last executing test programs:

1m58.254894392s ago: executing program 2 (id=1458):
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, 0x0, &(0x7f0000000a80)=0x9})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m55.397510182s ago: executing program 2 (id=1464):
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x400000000002, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)

1m53.903865899s ago: executing program 2 (id=1468):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x100)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000280)=<r4=>0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, r3, 0x0}])

1m47.38257851s ago: executing program 2 (id=1483):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0xfffffffe)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161503)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}}, 0x8044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='1\x00', 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="00007000fddbdf2500efff00200200000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004810)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x70}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)

1m46.431743853s ago: executing program 2 (id=1486):
syz_emit_ethernet(0x4e, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0)

1m43.649489362s ago: executing program 2 (id=1493):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x100)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000280)=<r4=>0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, r3, 0x0}])

1m27.875518101s ago: executing program 32 (id=1493):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x100)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000280)=<r4=>0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, r3, 0x0}])

21.946383198s ago: executing program 0 (id=1641):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x802, 0x1)
syz_usb_control_io$hid(r0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0xb, 0x2)
set_robust_list(&(0x7f00000000c0)={0x0, 0xffffffffffffffff}, 0x18)

13.526766726s ago: executing program 0 (id=1658):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0xfffffffe)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161503)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}}, 0x8044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)="31301f31203100", 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="00007000fddbdf2500efff00200200000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004810)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x70}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)

13.419610908s ago: executing program 4 (id=1659):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a31000000001400048008000240000000000800014000000004"], 0xec}}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x16)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x11)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x3, 0x9})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='high-speed\n\x00', 0xb)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x3, 0x2, 0xc})
truncate(&(0x7f0000000000)='./file1\x00', 0x40)
truncate(0x0, 0xffffffffffffff01)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000008000000000000000400000073110f000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, 0x0, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

13.276003512s ago: executing program 5 (id=1661):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, 0x0, &(0x7f00000004c0)=@tcp6=r1}, 0x20)
connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20)
timer_create(0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

12.393519664s ago: executing program 0 (id=1663):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000092, &(0x7f0000000440)=ANY=[])
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getegid()
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="5cf0b67aa16bf1dcc2f1ae5aa14e42cb6db77c270b99b1c640ab27453b4a089d9ad367f0f0dd7ab38ddbaeb047ef74d0a1f9aa080b894ea2f067824e2331f63e32eca6dd1196239a33e3ff58a8c40a9c120cca1666ab88492ec25f2ee144dc6b0d2e21651eea22bd79d45e406676df1e1ae9f937ff483c77a3c16a52c736c022b2829500081c0d6159780f114f713eb8364ba6d5b6c9f64f43326bc2219741e92de26f4342bcc6d691ff5f36c990af86750adc5b945e27ee8d6b65cd12841c9b110bad0f2c9a2d2e73410f0cb58d43c433459b820ed4314723626946aa6697e045c1edce001ffe549ae2a44b4377da7d4f3d2857e45c3f25ea44797577256b587f7420a30745a6e373c058200d42edc02b42d028e4cab8d6fe09d677ccd453784f3deb8724be00842dc857e2efe2a752a32b3dcd252d6ccb6ede45cfab2830c0b5947a4b9c9f68705d9e669d8f1e6d60a32812825252a46beadd87ecc1344c9924cffb26c2effcf25244b1f7b717b0e4b3f30b8c136b2385aeb52364d199e97c455117c390d3d3f0524bb4159b15a1803be4d289ee4524a36d70a47f56b1dcb865c40452f9851860601d929a4237c3ff9522ce238fb12761a11b0eeffa5156d5f8f8e8782dd61e291cd691dfebf673c04622ab3d0f41386eaa02f05a9d4f0b83c796ba1a3115ce0132030cd11f4cc797a20e5388ca45936c27282f7c28ae8312654c9f34b28f1c59894449dcc1c993929cff02280f7688100ac4ccba6e534cd44e6cefa6cf2c64fa66f8e3d59b0b851fbbdbbe81d57c44a5eee6a7d96ca176ad33240a703cff52de4fd70ea2d4330f4efc17c55aa688ed5daa1646e50ffc07c95059a2b3ee442f665c9838293b0400b951a1f706bf73b63d9d7a8aed42c0b54bb81be4fc698e1eb0605d656a5446698b76ef5a224cde75c457d49ad7479153d36ce1c2e32011e058866cc94d44604eefc42fdb6bfd82cf4722bf4c73df1ea2d02eb787ec0eb26ea13532a77465da7070bff12fe8c1694ec2eb87285915ab182543db23b45a1ca291e7b9133fccdc0742ce6e6b71e3286412339dc52d696136f47912519545911c246c875ff80dd734f81c41a73493da7da9c4ee125c60dd65a49d490e2fc33ca5fc511ad18148b1177f19eaeffe7a0174875dd03e8e3b32ebcae0a8aabea0d4d1de879332ea50471fc6eb5b7cefcc7b243c22c84d85c73f8c8fc31cbbcd9f4c6b601e02375428fdbd320c2182877da71a2d70330f05fd8e7c50f73c291bc4bff8e306f55c79cfea125876f6e9092ad5598d8fa62d119385061f1ff13bf7c2b44fd363be7229f6b4f2f6fb7f641535c47cca350e598b8290fa73bfc0559e5bfa74228bd4b7048b8f0356c43a439b5731381d575997780e4f57b5c2d6b5bfbb955aa10e9f9cc46eb62b530a156511fa7e0c001f24396af1a9946d07d3c065f7fb88c430c63807652c60cb174735e1466df3bd407a765a4a63ad2cf004bad50ab2049a7f56cdfd53d39eabc749871e70fbab4ffe42756ed05335df15d40420134902a68b69a15dda03c98ed9333174043441f807b70f5a98d35984128a902e7ee8d5ae806ca40e4f5ad2288ec645ca43275c7625eabda5a774d10c9efcc852b4e2a181255308ab1082ad382bb5bdff980865e7caadcec81b4697457d816625097cb4a9659d480145a3d40237e54be17faf12fae9a9a48226fd7e43509e325359642bd8626e37958f83494b15b6c615121238129c15c1fac440dabc71a836ac2976e1987abdc3ecbe78dacda51cf9019e3159b276a877e355c18a9835cdf98522dad7467dcbd97dca4098599ce33ebee7c742ab847d39172608fd8f829e344393b50f29f0e7efdc35bad46c1e20ed7c3f5874f021a8afe3a96cf9e186eafee13b138d92091282414ad896034d8146e849785b364450970abe11f743a12ac977062059ad7f67b01d32cdcc75c6babe2309fc929a9d92c805ecb4ff70719df50807e824ae90f66b0557bff4ebf78dfa43532869ff5164e144defc4d8ee1d6745ed369e7ed7afc981f0f3a0c82a1f97032a12eb8d672b2231040d132971ff2b2ea2eeb0f30fc21fdcd80e32f8a64d325b0fa74919c0b727335230cd340883ed28bd50af63e07f98f91e5d69851b25ab260828303713fa7ce5671c598fabee013bbb6ed04bc70e8d16d9748b885179ae22e4a9ea40d55d6565b0dc5b35719f28199b95ce9ce7f3c81c5a62a5ec1c9c63a8c74cbd26682875ffd2b8c709643d4dfa81199f9828fbe6c1e99d5c003f7ebfbf860fb238f1e427c74eadf459ed60ee73de4d13c8cfc7c58fc371fdd0e8bd70b10e4f9de9928f5c1fa81dffabc7a818fc8d50d9611f06b901bd88a5fc6b9f8bc6503b23822f105653b598c9f0abffbae0d8c56cff568f2c2bc47a88b26c2124a78921462efa4895730f369bf1f0d3227ef1b76dd394317c1726a13f9c15d65bcf6128b61351abac6a54151efcd872d25d9929cf5b7ef141e84b8d145fff6453d6a943af1c0ebd6c2aad77c1cadd21880bcdc362c690e88a914f946c8cfe00ac1936ac8e7ee66156bf76a158b09244aee3c937677067b8d6ce6de5711c80ee00893acf16e86e44037450581e6d06aff72630356644d2345741e76065a15b23cd57ed96a4b702b07a1c2df236ef5d1f0711ed23742a05bf7c047b48338e28115cdce04277cc10936937f0434ae60adbf1a9fc6f422ce8017d1f7b5554c19dc67fdce214afdb8b9a04e3987d16ce5b0b8d9f779914441357347af13f08fec8b05e4f786e88d1346fffd81cd3feb2c518c8a5199ebc2e15754a789febfde86dacb5530ebad117acc0b1cad2669836b5e536dc3df3739f22b85bf1d64353ce65b81707902fc9b471bd159fc80065f26d56aa310d47c276bbd83f5d2e5e4ffbe0e424b21eb940d9e1b3198eae52cdde8c193f4f07e7af9e40f64e2ebdb9aa0f0dc49fae9b024128379eec28ff2b2989907e16bdd9ea22f767f73d21c1c9ed2992b1c5ff5e606c7a3f5f29ce6e30e0118f5c6f88c6bdd27bc58fc74390a97a98590b31fbcbd76449777b253ce0c68da51d402ae862beef5fbfd8afb3aaa62f57826e74c8f6b985aa456e015fd8325eb8fedbc0f0e681bcd8d7626bee70e48d563d1acb03af39d206384b1e8328e588e66fb7243c8c9c2748a8f9efb34a0ab4e76035d9c6e4a7784ead7194f2868f97c580769942b3e81bf02e55c27f43885303d641ab9717618592bf790c119a9033ffce20a8ffcd0d1f1043add8da1a40b2d223920e33625366ccbf515b4e83ba5030df036316798c8cd50b5dca303fddfed3b4d7e89077be0af139ed509243dca68271d02238c85a6dc019897727b6137b18fdf444cff1790631b4c411daa9939b4a4b1abd93b2b1370d62c9e07962cacdde123b75a625553cc8dd2c4f4df4f96a1cdd07fefb232347dbf24e39831251d30e931dc965b789975d93c35d001bb90335f77984b4fe6cfe67eeacbfe8b03dd3b9eccc33ae979b38bf89417e89e0b7c3da65443cb8371353e7b5a44f99db5c73a0f7bc84147ef45847dc0231e00684f0bfb361efc62636c460501a910047db41258c00538b6763b3a79a23395afc6a46be1f53d123202bb598f9e3f40d50939f0cb01c70215e55de53703375e5be090387eaec3717d22e718c31f9d9eb2a81a2bddd846671d14aa42995cd18aca6c804b4b8eba42693eb4d2db995ef26e5a7ab1c4a98d7c268821edf7d2f193f381c15e87fa8355207c3efb209e4214038e99f7c3e7fdcdc4d038b18b08c488edc20a949f7417a7d8dd4e37dbf1b4afcf79ef867d17ca68a0d744b8f6aee7738be4beb737ca9dba34fda810f44c0f51ec9f8e295e7cd78e3256ae73db7186b1e29a04f63065c44fa6c7a16fe4f50851f336b402ce5a73ff88f9b5cdb52ead12060590180f112a4f6c36e5418207bc5dc8635ec831e383ae67fbbe119de517a6932a69440015d014a1d143c8b09f611aa4f79b083c8ea67806cf221ede408771cf2d979feb3e448fcbd859e875d6ff6cff062e073bdb4b32bcf5", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845)

