313.035521][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1313.904895][T21553] loop9: detected capacity change from 0 to 7
[ 1313.933359][T21553] Dev loop9: unable to read RDB block 7
[ 1313.945571][T21553]  loop9: unable to read partition table
[ 1313.963417][T21553] loop9: partition table beyond EOD, truncated
[ 1313.981892][T21553] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1314.146321][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1314.146919][T17040] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1314.370967][T17040] usb 1-1: Using ep0 maxpacket: 8
[ 1314.400853][T17040] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1314.428573][T17040] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1314.483364][T17040] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1314.528686][T21568] netlink: 'syz.6.4473': attribute type 1 has an invalid length.
[ 1314.536768][T17040] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1314.541917][T16985] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1314.563537][T21568] netlink: 'syz.6.4473': attribute type 11 has an invalid length.
[ 1314.571406][T21568] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4473'.
[ 1314.580936][T17040] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1314.582468][T17040] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1314.647954][T17040] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1314.689766][T17040] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1314.725239][T21568] netlink: 'syz.6.4473': attribute type 3 has an invalid length.
[ 1314.732531][T17040] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1314.753550][T17040] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1314.776134][T17040] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1314.797781][T17040] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1314.798419][T16985] usb 9-1: Using ep0 maxpacket: 16
[ 1314.819250][T17040] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1314.824395][T16985] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1314.851628][T17040] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1314.873007][T16985] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1314.900404][T17040] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1314.912472][T16985] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1314.952581][T17040] usb 1-1: string descriptor 0 read error: -22
[ 1314.955562][T16985] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1314.967084][T17040] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1314.995020][T16985] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1314.999136][T17040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1315.032469][T16985] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1315.053724][T16985] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1315.075033][T16985] usb 9-1: Manufacturer: syz
[ 1315.099885][T16985] usb 9-1: config 0 descriptor??
[ 1315.104094][T17040] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1315.258171][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1315.317143][T17040] usb 1-1: USB disconnect, device number 38
[ 1316.369979][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1317.481764][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1318.593579][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1318.615094][ T5915] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1318.620940][T21597] loop9: detected capacity change from 0 to 7
[ 1318.630009][T21597] Dev loop9: unable to read RDB block 7
[ 1318.635666][T21597]  loop9: unable to read partition table
[ 1318.641884][T21597] loop9: partition table beyond EOD, truncated
[ 1318.657790][T21597] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1318.957080][ T5915] usb 7-1: device descriptor read/64, error -71
[ 1319.235430][ T5915] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1319.470593][ T5915] usb 7-1: device descriptor read/64, error -71
[ 1319.705393][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1320.061871][ T5915] usb usb7-port1: attempt power cycle
[ 1320.421993][T16985] rc_core: IR keymap rc-hauppauge not found
[ 1320.427958][T16985] Registered IR keymap rc-empty
[ 1320.451765][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1320.481213][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1320.519429][T16985] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1320.551318][T16985] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input67
[ 1320.593528][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1320.635742][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1320.670009][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1320.698158][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1320.700051][T21628] input: syz0 as /devices/virtual/input/input68
[ 1320.744570][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1320.774459][ T5915] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1320.807460][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1320.817269][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1320.903427][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1320.944688][ T5915] usb 7-1: device descriptor read/8, error -71
[ 1320.967966][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1321.050594][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1321.109079][T16985] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1321.124740][T21628] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.4491' sets config #0
[ 1321.188752][T16985] mceusb 9-1:0.0: Registered  with mce emulator interface version 1
[ 1321.260305][T16985] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1321.386882][ T5915] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1321.387589][T16985] usb 9-1: USB disconnect, device number 31
[ 1321.446909][ T5915] usb 7-1: device descriptor read/8, error -71
[ 1321.597923][ T5915] usb usb7-port1: unable to enumerate USB device
[ 1321.929357][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1322.110538][T21649] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4496'.
[ 1322.304952][ T5915] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[ 1322.388244][T21656] netlink: 'syz.9.4498': attribute type 1 has an invalid length.
[ 1322.436216][T21656] netlink: 70532 bytes leftover after parsing attributes in process `syz.9.4498'.
[ 1323.040896][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1323.479636][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1323.498247][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1323.545863][ T5915] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1323.566764][ T5915] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1323.599229][ T5915] usb 4-1: Manufacturer: syz
[ 1323.614200][ T5915] usb 4-1: config 0 descriptor??
[ 1323.907042][T16985] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1324.114550][T16985] usb 9-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1324.124362][ T5915] cougar 0003:060B:700A.0027: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 1324.148586][T16985] usb 9-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0
[ 1324.159919][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1324.234258][T16985] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1324.279507][T16985] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1324.313091][T16985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.360378][T21681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1324.376719][T16985] usb 9-1: Product: syz
[ 1324.388013][T16985] usb 9-1: Manufacturer: syz
[ 1324.408481][T16985] usb 9-1: SerialNumber: syz
[ 1324.419406][T21681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1324.443289][T16985] usb 9-1: config 0 descriptor??
[ 1324.487827][T16985] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[ 1324.516790][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[ 1324.545784][    T8] usb 4-1: USB disconnect, device number 32
[ 1324.558276][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[ 1324.602296][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[ 1324.646379][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[ 1324.705819][T21657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1324.715188][T21657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1324.730253][ T5885] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1324.749893][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[ 1324.801704][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[ 1324.823699][T16985] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1324.834661][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[ 1324.854123][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3
[ 1324.872566][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[ 1324.880868][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[ 1324.895280][T16985] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[ 1324.915774][T16985] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1324.958501][ T5885] usb 1-1: Using ep0 maxpacket: 16
[ 1324.973739][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1324.986610][ T5885] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1325.015564][ T5885] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1325.036781][ T5885] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 20
[ 1325.071551][ T5885] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1325.096404][ T5885] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1325.108627][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1325.125590][ T5915] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1325.127857][ T5885] usb 1-1: Product: syz
[ 1325.145482][ T5885] usb 1-1: Manufacturer: syz
[ 1325.159708][ T5885] usb 1-1: SerialNumber: syz
[ 1325.264551][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1325.307373][ T5915] usb 4-1: device descriptor read/64, error -71
[ 1325.606733][ T5915] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1325.767517][ T5915] usb 4-1: device descriptor read/64, error -71
[ 1326.214738][ T5915] usb usb4-port1: attempt power cycle
[ 1326.219137][    T8] usb 9-1: USB disconnect, device number 32
[ 1326.376345][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1326.402815][    T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1326.430879][    T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1326.481392][    T8] keyspan 9-1:0.0: device disconnected
[ 1326.681162][ T5885] usb-storage 1-1:1.2: USB Mass Storage device detected
[ 1326.782742][ T5915] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1326.815580][ T5915] usb 4-1: device descriptor read/8, error -71
[ 1326.947688][ T5885] usb 1-1: USB disconnect, device number 39
[ 1327.050191][T17040] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1327.082008][ T5915] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1327.119244][ T5915] usb 4-1: device descriptor read/8, error -71
[ 1327.210278][T17040] usb 10-1: device descriptor read/64, error -71
[ 1327.255399][ T5915] usb usb4-port1: unable to enumerate USB device
[ 1327.490448][T17040] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1327.490816][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1327.747093][T17040] usb 10-1: device descriptor read/64, error -71
[ 1327.805883][    T8] IPVS: starting estimator thread 0...
[ 1327.903529][T17040] usb usb10-port1: attempt power cycle
[ 1328.187282][T21722] IPVS: using max 24 ests per chain, 57600 per kthread
[ 1328.328807][T21724] 9pnet_fd: Insufficient options for proto=fd
[ 1328.418203][T17040] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1328.429162][T20927] Bluetooth: hci5: command 0x1003 tx timeout
[ 1328.435972][T21161] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1328.494391][T17040] usb 10-1: device descriptor read/8, error -71
[ 1328.600066][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1328.888879][T17040] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1328.934805][T17040] usb 10-1: device descriptor read/8, error -71
[ 1328.994903][T21741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4523'.
[ 1329.711916][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1329.869622][T17040] usb usb10-port1: unable to enumerate USB device
[ 1330.731008][T21751] netlink: 'syz.3.4528': attribute type 30 has an invalid length.
[ 1330.739643][T21751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4528'.
[ 1330.757388][T21751] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1330.767188][T21751] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1330.823785][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1331.057968][T21755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4531'.
[ 1331.348736][T14040] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1331.743042][T14040] usb 1-1: device descriptor read/64, error -71
[ 1331.935468][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1332.149229][T14040] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1332.214059][T21774] 9pnet: Unknown protocol version 9p200
[ 1332.226377][T21774] lo speed is unknown, defaulting to 1000
[ 1332.232252][T21774] lo speed is unknown, defaulting to 1000
[ 1332.240090][T21774] lo speed is unknown, defaulting to 1000
[ 1332.255603][T21774] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1332.278219][T21774] lo speed is unknown, defaulting to 1000
[ 1332.285860][T21774] lo speed is unknown, defaulting to 1000
[ 1332.292890][T21774] lo speed is unknown, defaulting to 1000
[ 1332.299783][T21774] lo speed is unknown, defaulting to 1000
[ 1332.306599][T21774] lo speed is unknown, defaulting to 1000
[ 1332.313619][T21774] lo speed is unknown, defaulting to 1000
[ 1332.320586][T21774] lo speed is unknown, defaulting to 1000
[ 1332.331009][T14040] usb 1-1: device descriptor read/64, error -71
[ 1332.449169][T14040] usb usb1-port1: attempt power cycle
[ 1332.462923][T21782] loop9: detected capacity change from 0 to 7
[ 1332.481494][T21782] Dev loop9: unable to read RDB block 7
[ 1332.487388][T21782]  loop9: unable to read partition table
[ 1332.493708][T21782] loop9: partition table beyond EOD, truncated
[ 1332.500009][T21782] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1332.815938][T21793] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[ 1333.047365][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1334.135754][T14040] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1334.161419][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1334.185437][T21796] netlink: 'syz.9.4544': attribute type 30 has an invalid length.
[ 1334.239888][T21796] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4544'.
[ 1334.243308][T14040] usb 1-1: device descriptor read/8, error -71
[ 1334.271781][T21796] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1334.281301][T21796] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1334.547642][T14040] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1334.801180][T14040] usb 1-1: device not accepting address 43, error -71
[ 1334.840268][T14040] usb usb1-port1: unable to enumerate USB device
[ 1334.933980][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1334.940448][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1335.271113][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1335.446828][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4549'.