11.848260957s ago: executing program 4 (id=1664):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000092, &(0x7f0000000440)=ANY=[])
getegid()
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="5cf0b67aa16bf1dcc2f1ae5aa14e42cb6db77c270b99b1c640ab27453b4a089d9ad367f0f0dd7ab38ddbaeb047ef74d0a1f9aa080b894ea2f067824e2331f63e32eca6dd1196239a33e3ff58a8c40a9c120cca1666ab88492ec25f2ee144dc6b0d2e21651eea22bd79d45e406676df1e1ae9f937ff483c77a3c16a52c736c022b2829500081c0d6159780f114f713eb8364ba6d5b6c9f64f43326bc2219741e92de26f4342bcc6d691ff5f36c990af86750adc5b945e27ee8d6b65cd12841c9b110bad0f2c9a2d2e73410f0cb58d43c433459b820ed4314723626946aa6697e045c1edce001ffe549ae2a44b4377da7d4f3d2857e45c3f25ea44797577256b587f7420a30745a6e373c058200d42edc02b42d028e4cab8d6fe09d677ccd453784f3deb8724be00842dc857e2efe2a752a32b3dcd252d6ccb6ede45cfab2830c0b5947a4b9c9f68705d9e669d8f1e6d60a32812825252a46beadd87ecc1344c9924cffb26c2effcf25244b1f7b717b0e4b3f30b8c136b2385aeb52364d199e97c455117c390d3d3f0524bb4159b15a1803be4d289ee4524a36d70a47f56b1dcb865c40452f9851860601d929a4237c3ff9522ce238fb12761a11b0eeffa5156d5f8f8e8782dd61e291cd691dfebf673c04622ab3d0f41386eaa02f05a9d4f0b83c796ba1a3115ce0132030cd11f4cc797a20e5388ca45936c27282f7c28ae8312654c9f34b28f1c59894449dcc1c993929cff02280f7688100ac4ccba6e534cd44e6cefa6cf2c64fa66f8e3d59b0b851fbbdbbe81d57c44a5eee6a7d96ca176ad33240a703cff52de4fd70ea2d4330f4efc17c55aa688ed5daa1646e50ffc07c95059a2b3ee442f665c9838293b0400b951a1f706bf73b63d9d7a8aed42c0b54bb81be4fc698e1eb0605d656a5446698b76ef5a224cde75c457d49ad7479153d36ce1c2e32011e058866cc94d44604eefc42fdb6bfd82cf4722bf4c73df1ea2d02eb787ec0eb26ea13532a77465da7070bff12fe8c1694ec2eb87285915ab182543db23b45a1ca291e7b9133fccdc0742ce6e6b71e3286412339dc52d696136f47912519545911c246c875ff80dd734f81c41a73493da7da9c4ee125c60dd65a49d490e2fc33ca5fc511ad18148b1177f19eaeffe7a0174875dd03e8e3b32ebcae0a8aabea0d4d1de879332ea50471fc6eb5b7cefcc7b243c22c84d85c73f8c8fc31cbbcd9f4c6b601e02375428fdbd320c2182877da71a2d70330f05fd8e7c50f73c291bc4bff8e306f55c79cfea125876f6e9092ad5598d8fa62d119385061f1ff13bf7c2b44fd363be7229f6b4f2f6fb7f641535c47cca350e598b8290fa73bfc0559e5bfa74228bd4b7048b8f0356c43a439b5731381d575997780e4f57b5c2d6b5bfbb955aa10e9f9cc46eb62b530a156511fa7e0c001f24396af1a9946d07d3c065f7fb88c430c63807652c60cb174735e1466df3bd407a765a4a63ad2cf004bad50ab2049a7f56cdfd53d39eabc749871e70fbab4ffe42756ed05335df15d40420134902a68b69a15dda03c98ed9333174043441f807b70f5a98d35984128a902e7ee8d5ae806ca40e4f5ad2288ec645ca43275c7625eabda5a774d10c9efcc852b4e2a181255308ab1082ad382bb5bdff980865e7caadcec81b4697457d816625097cb4a9659d480145a3d40237e54be17faf12fae9a9a48226fd7e43509e325359642bd8626e37958f83494b15b6c615121238129c15c1fac440dabc71a836ac2976e1987abdc3ecbe78dacda51cf9019e3159b276a877e355c18a9835cdf98522dad7467dcbd97dca4098599ce33ebee7c742ab847d39172608fd8f829e344393b50f29f0e7efdc35bad46c1e20ed7c3f5874f021a8afe3a96cf9e186eafee13b138d92091282414ad896034d8146e849785b364450970abe11f743a12ac977062059ad7f67b01d32cdcc75c6babe2309fc929a9d92c805ecb4ff70719df50807e824ae90f66b0557bff4ebf78dfa43532869ff5164e144defc4d8ee1d6745ed369e7ed7afc981f0f3a0c82a1f97032a12eb8d672b2231040d132971ff2b2ea2eeb0f30fc21fdcd80e32f8a64d325b0fa74919c0b727335230cd340883ed28bd50af63e07f98f91e5d69851b25ab260828303713fa7ce5671c598fabee013bbb6ed04bc70e8d16d9748b885179ae22e4a9ea40d55d6565b0dc5b35719f28199b95ce9ce7f3c81c5a62a5ec1c9c63a8c74cbd26682875ffd2b8c709643d4dfa81199f9828fbe6c1e99d5c003f7ebfbf860fb238f1e427c74eadf459ed60ee73de4d13c8cfc7c58fc371fdd0e8bd70b10e4f9de9928f5c1fa81dffabc7a818fc8d50d9611f06b901bd88a5fc6b9f8bc6503b23822f105653b598c9f0abffbae0d8c56cff568f2c2bc47a88b26c2124a78921462efa4895730f369bf1f0d3227ef1b76dd394317c1726a13f9c15d65bcf6128b61351abac6a54151efcd872d25d9929cf5b7ef141e84b8d145fff6453d6a943af1c0ebd6c2aad77c1cadd21880bcdc362c690e88a914f946c8cfe00ac1936ac8e7ee66156bf76a158b09244aee3c937677067b8d6ce6de5711c80ee00893acf16e86e44037450581e6d06aff72630356644d2345741e76065a15b23cd57ed96a4b702b07a1c2df236ef5d1f0711ed23742a05bf7c047b48338e28115cdce04277cc10936937f0434ae60adbf1a9fc6f422ce8017d1f7b5554c19dc67fdce214afdb8b9a04e3987d16ce5b0b8d9f779914441357347af13f08fec8b05e4f786e88d1346fffd81cd3feb2c518c8a5199ebc2e15754a789febfde86dacb5530ebad117acc0b1cad2669836b5e536dc3df3739f22b85bf1d64353ce65b81707902fc9b471bd159fc80065f26d56aa310d47c276bbd83f5d2e5e4ffbe0e424b21eb940d9e1b3198eae52cdde8c193f4f07e7af9e40f64e2ebdb9aa0f0dc49fae9b024128379eec28ff2b2989907e16bdd9ea22f767f73d21c1c9ed2992b1c5ff5e606c7a3f5f29ce6e30e0118f5c6f88c6bdd27bc58fc74390a97a98590b31fbcbd76449777b253ce0c68da51d402ae862beef5fbfd8afb3aaa62f57826e74c8f6b985aa456e015fd8325eb8fedbc0f0e681bcd8d7626bee70e48d563d1acb03af39d206384b1e8328e588e66fb7243c8c9c2748a8f9efb34a0ab4e76035d9c6e4a7784ead7194f2868f97c580769942b3e81bf02e55c27f43885303d641ab9717618592bf790c119a9033ffce20a8ffcd0d1f1043add8da1a40b2d223920e33625366ccbf515b4e83ba5030df036316798c8cd50b5dca303fddfed3b4d7e89077be0af139ed509243dca68271d02238c85a6dc019897727b6137b18fdf444cff1790631b4c411daa9939b4a4b1abd93b2b1370d62c9e07962cacdde123b75a625553cc8dd2c4f4df4f96a1cdd07fefb232347dbf24e39831251d30e931dc965b789975d93c35d001bb90335f77984b4fe6cfe67eeacbfe8b03dd3b9eccc33ae979b38bf89417e89e0b7c3da65443cb8371353e7b5a44f99db5c73a0f7bc84147ef45847dc0231e00684f0bfb361efc62636c460501a910047db41258c00538b6763b3a79a23395afc6a46be1f53d123202bb598f9e3f40d50939f0cb01c70215e55de53703375e5be090387eaec3717d22e718c31f9d9eb2a81a2bddd846671d14aa42995cd18aca6c804b4b8eba42693eb4d2db995ef26e5a7ab1c4a98d7c268821edf7d2f193f381c15e87fa8355207c3efb209e4214038e99f7c3e7fdcdc4d038b18b08c488edc20a949f7417a7d8dd4e37dbf1b4afcf79ef867d17ca68a0d744b8f6aee7738be4beb737ca9dba34fda810f44c0f51ec9f8e295e7cd78e3256ae73db7186b1e29a04f63065c44fa6c7a16fe4f50851f336b402ce5a73ff88f9b5cdb52ead12060590180f112a4f6c36e5418207bc5dc8635ec831e383ae67fbbe119de517a6932a69440015d014a1d143c8b09f611aa4f79b083c8ea67806cf221ede408771cf2d979feb3e448fcbd859e875d6ff6cff062e073bdb4b32bcf5", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845)