[ 1335.887773][ T5885] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1336.114495][ T5885] usb 10-1: Using ep0 maxpacket: 16
[ 1336.143462][ T5885] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1336.164988][ T5885] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1336.200410][ T5885] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1336.222370][ T5885] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1336.230541][ T5885] usb 10-1: Product: syz
[ 1336.254626][ T5885] usb 10-1: Manufacturer: syz
[ 1336.272832][ T5885] usb 10-1: SerialNumber: syz
[ 1336.382752][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1336.852257][ T5885] usb 10-1: 0:2 : does not exist
[ 1336.936480][ T5885] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1337.111781][ T5885] usb 10-1: USB disconnect, device number 32
[ 1337.128843][T21835] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[ 1337.135495][T21835] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1337.209601][T21835] vhci_hcd vhci_hcd.0: Device attached
[ 1337.393956][T21836] vhci_hcd: connection closed
[ 1337.394318][ T1323] vhci_hcd: stop threads
[ 1337.410752][ T1323] vhci_hcd: release socket
[ 1337.420978][ T1323] vhci_hcd: disconnect device
[ 1337.494586][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1337.502501][    T8] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[ 1337.592571][    T8] usb 33-1: enqueue for inactive port 0
[ 1337.747680][T21840] netlink: 'syz.8.4558': attribute type 30 has an invalid length.
[ 1337.755894][T21840] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4558'.
[ 1337.766146][T21840] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1337.775737][T21840] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1337.996700][    T8] vhci_hcd: vhci_device speed not set
[ 1338.237559][T21846] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1338.318275][T21846] macsec1: entered promiscuous mode
[ 1338.368989][T21846] macsec1: entered allmulticast mode
[ 1338.390845][T21846] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1338.606937][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1339.548341][T21877] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10)
[ 1339.555018][T21877] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1339.565313][T21877] vhci_hcd vhci_hcd.0: Device attached
[ 1339.718807][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1340.101812][T21891] netlink: 'syz.3.4573': attribute type 30 has an invalid length.
[ 1340.113117][T21891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4573'.
[ 1340.124442][T16985] usb 49-1: new low-speed USB device number 5 using vhci_hcd
[ 1340.168064][T21891] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1340.178208][T21891] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1340.263808][T21884] vhci_hcd: connection closed
[ 1340.307295][   T35] vhci_hcd: stop threads
[ 1340.413425][   T35] vhci_hcd: release socket
[ 1340.475672][   T35] vhci_hcd: disconnect device
[ 1340.832124][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1341.578459][T14040] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1341.941868][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1342.166618][ T5885] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1342.414263][ T5885] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1342.432650][ T5885] usb 7-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0
[ 1342.451780][ T5885] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1342.461892][ T5885] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1342.471539][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1342.479752][ T5885] usb 7-1: Product: syz
[ 1342.484119][T14040] usb 1-1: Using ep0 maxpacket: 32
[ 1342.484329][ T5885] usb 7-1: Manufacturer: syz
[ 1342.491773][T14040] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1342.498845][ T5885] usb 7-1: SerialNumber: syz
[ 1342.507828][ T5885] usb 7-1: config 0 descriptor??
[ 1342.518367][ T5885] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected
[ 1342.526770][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7
[ 1342.535674][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81
[ 1342.544283][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1
[ 1342.545284][T14040] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1342.552156][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2
[ 1342.569046][T14040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1342.586326][T14040] usb 1-1: Product: syz
[ 1342.590695][T14040] usb 1-1: Manufacturer: syz
[ 1342.598949][T14040] usb 1-1: SerialNumber: syz
[ 1342.605180][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85
[ 1342.612689][T14040] usb 1-1: config 0 descriptor??
[ 1342.612920][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5
[ 1342.641247][ T5885] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1342.654935][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83
[ 1342.663494][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3
[ 1342.671718][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4
[ 1342.680060][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86
[ 1342.688351][ T5885] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6
[ 1342.740541][T21907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1342.749648][T21907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1342.759304][ T5885] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1342.884273][T21897] ALSA: mixer_oss: invalid OSS volume ''
[ 1343.053691][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1343.180373][T14040] gs_usb 1-1:0.0: Configuring for 1 interfaces
[ 1344.165499][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1344.483351][T14040] usb 1-1: USB disconnect, device number 44
[ 1345.110873][ T5887] usb 7-1: USB disconnect, device number 53
[ 1345.121575][ T5887] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1345.189652][ T5887] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1345.247993][ T5887] keyspan 7-1:0.0: device disconnected
[ 1345.277368][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1345.298157][T21944] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4588'.
[ 1345.482769][T21951] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1345.783214][T16985] vhci_hcd: vhci_device speed not set
[ 1346.389146][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1346.503982][T21959] netlink: 'syz.0.4592': attribute type 30 has an invalid length.
[ 1346.512303][T21959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4592'.