11.847210297s ago: executing program 5 (id=1665):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x2}, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe)

10.646957857s ago: executing program 0 (id=1667):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4)
r0 = socket(0xa, 0x1, 0x0)
ioctl(r0, 0x8901, &(0x7f0000000000))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x200006}, 0x1c)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x6)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x30)
shutdown(r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/194, 0xc2, 0x1, 0x0}, &(0x7f0000000240)=0x40)
creat(0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x3, 0x300)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='6', 0x1)

10.645962697s ago: executing program 3 (id=1668):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(0x0, 0x8000000800, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe)
recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0)

9.879198586s ago: executing program 4 (id=1669):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x60000, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000180)=@other={0x20300002000006a7, 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x4000)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
syz_open_dev$sndctrl(&(0x7f0000000100), 0xf32, 0x101400)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$nullb(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf25100000b2f925002400018006000200650000000600010002000000060004004e210000060002003a080000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)

9.818438047s ago: executing program 5 (id=1670):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f015, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f779000f20e035000001000f22e066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x50}], 0x1, 0x43, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1}]}}, 0x0, 0x26}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.962587488s ago: executing program 4 (id=1671):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getrlimit(0xb, &(0x7f0000000040))
setrlimit(0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getrlimit(0xb, &(0x7f0000000100))
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
sendfile(0xffffffffffffffff, r2, 0x0, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e)

8.362992134s ago: executing program 1 (id=1672):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000300)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2)

8.07995296s ago: executing program 3 (id=1673):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0xfffffffe)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161503)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}}, 0x8044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)="31301f31203100", 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="00007000fddbdf2500efff00200200000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004810)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x70}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)

7.882054325s ago: executing program 0 (id=1674):
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad", 0x8f}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, 0x0, &(0x7f0000000a80)=0x9})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.469789585s ago: executing program 5 (id=1675):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a31000000001400048008000240000000000800014000000004"], 0xec}}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x16)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x11)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x3, 0x9})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='high-speed\n\x00', 0xb)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x3, 0x2, 0xc})
truncate(&(0x7f0000000000)='./file1\x00', 0x40)
truncate(0x0, 0xffffffffffffff01)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000008000000000000000400000073110f000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, 0x0, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

6.370084783s ago: executing program 1 (id=1676):
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x200)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4038587a, &(0x7f00000006c0)={{<r3=>0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, 0x0, 0x0}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0x0, 0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94)
ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16, @ANYBLOB="050000000000fbdbdf252e000000", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r7)
sendmsg$NFC_CMD_GET_SE(r7, 0x0, 0x4004)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})

6.294405585s ago: executing program 3 (id=1677):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000092, &(0x7f0000000440)=ANY=[])
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getegid()
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845)

5.125192923s ago: executing program 0 (id=1678):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x7f, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000080)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r6, 0x2007ffb)
r7 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r7, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4.998693117s ago: executing program 1 (id=1679):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000092, &(0x7f0000000440)=ANY=[])
getegid()
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845)

4.980664697s ago: executing program 5 (id=1680):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x2}, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe)

3.958610682s ago: executing program 5 (id=1681):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0)
ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}})
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/72, 0x48, 0x100, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

3.724340898s ago: executing program 1 (id=1682):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4000801)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x161400, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.656317049s ago: executing program 3 (id=1683):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./dev/mtdblock0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, 0x0, 0x320800d, 0xb1)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'})
bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
writev(r4, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7)
socket(0x2, 0x5, 0x0)

2.487254278s ago: executing program 1 (id=1684):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4)
r0 = socket(0xa, 0x1, 0x0)
ioctl(r0, 0x8901, &(0x7f0000000000))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x200006}, 0x1c)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x6)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x30)
shutdown(r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/194, 0xc2, 0x1, 0x0}, &(0x7f0000000240)=0x40)
creat(0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x3, 0x300)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='6', 0x1)