[ 1346.523266][T21959] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1346.533130][T21959] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1346.875796][T21961] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1346.883399][T21961] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1347.501005][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1347.972580][   T29] kauditd_printk_skb: 25 callbacks suppressed
[ 1347.972602][   T29] audit: type=1326 audit(1738566749.473:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1348.099442][   T29] audit: type=1326 audit(1738566749.473:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1348.174147][   T29] audit: type=1326 audit(1738566749.491:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1348.246501][   T29] audit: type=1326 audit(1738566749.491:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1348.334977][   T29] audit: type=1326 audit(1738566749.491:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1348.393458][   T29] audit: type=1326 audit(1738566749.510:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1348.555446][   T29] audit: type=1326 audit(1738566749.510:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1348.614183][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1348.816223][   T29] audit: type=1326 audit(1738566749.510:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1349.095431][   T29] audit: type=1326 audit(1738566749.510:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1349.177929][   T29] audit: type=1326 audit(1738566749.510:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.0.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545a38cda9 code=0x7ffc0000
[ 1349.479301][T21962] ALSA: mixer_oss: invalid OSS volume ''
[ 1349.724740][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1350.101418][T22004] input: syz1 as /devices/virtual/input/input69
[ 1350.836510][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1351.722712][T22024] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4611'.
[ 1351.948355][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1352.269550][T22030] netlink: 'syz.0.4614': attribute type 30 has an invalid length.
[ 1352.277702][T22030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4614'.
[ 1352.289006][T22030] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1352.298525][T22030] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1353.060165][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1354.153240][T22052] loop9: detected capacity change from 0 to 7
[ 1354.171937][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1354.179784][T22052] buffer_io_error: 4 callbacks suppressed
[ 1354.179803][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.219833][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.250674][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.276783][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.300704][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.332766][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.354064][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.393958][T22052] ldm_validate_partition_table(): Disk read failed.
[ 1354.401388][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.429086][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.445201][T22052] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1354.482153][T22052] Dev loop9: unable to read RDB block 0
[ 1354.493220][T22052]  loop9: unable to read partition table
[ 1354.515578][T22052] loop9: partition table beyond EOD, truncated
[ 1354.557401][T22052] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1354.848799][ T5915] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1355.283819][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1355.870931][T21161] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1355.972162][ T5915] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[ 1356.148322][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1356.159208][ T5915] usb 4-1: config 0 has no interface number 0
[ 1356.174150][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 1356.184490][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1356.351139][T22081] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4628'.
[ 1356.366788][ T5915] usb 4-1: Product: syz
[ 1356.371067][ T5915] usb 4-1: Manufacturer: syz
[ 1356.395579][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1356.427851][ T5915] usb 4-1: SerialNumber: syz
[ 1356.542629][ T5915] usb 4-1: config 0 descriptor??
[ 1356.568851][T17040] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1356.866607][ T5915] usb 4-1: USB disconnect, device number 37
[ 1356.931346][T17040] usb 9-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1356.956079][T17040] usb 9-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0
[ 1356.967795][T22086] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4629'.
[ 1356.970277][T17040] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1356.993806][T17040] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1357.014166][T17040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.027928][T17040] usb 9-1: Product: syz
[ 1357.034650][T17040] usb 9-1: Manufacturer: syz
[ 1357.047803][T17040] usb 9-1: SerialNumber: syz
[ 1357.060581][T17040] usb 9-1: config 0 descriptor??
[ 1357.078275][T17040] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[ 1357.087055][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[ 1357.096650][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[ 1357.116239][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[ 1357.124283][T22053] ALSA: mixer_oss: invalid OSS volume ''
[ 1357.135484][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[ 1357.154087][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[ 1357.164905][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[ 1357.195346][T17040] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1357.205334][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[ 1357.213417][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3
[ 1357.228172][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[ 1357.263549][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[ 1357.308149][T17040] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[ 1357.312419][T22067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1357.325007][T22067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1357.333645][T17040] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1357.508892][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1358.619206][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1359.175502][T16985] usb 9-1: USB disconnect, device number 34
[ 1359.202424][T16985] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1359.222273][T16985] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1359.244598][T16985] keyspan 9-1:0.0: device disconnected
[ 1359.338041][T22117] loop9: detected capacity change from 0 to 7
[ 1359.351846][T22116] cgroup: subsys name conflicts with all
[ 1359.363070][T22117] ldm_validate_partition_table(): Disk read failed.
[ 1359.385271][T22117] Dev loop9: unable to read RDB block 0
[ 1359.410998][T22117]  loop9: unable to read partition table
[ 1359.419691][T22117] loop9: partition table beyond EOD, truncated
[ 1359.431485][T22117] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1359.585084][T22125] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[ 1359.591663][T22125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1359.612161][T22125] vhci_hcd vhci_hcd.0: Device attached
[ 1359.627685][   T29] kauditd_printk_skb: 1 callbacks suppressed
[ 1359.627705][   T29] audit: type=1326 audit(1738566760.370:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22124 comm="syz.3.4640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f570738cda9 code=0x0
[ 1359.674539][T22132] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4641'.
[ 1359.702498][T16985] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1359.731028][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1359.859533][T14040] usb 39-1: new low-speed USB device number 4 using vhci_hcd
[ 1359.871510][T16985] usb 9-1: config 0 has an invalid interface number: 153 but max is 0
[ 1359.893743][T16985] usb 9-1: config 0 has no interface number 0
[ 1359.900876][T16985] usb 9-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[ 1359.915719][T16985] usb 9-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1359.936038][T16985] usb 9-1: config 0 interface 153 has no altsetting 0
[ 1359.945631][T16985] usb 9-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[ 1359.954721][T16985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1359.963172][T16985] usb 9-1: Product: syz
[ 1359.967714][T16985] usb 9-1: Manufacturer: syz
[ 1359.972433][T16985] usb 9-1: SerialNumber: syz
[ 1359.979928][T16985] usb 9-1: config 0 descriptor??