2.267344404s ago: executing program 3 (id=1685):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000040000000400000003"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20)

1.20758596s ago: executing program 4 (id=1686):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x80202, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.160154631s ago: executing program 3 (id=1687):
r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0})

1.006575395s ago: executing program 1 (id=1688):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=1689):
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x200)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4038587a, &(0x7f00000006c0)={{<r3=>0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, 0x0, 0x0}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0x0, 0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94)
ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16, @ANYBLOB="050000000000fbdbdf252e000000", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r7)
sendmsg$NFC_CMD_GET_SE(r7, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x4004)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})

kernel console output (not intermixed with test programs):

0: link becomes ready
[   84.856546][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.865447][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.875126][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.882345][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.891259][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.901187][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.910346][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.917545][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.925748][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.933549][ T4285] Bluetooth: hci4: command 0x041b tx timeout
[   84.939649][ T4285] Bluetooth: hci1: command 0x041b tx timeout
[   84.945703][ T4285] Bluetooth: hci0: command 0x041b tx timeout
[   84.952639][ T4277] Bluetooth: hci3: command 0x041b tx timeout
[   84.952875][ T4289] Bluetooth: hci2: command 0x041b tx timeout
[   84.971481][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.983585][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.997458][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.041867][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   85.073706][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.083395][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.102401][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.113348][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.120561][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.135072][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   85.144876][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   85.160002][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   85.172743][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.182743][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   85.192139][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.202262][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   85.211432][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   85.219753][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   85.229412][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   85.239082][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   85.249764][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.273911][ T4276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   85.284600][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.322802][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.332677][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.341574][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.352145][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.362045][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.371222][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.380388][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   85.391300][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.401066][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   85.470723][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   85.488562][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.505726][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.515168][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.531304][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.541519][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.551050][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.560393][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   85.570992][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.578209][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.586247][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.595030][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.604312][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.611474][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.620143][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   85.629505][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.641268][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.651114][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.660270][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.669278][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.677410][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.691168][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.709602][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   85.724627][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   85.735491][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   85.753609][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   85.765687][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   85.778960][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.815618][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   85.841395][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.869010][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.880843][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   85.899826][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.911405][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.930711][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.952490][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.973374][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.013210][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   86.029347][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.043006][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.079420][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.096725][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.168605][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.209312][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.225394][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.260440][ T4272] device veth0_vlan entered promiscuous mode
[   86.272246][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.288123][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.359355][ T4272] device veth1_vlan entered promiscuous mode
[   86.373858][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.407459][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.475489][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.510599][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.558812][ T4276] device veth0_vlan entered promiscuous mode
[   86.565984][ T4272] device veth0_macvtap entered promiscuous mode
[   86.586204][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.594252][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.611646][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.620854][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.639210][ T4272] device veth1_macvtap entered promiscuous mode
[   86.652606][ T4276] device veth1_vlan entered promiscuous mode
[   86.662808][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.672489][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.681632][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.710627][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.726595][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.759117][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.804106][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.837537][ T4276] device veth0_macvtap entered promiscuous mode
[   86.845339][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.857799][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.867307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.891323][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.918441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.974126][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.991975][ T4276] device veth1_macvtap entered promiscuous mode
[   87.006597][ T4285] Bluetooth: hci2: command 0x040f tx timeout
[   87.012789][ T4285] Bluetooth: hci0: command 0x040f tx timeout
[   87.016448][ T4289] Bluetooth: hci3: command 0x040f tx timeout
[   87.019005][ T4277] Bluetooth: hci1: command 0x040f tx timeout
[   87.025076][ T4290] Bluetooth: hci4: command 0x040f tx timeout
[   87.051136][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.060502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.069682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.079195][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.094486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   87.103851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   87.128838][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.145286][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.154352][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.169187][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.219046][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.237275][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.244867][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   87.262384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.270823][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   87.286580][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.324288][ T4273] device veth0_vlan entered promiscuous mode
[   87.350841][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   87.367014][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.375874][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.390548][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.407495][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.429632][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.452726][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.491945][ T4273] device veth1_vlan entered promiscuous mode
[   87.523852][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.546858][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.582391][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   87.591771][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   87.639429][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.670120][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.700269][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.714499][ T4274] device veth0_vlan entered promiscuous mode
[   87.733182][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.743220][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.753196][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   87.762129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.771303][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.782724][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.795762][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.805088][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.815115][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.824375][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.847617][ T4274] device veth1_vlan entered promiscuous mode
[   87.941629][ T4273] device veth0_macvtap entered promiscuous mode
[   87.974943][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.985129][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   88.000641][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   88.018296][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.030681][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.062923][ T4273] device veth1_macvtap entered promiscuous mode
[   88.097727][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.105858][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.160183][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.179525][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.188220][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   88.197638][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.218620][ T4274] device veth0_macvtap entered promiscuous mode
[   88.241194][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.254161][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.265895][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.276741][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.290332][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.305343][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.313259][ T4274] device veth1_macvtap entered promiscuous mode
[   88.326277][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.334734][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.349278][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.358532][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.363386][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.399068][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.411519][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.423057][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.434063][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.447818][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.473083][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.484019][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.499295][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.513005][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.524377][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.535574][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.548511][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.556987][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.565771][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.575673][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.586847][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.595722][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.611334][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.622809][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.633039][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.642203][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.667813][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.683429][   T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.698658][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.708973][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.716560][   T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.721661][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.738191][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.749504][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.762326][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.784187][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.802284][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.817086][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.878917][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.891602][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.900830][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.911970][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.928216][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   88.937731][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   88.953471][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.980638][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.026188][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.034217][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   89.070027][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   89.083251][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   89.091084][ T4290] Bluetooth: hci4: command 0x0419 tx timeout
[   89.095551][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   89.097327][ T4289] Bluetooth: hci3: command 0x0419 tx timeout
[   89.097361][ T4289] Bluetooth: hci2: command 0x0419 tx timeout
[   89.097385][ T4289] Bluetooth: hci0: command 0x0419 tx timeout
[   89.097431][ T4289] Bluetooth: hci1: command 0x0419 tx timeout
[   89.213816][ T4361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   89.927322][ T4275] device veth0_vlan entered promiscuous mode
[   89.977134][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.992267][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.014249][ T4275] device veth1_vlan entered promiscuous mode
[   90.058980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.147391][ T4275] device veth0_macvtap entered promiscuous mode
[   90.170778][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.183082][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.196133][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.236789][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.244723][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.265089][ T4275] device veth1_macvtap entered promiscuous mode
[   90.307173][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   90.326543][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.364421][   T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.375605][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.388979][   T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.397094][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.409691][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.420727][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.431461][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.442356][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.453045][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.467602][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.488176][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.496373][ T4320] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   90.511669][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.525055][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.544987][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.612093][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.635436][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.656098][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.671155][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.682708][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.698448][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.710627][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.716503][ T4320] usb 2-1: Using ep0 maxpacket: 8
[   90.728263][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.744357][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.756280][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.765144][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.793303][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.805687][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.824326][ T4320] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[   90.827799][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.846678][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   90.861802][ T4320] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[   90.887417][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.896516][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.904576][ T4320] usb 2-1: Product: syz
[   90.941260][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.950740][ T4320] usb 2-1: Manufacturer: syz
[   90.955404][ T4320] usb 2-1: SerialNumber: syz
[   90.960547][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.981565][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.048542][ T4320] usb 2-1: config 0 descriptor??
[   91.055784][ T4367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   91.078685][ T4320] powermate: probe of 2-1:0.0 failed with error -22
[   91.267218][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.294964][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.298047][ T4367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.332050][ T4367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.340938][ T4383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.385523][ T4386] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3'.
[   91.516580][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.832876][  T126] cfg80211: failed to load regulatory.db
[   92.078746][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.169837][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.178335][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   93.186071][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   93.257682][ T4317] usb 2-1: USB disconnect, device number 2
[   93.529459][ T4411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'.
[   95.666137][ T4317] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.002045][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.012969][ T4317] usb 4-1: config 0 has no interfaces?
[   96.022586][ T4317] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[   96.032030][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.856087][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   96.876076][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   96.886063][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   96.896067][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   96.906065][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   96.916067][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   96.926052][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   96.936057][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   96.946063][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   97.822544][ T4317] usb 4-1: Product: syz
[   97.833292][ T4317] usb 4-1: Manufacturer: syz
[   97.840392][ T4317] usb 4-1: SerialNumber: syz
[   97.858139][ T4317] usb 4-1: config 0 descriptor??
[   99.057826][   T14] usb 4-1: USB disconnect, device number 2
[   99.515966][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[  100.240342][ T4475] device syzkaller0 entered promiscuous mode
[  100.287058][ T4290] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  100.295561][ T4290] Bluetooth: hci0: Injecting HCI hardware error event
[  100.304387][ T4290] Bluetooth: hci0: hardware error 0x00
[  102.366200][ T4290] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  104.686195][ T4290] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  104.694734][ T4290] Bluetooth: hci4: Injecting HCI hardware error event
[  104.706856][ T4287] Bluetooth: hci4: hardware error 0x00
[  105.661359][ T4525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'.
[  106.635641][ T4530] Cannot find add_set index 0 as target
[  106.766144][ T4287] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  106.850813][ T4533] binder: 4532:4533 ioctl c0306201 2000000004c0 returned -11
[  107.056704][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'.
[  107.100169][ T4537] netlink: 'syz.4.51': attribute type 5 has an invalid length.
[  107.147860][ T4537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.51'.
[  109.579202][ T4537] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  109.781753][ T4537] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  109.887216][ T4537] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  109.990881][ T4537] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  110.141360][ T4537] device geneve2 entered promiscuous mode
[  110.626513][ T4558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.58'.
[  110.878607][ T4565] Cannot find add_set index 0 as target
[  111.185220][ T4578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'.
[  113.747320][ T4577] syz.0.64 (4577) used greatest stack depth: 18128 bytes left
[  114.993546][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[  115.053181][ T4597] netlink: 'syz.2.67': attribute type 5 has an invalid length.
[  115.108230][ T4597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'.
[  115.200587][ T4597] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  115.228518][ T4597] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  115.252405][ T4597] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  115.333262][ T4597] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  115.366341][ T4597] device geneve2 entered promiscuous mode
[  115.680217][ T4616] block device autoloading is deprecated and will be removed.
[  115.921168][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'.
[  120.807027][ T4665] mmap: syz.1.89 (4665) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  126.563943][ T4702] Zero length message leads to an empty skb
[  126.593585][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'.
[  126.969698][ T4706] device syzkaller0 entered promiscuous mode
[  131.370215][ T4740] device syzkaller0 entered promiscuous mode
[  131.380536][ T4740] tipc: Started in network mode
[  131.385648][ T4740] tipc: Node identity 123c0ebbc67c, cluster identity 4711
[  131.393784][ T4740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.402490][ T4738] tipc: Resetting bearer <eth:syzkaller0>
[  131.439464][ T4738] tipc: Disabling bearer <eth:syzkaller0>
[  132.770019][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.776935][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.912716][ T4761] netlink: 72 bytes leftover after parsing attributes in process `syz.2.119'.
[  134.193887][ T4767] netlink: 152 bytes leftover after parsing attributes in process `syz.0.121'.
[  134.367464][ T4772] lo speed is unknown, defaulting to 1000
[  134.373872][ T4772] lo speed is unknown, defaulting to 1000
[  134.386765][ T4772] lo speed is unknown, defaulting to 1000
[  134.406612][ T4772] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  134.442084][ T4772] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  134.554837][ T4772] lo speed is unknown, defaulting to 1000
[  134.579113][ T4772] lo speed is unknown, defaulting to 1000
[  134.590991][ T4772] lo speed is unknown, defaulting to 1000
[  134.601085][ T4772] lo speed is unknown, defaulting to 1000