[ 1359.990750][T16985] hub 9-1:0.153: bad descriptor, ignoring hub
[ 1359.996965][T16985] hub 9-1:0.153: probe with driver hub failed with error -5
[ 1360.005774][T16985] sierra 9-1:0.153: Sierra USB modem converter detected
[ 1360.262507][T16985] usb 9-1: USB disconnect, device number 35
[ 1360.275375][T16985] sierra 9-1:0.153: device disconnected
[ 1360.544660][ T5885] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1360.789491][ T5885] usb 4-1: Using ep0 maxpacket: 16
[ 1360.797375][T22146] syzkaller1: entered promiscuous mode
[ 1360.799923][ T5885] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[ 1360.807904][T22146] syzkaller1: entered allmulticast mode
[ 1360.822219][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1360.839011][ T5885] usb 4-1: Product: syz
[ 1360.843837][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1360.860385][ T5885] usb 4-1: Manufacturer: syz
[ 1360.875042][ T5885] usb 4-1: SerialNumber: syz
[ 1360.891637][ T5885] usb 4-1: config 0 descriptor??
[ 1360.893807][T22150] loop7: detected capacity change from 0 to 16384
[ 1360.899066][ T5885] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 1360.924208][T22150] loop7: detected capacity change from 16384 to 16383
[ 1360.939645][ T5885] usb 4-1: Detected FT232H
[ 1361.003350][T16985] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1361.174389][T16985] usb 7-1: device descriptor read/64, error -71
[ 1361.270976][T14040] usb 39-1: device descriptor read/64, error -71
[ 1361.441974][T16985] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1361.527398][T14040] usb 39-1: new low-speed USB device number 5 using vhci_hcd
[ 1361.582032][T22169] loop9: detected capacity change from 0 to 7
[ 1361.588826][T22169] buffer_io_error: 18 callbacks suppressed
[ 1361.588856][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.602123][T16985] usb 7-1: device descriptor read/64, error -71
[ 1361.625782][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.635133][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.652019][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.663739][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.682762][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.717381][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.720142][T16985] usb usb7-port1: attempt power cycle
[ 1361.732189][T22169] ldm_validate_partition_table(): Disk read failed.
[ 1361.739227][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.759948][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.773335][T22169] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1361.783479][T22169] Dev loop9: unable to read RDB block 0
[ 1361.800001][T22169]  loop9: unable to read partition table
[ 1361.817031][T22169] loop9: partition table beyond EOD, truncated
[ 1361.823546][T22169] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1361.843492][T22167] could not allocate digest TFM handle tgr128-generic
[ 1361.954680][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1362.104424][T16985] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1362.138362][T16985] usb 7-1: device descriptor read/8, error -71
[ 1362.197626][T22161] ALSA: mixer_oss: invalid OSS volume ''
[ 1362.393388][T16985] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1362.426004][T16985] usb 7-1: device descriptor read/8, error -71
[ 1362.543340][T16985] usb usb7-port1: unable to enumerate USB device
[ 1362.832927][T22126] vhci_hcd: connection closed
[ 1362.834012][ T5885] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1362.842441][T17998] vhci_hcd: stop threads
[ 1362.863305][T17998] vhci_hcd: release socket
[ 1362.885130][T17998] vhci_hcd: disconnect device
[ 1362.893135][ T5885] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1362.986633][ T5885] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[ 1362.995448][ T5885] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1363.007325][ T5885] usb 4-1: USB disconnect, device number 38
[ 1363.021244][ T5885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1363.032422][ T5885] ftdi_sio 4-1:0.0: device disconnected
[ 1363.044168][T21161] ==================================================================
[ 1363.052284][T21161] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xd7/0x140
[ 1363.060316][T21161] Read of size 8 at addr ffff888078f8d188 by task kworker/u9:1/21161
[ 1363.066550][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1363.068388][T21161] 