[  134.611869][ T4772] lo speed is unknown, defaulting to 1000
[  136.498470][ T4796] device syzkaller0 entered promiscuous mode
[  136.587993][ T4796] tipc: Started in network mode
[  136.592956][ T4796] tipc: Node identity 06c3dc467336, cluster identity 4711
[  137.267898][ T4796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.722703][ T4794] tipc: Resetting bearer <eth:syzkaller0>
[  137.953819][ T4794] tipc: Disabling bearer <eth:syzkaller0>
[  145.571476][  T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  145.742090][ T4287] Bluetooth: hci1: Malformed Event: 0x2f
[  148.168539][ T4810] binder: 4809:4810 ioctl c0306201 0 returned -14
[  148.676869][  T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  149.331755][ T4330] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  149.469770][  T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.940027][  T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.950070][  T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  150.963611][  T126] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  150.973209][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.989177][ T4833] netlink: 72 bytes leftover after parsing attributes in process `syz.0.139'.
[  151.016605][  T126] usb 3-1: config 0 descriptor??
[  151.286374][ T4330] usb 4-1: Using ep0 maxpacket: 32
[  151.304189][ T4330] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  151.344488][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.944654][ T4330] usb 4-1: config 0 descriptor??
[  152.953137][  T126] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  153.123698][ T4330] usb 4-1: can't set config #0, error -71
[  153.154618][ T4330] usb 4-1: USB disconnect, device number 3
[  153.288405][  T126] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  153.352034][  T126] usb 3-1: USB disconnect, device number 2
[  153.636830][ T4847] device syzkaller0 entered promiscuous mode
[  153.671864][ T4845] tipc: Started in network mode
[  153.700222][ T4845] tipc: Node identity fe1153bbdf74, cluster identity 4711
[  153.741552][ T4845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.832824][ T4846] fido_id[4846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  153.961407][ T4844] tipc: Resetting bearer <eth:syzkaller0>
[  154.089719][ T4853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'.
[  154.157517][ T4844] tipc: Disabling bearer <eth:syzkaller0>
[  155.527025][ T4866] device dummy0 entered promiscuous mode
[  158.740648][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'.
[  159.572645][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'.
[  159.650060][ T4895] device syzkaller0 entered promiscuous mode
[  159.668014][ T4895] tipc: Started in network mode
[  159.672961][ T4895] tipc: Node identity 066cb8884099, cluster identity 4711
[  159.681024][ T4895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.700761][ T4894] tipc: Resetting bearer <eth:syzkaller0>
[  159.798691][ T4894] tipc: Disabling bearer <eth:syzkaller0>
[  159.995392][ T4901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'.
[  160.087008][ T4901] netlink: 'syz.4.142': attribute type 5 has an invalid length.
[  160.094738][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.142'.
[  161.713664][ T4916] device dummy0 entered promiscuous mode
[  164.854469][ T4949] device syzkaller0 entered promiscuous mode
[  164.936488][ T4951] tipc: Started in network mode
[  165.085889][ T4947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.154'.
[  165.823628][ T4951] tipc: Node identity 6a2333b52c53, cluster identity 4711
[  165.999548][ T4287] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  166.008290][ T4287] Bluetooth: hci1: Injecting HCI hardware error event
[  166.048851][ T4287] Bluetooth: hci1: hardware error 0x00
[  166.066965][ T4951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.167268][ T4948] tipc: Resetting bearer <eth:syzkaller0>
[  166.256587][ T4948] tipc: Disabling bearer <eth:syzkaller0>
[  166.741425][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[  166.761547][ T4965] netlink: 'syz.2.173': attribute type 5 has an invalid length.
[  166.804411][ T4965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.173'.
[  167.354913][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'.
[  167.538147][ T4971] netlink: 'syz.3.175': attribute type 5 has an invalid length.
[  167.658377][ T4971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.175'.
[  167.710298][ T4971] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  167.746534][ T4971] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  167.770983][ T4971] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  167.798326][ T4971] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  167.826240][ T4971] device geneve2 entered promiscuous mode
[  168.127297][ T4287] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  169.323637][ T5001] device syzkaller0 entered promiscuous mode
[  169.333645][ T5001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.343548][ T5000] tipc: Resetting bearer <eth:syzkaller0>
[  169.374892][ T5000] tipc: Disabling bearer <eth:syzkaller0>
[  169.753725][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'.
[  169.778920][ T5010] netlink: 'syz.4.186': attribute type 5 has an invalid length.
[  169.789832][ T5010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.186'.
[  171.346835][ T5023] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.484714][ T5033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'.
[  171.502992][ T5033] netlink: 'syz.3.190': attribute type 5 has an invalid length.
[  171.511283][ T5033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'.
[  174.554043][ T5074] netlink: 72 bytes leftover after parsing attributes in process `syz.3.204'.
[  174.971225][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'.
[  175.015876][ T5076] netlink: 'syz.4.206': attribute type 5 has an invalid length.
[  175.071176][ T5076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.206'.
[  176.557597][ T5097] process 'syz.0.212' launched './file2' with NULL argv: empty string added
[  178.181346][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'.
[  178.346124][ T4325] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  179.067952][ T4325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  179.086471][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.341203][ T4325] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  180.083110][ T4325] usb 2-1: USB disconnect, device number 4
[  181.837098][ T5136] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  182.178918][ T5136] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  182.600758][ T5136] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  182.648747][ T5136] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  182.689212][ T5136] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  182.901837][ T5136] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  183.568239][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout
[  183.755406][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'.
[  184.665073][ T5170] device dummy0 entered promiscuous mode
[  184.696325][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout
[  185.646141][ T4287] Bluetooth: hci2: command 0x0406 tx timeout
[  186.766109][ T4287] Bluetooth: hci3: command 0x0406 tx timeout
[  187.375322][ T5197] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  187.416765][ T5197] SQUASHFS error: Failed to read block 0x0: -5
[  187.452575][ T5197] unable to read squashfs_super_block
[  187.946681][ T5202] kvm: emulating exchange as write
[  190.704602][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[  191.501255][ T5237] netlink: 'syz.1.249': attribute type 5 has an invalid length.
[  192.074759][ T5237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.249'.
[  192.191433][ T5237] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  192.995806][ T5237] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  193.016128][ T5237] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  193.055338][ T5237] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  193.085612][ T5237] device geneve2 entered promiscuous mode
[  194.208955][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.215397][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  195.130280][ T5267] device dummy0 entered promiscuous mode
[  201.535857][ T5322] sctp: failed to load transform for md5: -2
[  201.989232][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'.
[  206.606109][ T4290] Bluetooth: hci3: command 0x0406 tx timeout
[  206.616100][ T4290] Bluetooth: hci2: command 0x0406 tx timeout
[  209.034885][ T5397] device syzkaller0 entered promiscuous mode
[  211.576241][ T4358] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  211.794142][ T4358] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  211.870741][ T4358] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  212.132681][ T4358] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  212.305555][ T4358] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  212.503552][ T4358] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  212.639134][ T4358] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  212.696367][ T4358] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  212.742111][ T4358] usb 3-1: Product: syz
[  212.768591][ T4358] usb 3-1: Manufacturer: syz
[  212.852758][ T4358] cdc_wdm 3-1:1.0: skipping garbage
[  212.871945][ T4358] cdc_wdm 3-1:1.0: skipping garbage
[  213.738189][ T4358] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  213.744254][ T4358] cdc_wdm 3-1:1.0: Unknown control protocol
[  213.925345][ T4317] usb 3-1: USB disconnect, device number 3
[  215.237557][ T5440] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(3)
[  215.255638][ T5440] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(9)
[  215.299232][ T5439] null_blk: disk nullb1 created
[  215.512717][ T5444] device syzkaller0 entered promiscuous mode
[  217.381725][ T4317] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  217.616322][ T4317] usb 4-1: Using ep0 maxpacket: 16
[  218.465906][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.486614][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  218.516063][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  218.525790][ T4317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  218.536035][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  218.674311][ T4317] usb 4-1: string descriptor 0 read error: -71
[  218.691461][ T4317] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  218.786017][ T4317] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  218.836985][ T4317] usb 4-1: config 0 descriptor??
[  218.853784][ T4317] usb 4-1: can't set config #0, error -71
[  218.913193][ T4317] usb 4-1: USB disconnect, device number 4
[  220.397939][ T5491] device syzkaller0 entered promiscuous mode
[  225.623059][ T5544] IPVS: sh: FWM 3 0x00000003 - no destination available
[  225.916048][   T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  226.241129][   T14] usb 5-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config
[  226.372120][   T14] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  226.412889][   T14] usb 5-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00
[  226.441239][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.514160][   T14] usb 5-1: config 0 descriptor??
[  228.698373][   T14] usb 5-1: string descriptor 0 read error: -71
[  228.738161][   T14] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  228.785921][   T14] usb 5-1: USB disconnect, device number 2
[  229.116478][ T5583] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  229.195184][ T5583] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  229.425104][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'.
[  234.444849][ T5624] serio: Serial port ptm0
[  237.211095][ T5638] Bluetooth: MGMT ver 1.22
[  237.385707][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'.
[  243.796317][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'.
[  243.823734][ T5701] netlink: 'syz.3.383': attribute type 5 has an invalid length.
[  243.859460][ T5701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.383'.
[  249.116929][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'.
[  249.226191][ T5770] netlink: 'syz.1.400': attribute type 5 has an invalid length.
[  249.246411][ T5770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.400'.
[  254.479778][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'.
[  254.504390][ T5823] netlink: 'syz.4.415': attribute type 5 has an invalid length.
[  254.571893][ T5823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.415'.
[  255.648433][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.654878][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.663333][ T5859] netlink: 'syz.2.424': attribute type 29 has an invalid length.
[  256.778934][ T5862] netlink: 756 bytes leftover after parsing attributes in process `syz.2.424'.
[  256.821458][ T5859] netlink: 'syz.2.424': attribute type 29 has an invalid length.
[  257.049253][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'.
[  258.309806][ T5873] fuse: Invalid rootmode