[ 1363.068402][T21161] CPU: 1 UID: 0 PID: 21161 Comm: kworker/u9:1 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[ 1363.068430][T21161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1363.068449][T21161] Workqueue: hci1 hci_rx_work
[ 1363.068491][T21161] Call Trace:
[ 1363.068502][T21161]  <TASK>
[ 1363.068513][T21161]  dump_stack_lvl+0x241/0x360
[ 1363.068553][T21161]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1363.068590][T21161]  ? __pfx__printk+0x10/0x10
[ 1363.068624][T21161]  ? _printk+0xd5/0x120
[ 1363.068658][T21161]  ? __virt_addr_valid+0x183/0x530
[ 1363.068689][T21161]  ? __virt_addr_valid+0x183/0x530
[ 1363.068722][T21161]  print_report+0x169/0x550
[ 1363.068749][T21161]  ? __virt_addr_valid+0x183/0x530
[ 1363.068779][T21161]  ? __virt_addr_valid+0x183/0x530
[ 1363.068810][T21161]  ? __virt_addr_valid+0x45f/0x530
[ 1363.068841][T21161]  ? __phys_addr+0xba/0x170
[ 1363.068872][T21161]  ? l2cap_sock_ready_cb+0xd7/0x140
[ 1363.068905][T21161]  kasan_report+0x143/0x180
[ 1363.068931][T21161]  ? l2cap_sock_ready_cb+0xd7/0x140
[ 1363.068966][T21161]  l2cap_sock_ready_cb+0xd7/0x140
[ 1363.069006][T21161]  l2cap_le_start+0x4e0/0x17d0
[ 1363.069030][T21161]  ? __cancel_work+0x24a/0x390
[ 1363.069060][T21161]  ? __mutex_unlock_slowpath+0x227/0x800
[ 1363.069091][T21161]  ? l2cap_connect_cfm+0x626/0x1090
[ 1363.069119][T21161]  ? __pfx_l2cap_le_start+0x10/0x10
[ 1363.069144][T21161]  ? l2cap_global_fixed_chan+0x2dd/0x370
[ 1363.069173][T21161]  ? __pfx_l2cap_global_fixed_chan+0x10/0x10
[ 1363.069205][T21161]  ? l2cap_chan_put+0x11b/0x250
[ 1363.069238][T21161]  l2cap_connect_cfm+0x668/0x1090
[ 1363.069270][T21161]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1363.069298][T21161]  ? hci_cb_lookup+0x3a0/0x3c0
[ 1363.069324][T21161]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1363.069353][T21161]  hci_connect_cfm+0x162/0x240
[ 1363.069379][T21161]  ? __pfx_hci_connect_cfm+0x10/0x10
[ 1363.069406][T21161]  ? hci_conn_add_sysfs+0xfc/0x200
[ 1363.069439][T21161]  le_conn_complete_evt+0xd3e/0x12e0
[ 1363.069472][T21161]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1363.069499][T21161]  ? __mutex_unlock_slowpath+0x227/0x800
[ 1363.069533][T21161]  ? skb_pull_data+0x112/0x230
[ 1363.069561][T21161]  hci_le_conn_complete_evt+0x18c/0x420
[ 1363.069591][T21161]  hci_event_packet+0xa55/0x1540
[ 1363.069628][T21161]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1363.069655][T21161]  ? __pfx_hci_event_packet+0x10/0x10
[ 1363.069689][T21161]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1363.069717][T21161]  ? hci_send_to_monitor+0xd8/0x7f0
[ 1363.069744][T21161]  ? kcov_remote_start+0x97/0x7d0
[ 1363.069773][T21161]  hci_rx_work+0x3f3/0xdb0
[ 1363.069811][T21161]  ? process_scheduled_works+0x976/0x1840
[ 1363.069837][T21161]  process_scheduled_works+0xa66/0x1840
[ 1363.069875][T21161]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1363.069906][T21161]  ? assign_work+0x364/0x3d0
[ 1363.069932][T21161]  worker_thread+0x870/0xd30
[ 1363.069961][T21161]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1363.069996][T21161]  ? __kthread_parkme+0x169/0x1d0
[ 1363.070024][T21161]  ? __pfx_worker_thread+0x10/0x10
[ 1363.070049][T21161]  kthread+0x7a9/0x920
[ 1363.070078][T21161]  ? __pfx_kthread+0x10/0x10
[ 1363.070113][T21161]  ? __pfx_worker_thread+0x10/0x10
[ 1363.070138][T21161]  ? __pfx_kthread+0x10/0x10
[ 1363.070166][T21161]  ? __pfx_kthread+0x10/0x10
[ 1363.070196][T21161]  ? __pfx_kthread+0x10/0x10
[ 1363.070225][T21161]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1363.070248][T21161]  ? lockdep_hardirqs_on+0x99/0x150
[ 1363.070274][T21161]  ? __pfx_kthread+0x10/0x10
[ 1363.070304][T21161]  ret_from_fork+0x4b/0x80
[ 1363.070331][T21161]  ? __pfx_kthread+0x10/0x10
[ 1363.070361][T21161]  ret_from_fork_asm+0x1a/0x30
[ 1363.070394][T21161]  </TASK>
[ 1363.070403][T21161] 
[ 1363.426270][T21161] Allocated by task 22195:
[ 1363.430691][T21161]  kasan_save_track+0x3f/0x80
[ 1363.435384][T21161]  __kasan_kmalloc+0x98/0xb0
[ 1363.439981][T21161]  __kmalloc_noprof+0x285/0x4c0
[ 1363.444842][T21161]  sk_prot_alloc+0xe0/0x210
[ 1363.449357][T21161]  sk_alloc+0x38/0x370
[ 1363.453433][T21161]  bt_sock_alloc+0x3c/0x340
[ 1363.457938][T21161]  l2cap_sock_create+0x13d/0x300
[ 1363.462886][T21161]  bt_sock_create+0x161/0x230
[ 1363.467569][T21161]  __sock_create+0x4c0/0xa30
[ 1363.472176][T21161]  __sys_socket+0x150/0x3c0
[ 1363.476707][T21161]  __x64_sys_socket+0x7a/0x90
[ 1363.481421][T21161]  do_syscall_64+0xf3/0x230
[ 1363.485943][T21161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1363.491848][T21161] 
[ 1363.494179][T21161] Freed by task 22193:
[ 1363.498249][T21161]  kasan_save_track+0x3f/0x80
[ 1363.502931][T21161]  kasan_save_free_info+0x40/0x50
[ 1363.507970][T21161]  __kasan_slab_free+0x59/0x70
[ 1363.512733][T21161]  kfree+0x196/0x430
[ 1363.516633][T21161]  __sk_destruct+0x479/0x5f0
[ 1363.521232][T21161]  l2cap_sock_release+0x15b/0x1d0
[ 1363.526263][T21161]  sock_close+0xbc/0x240
[ 1363.530507][T21161]  __fput+0x3e9/0x9f0
[ 1363.534499][T21161]  task_work_run+0x24f/0x310
[ 1363.539104][T21161]  syscall_exit_to_user_mode+0x13f/0x340
[ 1363.544746][T21161]  do_syscall_64+0x100/0x230
[ 1363.549343][T21161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1363.555245][T21161] 
[ 1363.557565][T21161] The buggy address belongs to the object at ffff888078f8d000
[ 1363.557565][T21161]  which belongs to the cache kmalloc-2k of size 2048
[ 1363.571627][T21161] The buggy address is located 392 bytes inside of
[ 1363.571627][T21161]  freed 2048-byte region [ffff888078f8d000, ffff888078f8d800)
[ 1363.585514][T21161] 
[ 1363.587842][T21161] The buggy address belongs to the physical page:
[ 1363.594269][T21161] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78f88
[ 1363.603030][T21161] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1363.611529][T21161] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1363.619520][T21161] page_type: f5(slab)
[ 1363.623509][T21161] raw: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001
[ 1363.632095][T21161] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 1363.640679][T21161] head: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001
[ 1363.649371][T21161] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 1363.658044][T21161] head: 00fff00000000003 ffffea0001e3e201 ffffffffffffffff 0000000000000000
[ 1363.666723][T21161] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 1363.675389][T21161] page dumped because: kasan: bad access detected
[ 1363.681812][T21161] page_owner tracks the page as allocated
[ 1363.687525][T21161] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3572, tgid 3572 (kworker/u8:10), ts 792340779188, free_ts 792146167692
[ 1363.708980][T21161]  post_alloc_hook+0x1f4/0x240
[ 1363.713760][T21161]  get_page_from_freelist+0x3651/0x37a0
[ 1363.719310][T21161]  __alloc_frozen_pages_noprof+0x292/0x710
[ 1363.725119][T21161]  alloc_pages_mpol+0x311/0x660
[ 1363.729977][T21161]  allocate_slab+0x8f/0x3a0
[ 1363.734493][T21161]  ___slab_alloc+0xc27/0x14a0
[ 1363.739186][T21161]  __slab_alloc+0x58/0xa0
[ 1363.743529][T21161]  __kmalloc_node_track_caller_noprof+0x2e9/0x4c0
[ 1363.749965][T21161]  kmalloc_reserve+0x111/0x2a0
[ 1363.754743][T21161]  pskb_expand_head+0x1f0/0x1380
[ 1363.759684][T21161]  netlink_trim+0x1d6/0x2e0
[ 1363.764214][T21161]  netlink_broadcast_filtered+0x76/0x12a0
[ 1363.769946][T21161]  nlmsg_notify+0xfb/0x1c0
[ 1363.774374][T21161]  rtnetlink_event+0x21d/0x260
[ 1363.779145][T21161]  notifier_call_chain+0x1a5/0x3f0
[ 1363.784263][T21161]  netdev_lower_state_changed+0x10a/0x180
[ 1363.789998][T21161] page last free pid 14580 tgid 14580 stack trace:
[ 1363.796509][T21161]  free_frozen_pages+0xe04/0x10e0
[ 1363.801566][T21161]  __put_partials+0x160/0x1c0
[ 1363.806255][T21161]  put_cpu_partial+0x17c/0x250
[ 1363.811019][T21161]  __slab_free+0x290/0x380
[ 1363.815434][T21161]  qlist_free_all+0x9a/0x140
[ 1363.820025][T21161]  kasan_quarantine_reduce+0x14f/0x170
[ 1363.825505][T21161]  __kasan_slab_alloc+0x23/0x80
[ 1363.830363][T21161]  __kmalloc_noprof+0x236/0x4c0
[ 1363.835219][T21161]  tomoyo_realpath_from_path+0xcf/0x5e0
[ 1363.840787][T21161]  tomoyo_condition+0x1a8c/0x3230
[ 1363.845818][T21161]  tomoyo_check_acl+0x174/0x3f0
[ 1363.850930][T21161]  tomoyo_execute_permission+0x13d/0x410
[ 1363.856571][T21161]  tomoyo_find_next_domain+0x4f6/0x1dd0
[ 1363.862125][T21161]  tomoyo_bprm_check_security+0x117/0x180
[ 1363.867874][T21161]  security_bprm_check+0x86/0x250
[ 1363.872920][T21161]  bprm_execve+0x8d3/0x1430
[ 1363.877428][T21161] 
[ 1363.879782][T21161] Memory state around the buggy address:
[ 1363.885409][T21161]  ffff888078f8d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1363.893470][T21161]  ffff888078f8d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1363.901617][T21161] >ffff888078f8d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1363.909675][T21161]                       ^