[  259.825328][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.833464][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.933354][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.941611][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.720972][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'.
[  262.970932][ T5911] fuse: Bad value for 'rootmode'
[  265.385523][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'.
[  266.381026][ T5961] fuse: Bad value for 'rootmode'
[  266.626023][ T5270] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  266.833542][ T5270] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  266.854209][ T5270] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  266.895458][ T5270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  266.911114][ T5270] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  267.773881][ T5270] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  267.808698][ T5270] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  267.823776][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  267.833638][ T5270] usb 5-1: Product: syz
[  267.838178][ T5270] usb 5-1: Manufacturer: syz
[  267.856752][ T5270] cdc_wdm 5-1:1.0: skipping garbage
[  267.864058][ T5270] cdc_wdm 5-1:1.0: skipping garbage
[  267.891670][ T5270] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  267.903672][ T5270] cdc_wdm 5-1:1.0: Unknown control protocol
[  268.085018][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  268.091995][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  268.098998][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  268.105652][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  268.112651][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  268.119308][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  268.125776][ T5270] usb 5-1: USB disconnect, device number 3
[  269.828771][ T5990] netlink: 'syz.0.466': attribute type 10 has an invalid length.
[  269.836790][ T5990] device dummy0 left promiscuous mode
[  269.864332][ T5990] team0: Port device dummy0 added
[  270.267313][ T5992] fuse: Bad value for 'rootmode'
[  270.683553][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'.
[  274.821120][ T6014] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  274.913187][ T6018] ima: Unable to open file: /e (-2)
[  275.635165][ T6010] ima: policy update failed
[  275.649042][   T26] audit: type=1802 audit(1786486126.821:2): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.475" res=0 errno=0
[  275.818393][ T6022] serio: Serial port ptm0
[  276.946165][ T4325] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  276.970036][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'.
[  277.489206][ T6039] fuse: Unknown parameter 'use00000000000000000000'
[  277.793874][ T4325] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  277.813581][ T4325] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  277.824620][ T4325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  277.849652][ T4325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  277.901698][ T4325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  277.962091][ T4325] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  278.009799][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  278.046944][ T6047] netlink: 'syz.3.482': attribute type 10 has an invalid length.
[  278.054897][ T6047] device dummy0 left promiscuous mode
[  278.077328][ T6047] team0: Port device dummy0 added
[  278.152398][ T4325] usb 2-1: Product: syz
[  278.234840][ T4325] usb 2-1: Manufacturer: syz
[  278.526277][ T4325] cdc_wdm 2-1:1.0: skipping garbage
[  278.618792][ T4325] cdc_wdm 2-1:1.0: skipping garbage
[  278.862318][ T4325] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  278.945747][ T4325] cdc_wdm 2-1:1.0: Unknown control protocol
[  278.991221][ T4325] usb 2-1: USB disconnect, device number 5
[  279.687857][ T6075] serio: Serial port ptm0
[  280.816736][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'.
[  280.852051][ T6087] fuse: Unknown parameter 'use00000000000000000000'
[  282.171240][ T6107] netlink: 'syz.4.497': attribute type 10 has an invalid length.
[  282.179625][ T6107] device dummy0 left promiscuous mode
[  282.201564][ T6107] team0: Port device dummy0 added
[  282.276286][ T4325] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  282.491981][ T4325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  282.924269][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.177859][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[  283.216260][ T6112] netlink: 'syz.2.501': attribute type 5 has an invalid length.
[  283.228201][ T4325] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  283.264760][ T6112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'.
[  284.390886][   T26] audit: type=1800 audit(1786486135.561:3): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.505" name="size" dev="configfs" ino=41151 res=0 errno=0
[  284.766045][   T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  284.829664][ T6134] fuse: Unknown parameter 'use00000000000000000000'
[  284.967863][   T14] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  284.984370][   T14] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  285.045646][   T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  285.085746][   T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  285.165596][   T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  286.518195][ T5270] usb 2-1: USB disconnect, device number 6
[  286.607394][   T14] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  286.638888][   T14] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  286.651997][   T14] usb 3-1: Product: syz
[  287.328668][   T14] usb 3-1: Manufacturer: syz
[  287.391400][   T14] cdc_wdm 3-1:1.0: skipping garbage
[  287.407349][   T14] cdc_wdm 3-1:1.0: skipping garbage
[  287.438483][   T14] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  287.446910][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[  287.455777][ T6159] netlink: 'syz.1.515': attribute type 5 has an invalid length.
[  287.485458][   T14] cdc_wdm 3-1:1.0: Unknown control protocol
[  287.522361][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'.
[  287.701507][   T14] usb 3-1: USB disconnect, device number 4
[  290.572288][ T6183] tmpfs: Bad value for 'nr_inodes'
[  290.927915][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'.
[  294.553502][ T6220] netlink: 72 bytes leftover after parsing attributes in process `syz.3.529'.
[  294.806149][  T129] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  295.046596][  T129] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  295.137971][  T129] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  295.306659][  T129] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  295.385255][  T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.487913][  T129] usb 3-1: Product: syz
[  295.492227][  T129] usb 3-1: Manufacturer: syz
[  295.562928][  T129] usb 3-1: SerialNumber: syz
[  295.584388][  T129] usb 3-1: config 0 descriptor??
[  295.638912][  T129] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  296.767867][ T4358] usb 3-1: USB disconnect, device number 5
[  297.619377][ T6251] IPVS: sh: FWM 3 0x00000003 - no destination available
[  299.178147][ T6268] serio: Serial port ptm0
[  299.198050][ T4290] Bluetooth: hci2: unexpected event for opcode 0x080b
[  301.166186][ T4373] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  301.434481][ T4373] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  301.507066][ T4373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.975373][ T4373] cdc_acm 3-1:1.0: ttyACM0: USB ACM device
[  302.695290][ T6303] tmpfs: Unknown parameter 'usrquota'
[  303.029890][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.042050][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.085317][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.098258][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.256310][ T4290] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  303.266144][ T4290] Bluetooth: hci2: Injecting HCI hardware error event
[  303.274550][ T4290] Bluetooth: hci2: hardware error 0x00
[  304.088845][ T6322] serio: Serial port ptm0
[  304.409315][   T27] usb 3-1: USB disconnect, device number 6
[  305.331647][ T4290] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  305.486100][ T6314] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  305.498852][ T6332] fuse: Unknown parameter 'user_id00000000000000000000'
[  307.061603][ T6361] IPVS: sh: FWM 3 0x00000003 - no destination available
[  308.239667][ T6377] netlink: 72 bytes leftover after parsing attributes in process `syz.2.571'.
[  308.446107][ T4358] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  308.933759][ T6383] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  309.282591][ T4358] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  309.334443][ T4358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.587283][ T4358] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  314.101541][ T4317] usb 5-1: USB disconnect, device number 4
[  315.276294][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'.
[  316.951612][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'.
[  317.089771][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.120242][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  318.899839][ T6443] netlink: 72 bytes leftover after parsing attributes in process `syz.1.588'.
[  322.058849][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'.
[  324.162945][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'.
[  325.062987][ T6498] netlink: 72 bytes leftover after parsing attributes in process `syz.1.603'.
[  328.346073][ T4321] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  328.611057][ T4321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  328.623746][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.815818][ T6555] fuse: Unknown parameter '0x0000000000000003'
[  329.164268][ T4321] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  330.852320][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'.
[  331.052747][ T6516] usb 2-1: USB disconnect, device number 7
[  332.967244][ T6590] IPVS: sh: FWM 3 0x00000003 - no destination available
[  333.641901][ T6596] fuse: Unknown parameter '0x0000000000000003'
[  335.044751][ T6612] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  336.819009][ T6516] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  336.926268][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  337.076040][ T6516] usb 5-1: device descriptor read/64, error -32
[  337.225381][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'.
[  337.939125][ T6516] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  340.199402][ T6516] usb 5-1: device descriptor read/all, error -71
[  340.206130][ T6516] usb usb5-port1: attempt power cycle
[  340.319610][ T6649] fuse: Unknown parameter '0x0000000000000003'
[  343.946027][ T4317] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  344.167958][ T4317] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  344.333108][ T4317] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  344.373894][ T4317] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  344.383885][ T4317] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  344.397123][ T4317] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  344.412878][ T4317] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  344.424565][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  344.435594][ T4317] usb 4-1: Product: syz
[  344.620681][ T4317] usb 4-1: Manufacturer: syz
[  344.644835][ T4317] cdc_wdm 4-1:1.0: skipping garbage
[  344.654974][ T4317] cdc_wdm 4-1:1.0: skipping garbage
[  344.663555][ T4317] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  344.673283][ T4317] cdc_wdm 4-1:1.0: Unknown control protocol
[  344.857902][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  344.859722][ T6170] usb 4-1: USB disconnect, device number 5
[  344.864578][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  344.864600][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  347.815016][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  348.327623][ T6741] fuse: Unknown parameter 'fd0x0000000000000003'
[  352.153503][ T6769] input: syz0 as /devices/virtual/input/input32
[  353.366396][ T6783] fuse: Unknown parameter 'fd0x0000000000000003'
[  355.357614][ T6801] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  356.663525][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'.
[  357.669204][ T6829] fuse: Unknown parameter 'fd0x0000000000000003'
[  359.032380][ T6854] ima: Unable to open file: /e (-2)
[  359.794361][ T6852] ima: policy update failed
[  359.807969][   T26] audit: type=1802 audit(1786486210.981:4): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.702" res=0 errno=0
[  361.115611][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'.
[  361.136224][ T6870] netlink: 'syz.3.705': attribute type 5 has an invalid length.
[  361.171920][ T6870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.705'.
[  361.539906][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'.
[  364.476193][ T4321] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  364.946060][ T4321] usb 1-1: Using ep0 maxpacket: 16
[  365.017785][ T4321] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  365.652415][ T6925] serio: Serial port ptm0