[ 1363.914004][T21161]  ffff888078f8d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1363.922065][T21161]  ffff888078f8d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1363.930138][T21161] ==================================================================
[ 1363.950178][T21161] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1363.957434][T21161] CPU: 1 UID: 0 PID: 21161 Comm: kworker/u9:1 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[ 1363.968069][T21161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1363.978165][T21161] Workqueue: hci1 hci_rx_work
[ 1363.982916][T21161] Call Trace:
[ 1363.986215][T21161]  <TASK>
[ 1363.989174][T21161]  dump_stack_lvl+0x241/0x360
[ 1363.993892][T21161]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1363.999131][T21161]  ? __pfx__printk+0x10/0x10
[ 1364.003761][T21161]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1364.009874][T21161]  ? vscnprintf+0x5d/0x90
[ 1364.014248][T21161]  panic+0x349/0x880
[ 1364.018190][T21161]  ? check_panic_on_warn+0x21/0xb0
[ 1364.023347][T21161]  ? __pfx_panic+0x10/0x10
[ 1364.027813][T21161]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 1364.033834][T21161]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1364.040216][T21161]  check_panic_on_warn+0x86/0xb0
[ 1364.045223][T21161]  ? l2cap_sock_ready_cb+0xd7/0x140
[ 1364.050466][T21161]  end_report+0x77/0x160
[ 1364.054745][T21161]  kasan_report+0x154/0x180
[ 1364.059283][T21161]  ? l2cap_sock_ready_cb+0xd7/0x140
[ 1364.064526][T21161]  l2cap_sock_ready_cb+0xd7/0x140
[ 1364.069597][T21161]  l2cap_le_start+0x4e0/0x17d0
[ 1364.074407][T21161]  ? __cancel_work+0x24a/0x390
[ 1364.079206][T21161]  ? __mutex_unlock_slowpath+0x227/0x800
[ 1364.084903][T21161]  ? l2cap_connect_cfm+0x626/0x1090
[ 1364.090159][T21161]  ? __pfx_l2cap_le_start+0x10/0x10
[ 1364.095399][T21161]  ? l2cap_global_fixed_chan+0x2dd/0x370
[ 1364.101088][T21161]  ? __pfx_l2cap_global_fixed_chan+0x10/0x10
[ 1364.107120][T21161]  ? l2cap_chan_put+0x11b/0x250
[ 1364.112041][T21161]  l2cap_connect_cfm+0x668/0x1090
[ 1364.117135][T21161]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1364.122646][T21161]  ? hci_cb_lookup+0x3a0/0x3c0
[ 1364.127462][T21161]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1364.132970][T21161]  hci_connect_cfm+0x162/0x240
[ 1364.137802][T21161]  ? __pfx_hci_connect_cfm+0x10/0x10
[ 1364.143121][T21161]  ? hci_conn_add_sysfs+0xfc/0x200
[ 1364.148266][T21161]  le_conn_complete_evt+0xd3e/0x12e0
[ 1364.153582][T21161]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1364.159321][T21161]  ? __mutex_unlock_slowpath+0x227/0x800
[ 1364.164981][T21161]  ? skb_pull_data+0x112/0x230
[ 1364.169760][T21161]  hci_le_conn_complete_evt+0x18c/0x420
[ 1364.175325][T21161]  hci_event_packet+0xa55/0x1540
[ 1364.180289][T21161]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1364.185608][T21161]  ? __pfx_hci_event_packet+0x10/0x10
[ 1364.191023][T21161]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1364.196247][T21161]  ? hci_send_to_monitor+0xd8/0x7f0
[ 1364.201465][T21161]  ? kcov_remote_start+0x97/0x7d0
[ 1364.206508][T21161]  hci_rx_work+0x3f3/0xdb0
[ 1364.210948][T21161]  ? process_scheduled_works+0x976/0x1840
[ 1364.216678][T21161]  process_scheduled_works+0xa66/0x1840
[ 1364.222239][T21161]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1364.228231][T21161]  ? assign_work+0x364/0x3d0
[ 1364.232836][T21161]  worker_thread+0x870/0xd30
[ 1364.237440][T21161]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1364.243347][T21161]  ? __kthread_parkme+0x169/0x1d0
[ 1364.248386][T21161]  ? __pfx_worker_thread+0x10/0x10
[ 1364.253514][T21161]  kthread+0x7a9/0x920
[ 1364.257588][T21161]  ? __pfx_kthread+0x10/0x10
[ 1364.262182][T21161]  ? __pfx_worker_thread+0x10/0x10
[ 1364.267301][T21161]  ? __pfx_kthread+0x10/0x10
[ 1364.272047][T21161]  ? __pfx_kthread+0x10/0x10
[ 1364.276708][T21161]  ? __pfx_kthread+0x10/0x10
[ 1364.281327][T21161]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1364.286542][T21161]  ? lockdep_hardirqs_on+0x99/0x150
[ 1364.291752][T21161]  ? __pfx_kthread+0x10/0x10
[ 1364.296370][T21161]  ret_from_fork+0x4b/0x80
[ 1364.300813][T21161]  ? __pfx_kthread+0x10/0x10
[ 1364.305424][T21161]  ret_from_fork_asm+0x1a/0x30
[ 1364.310214][T21161]  </TASK>
[ 1364.313556][T21161] Kernel Offset: disabled
[ 1364.317904][T21161] Rebooting in 86400 seconds..