[  366.098730][ T4321] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  366.113595][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.122507][ T4321] usb 1-1: Product: syz
[  366.127293][ T4321] usb 1-1: Manufacturer: syz
[  366.132214][ T4321] usb 1-1: SerialNumber: syz
[  366.268139][ T4321] usb 1-1: config 0 descriptor??
[  366.269142][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  366.327786][ T6931] netlink: 'syz.4.724': attribute type 5 has an invalid length.
[  366.335520][ T6931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.724'.
[  367.696363][ T4317] usb 1-1: USB disconnect, device number 2
[  369.293844][ T6972] serio: Serial port ptm0
[  370.125143][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'.
[  370.178128][ T6985] netlink: 'syz.0.738': attribute type 5 has an invalid length.
[  370.226466][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.738'.
[  370.411863][ T6985] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  370.441149][ T6985] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  370.455599][ T6985] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  370.473102][ T6985] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  370.492691][ T6985] netdevsim netdevsim10 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  370.506690][ T6985] device geneve2 entered promiscuous mode
[  375.361333][ T7035] serio: Serial port ptm0
[  376.878071][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'.
[  376.945778][ T7055] netlink: 'syz.2.758': attribute type 5 has an invalid length.
[  376.994506][ T7055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.758'.
[  378.528226][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.534634][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  379.258213][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'.
[  380.636701][ T7101] serio: Serial port ptm0
[  381.706053][ T4317] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  383.466005][ T4317] usb 3-1: device descriptor read/64, error -71
[  383.812149][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'.
[  383.826008][ T4317] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  383.904881][ T7129] netlink: 'syz.1.778': attribute type 5 has an invalid length.
[  383.951586][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.778'.
[  383.986009][ T4317] usb 3-1: device descriptor read/64, error -71
[  384.126275][ T4317] usb usb3-port1: attempt power cycle
[  384.293052][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'.
[  384.387510][ T7134] netlink: 'syz.1.779': attribute type 5 has an invalid length.
[  384.446095][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.779'.
[  384.536596][ T4317] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  384.786005][ T4317] usb 3-1: device not accepting address 9, error -71
[  385.358661][ T7148] netlink: 72 bytes leftover after parsing attributes in process `syz.2.784'.
[  388.130161][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'.
[  388.162283][ T7171] netlink: 'syz.0.791': attribute type 5 has an invalid length.
[  388.201357][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.791'.
[  389.762240][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'.
[  389.823855][ T7185] netlink: 'syz.4.794': attribute type 5 has an invalid length.
[  389.889205][ T7185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.794'.
[  397.177461][ T7230] netlink: 72 bytes leftover after parsing attributes in process `syz.3.807'.
[  399.683051][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'.
[  403.903474][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'.
[  403.991520][ T7294] netlink: 'syz.3.826': attribute type 5 has an invalid length.
[  404.024219][ T7294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'.
[  404.522847][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'.
[  407.848865][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'.
[  407.883308][ T7333] netlink: 'syz.2.834': attribute type 5 has an invalid length.
[  407.892623][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'.
[  408.389404][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'.
[  408.498989][ T7338] netlink: 'syz.3.839': attribute type 5 has an invalid length.
[  409.312069][ T7338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.839'.
[  413.662576][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'.
[  413.778636][ T7396] netlink: 'syz.1.854': attribute type 5 has an invalid length.
[  413.842197][ T7396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'.
[  416.315993][ T4373] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  417.127161][ T4373] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.147924][ T4373] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  417.157090][ T4373] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  417.170098][ T4373] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  417.179261][ T4373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.307017][ T4373] cdc_acm 2-1:1.0: skipping garbage
[  418.920584][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'.
[  418.994931][ T7444] netlink: 'syz.3.867': attribute type 5 has an invalid length.
[  419.046052][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.867'.
[  420.288050][ T6170] usb 2-1: USB disconnect, device number 8
[  426.896031][ T4317] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  427.397839][ T4317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  427.421432][ T4317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  427.431983][ T4317] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  427.496475][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.269465][ T4321] usb 3-1: USB disconnect, device number 11
[  436.066241][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  436.380960][ T4321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  436.399974][ T4321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  436.410095][ T4321] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  436.424888][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.195137][ T4317] usb 1-1: USB disconnect, device number 3
[  439.978984][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.985506][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  443.605621][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'.
[  443.775999][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  444.545987][    T7] usb 4-1: Using ep0 maxpacket: 8
[  444.563159][    T7] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[  445.378994][    T7] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  446.258987][    T7] usb 4-1: config 135 has no interface number 0
[  446.266980][    T7] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  446.283796][    T7] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  446.295452][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.303929][    T7] usb 4-1: Product: syz
[  446.308404][    T7] usb 4-1: Manufacturer: syz
[  446.313139][    T7] usb 4-1: SerialNumber: syz
[  446.356333][    T7] uvcvideo 4-1:135.230: Found Unit with invalid ID 0
[  446.363247][    T7] usb 4-1: Found UVC 0.00 device syz (18ec:3288)
[  446.370335][    T7] usb 4-1: No valid video chain found.
[  446.552885][    T7] usb 4-1: USB disconnect, device number 6
[  446.574503][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'.
[  446.616916][ T7680] netlink: 'syz.1.929': attribute type 5 has an invalid length.
[  446.672426][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.929'.
[  447.874666][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'.
[  451.337114][ T4317] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  451.546092][ T4317] usb 5-1: Using ep0 maxpacket: 8
[  452.862022][ T4317] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  452.957796][ T4317] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  453.113176][ T4317] usb 5-1: config 135 has no interface number 0
[  453.211550][ T4317] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  453.503834][ T4317] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  453.736037][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.744160][ T4317] usb 5-1: Product: syz
[  453.752024][ T4317] usb 5-1: Manufacturer: syz
[  453.757020][ T4317] usb 5-1: SerialNumber: syz
[  453.768586][ T4317] uvcvideo 5-1:135.230: Found Unit with invalid ID 0
[  453.775481][ T4317] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  453.783229][ T4317] usb 5-1: No valid video chain found.
[  453.876148][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'.
[  453.888394][ T7740] netlink: 'syz.1.947': attribute type 5 has an invalid length.
[  453.920156][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.947'.
[  453.973571][ T6516] usb 5-1: USB disconnect, device number 8
[  454.537071][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'.
[  457.276165][   T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  457.496237][   T27] usb 2-1: Using ep0 maxpacket: 8
[  458.349140][   T27] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  458.379075][   T27] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  458.414446][   T27] usb 2-1: config 135 has no interface number 0
[  458.432881][   T27] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  458.634950][   T27] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  458.654307][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.672408][   T27] usb 2-1: Product: syz
[  458.717382][   T27] usb 2-1: Manufacturer: syz
[  458.908358][   T27] usb 2-1: SerialNumber: syz
[  459.143483][   T27] usb 2-1: USB disconnect, device number 9
[  459.539009][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'.
[  464.074650][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'.
[  464.139494][ T7846] netlink: 'syz.2.981': attribute type 5 has an invalid length.
[  464.304467][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.981'.
[  465.512755][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'.
[  469.694343][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'.
[  469.716376][ T7902] netlink: 'syz.0.995': attribute type 5 has an invalid length.
[  469.995998][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.995'.
[  470.348575][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'.
[  474.483510][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'.
[  476.289803][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'.
[  476.326918][ T7962] netlink: 'syz.4.1011': attribute type 5 has an invalid length.
[  476.334975][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1011'.
[  477.886048][ T4321] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  478.187800][ T4321] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  478.226121][ T4321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  478.244897][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.293067][ T4321] cdc_acm: probe of 2-1:1.0 failed with error -22
[  481.464472][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'.
[  481.603739][ T4320] usb 2-1: USB disconnect, device number 10
[  482.637562][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'.
[  482.746815][ T8018] netlink: 'syz.4.1028': attribute type 5 has an invalid length.
[  482.754846][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'.
[  486.868083][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'.
[  488.950761][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.985154][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.020053][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.068837][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.264762][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'.
[  491.275709][ T8072] netlink: 'syz.4.1044': attribute type 5 has an invalid length.
[  491.283801][ T8072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1044'.
[  494.801022][   T26] audit: type=1800 audit(1786486345.971:5): pid=8113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1056" name="size" dev="configfs" ino=49125 res=0 errno=0
[  495.268263][ T8116] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1057'.
[  495.316798][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'.
[  496.169244][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[  496.248069][ T8124] netlink: 'syz.2.1060': attribute type 5 has an invalid length.
[  496.299614][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1060'.
[  497.905989][ T4373] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  498.725923][ T4373] usb 2-1: Using ep0 maxpacket: 8
[  498.790019][ T4373] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  498.839537][ T4373] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  498.896070][ T4373] usb 2-1: config 135 has no interface number 0
[  498.929530][ T4373] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  498.945711][ T4373] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  498.955814][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.964088][ T4373] usb 2-1: Product: syz
[  498.968616][ T4373] usb 2-1: Manufacturer: syz
[  498.973330][ T4373] usb 2-1: SerialNumber: syz
[  499.151814][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'.
[  499.188164][ T4373] usb 2-1: USB disconnect, device number 11
[  499.324081][   T26] audit: type=1800 audit(1786486350.491:6): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1072" name="size" dev="configfs" ino=49802 res=0 errno=0
[  499.607345][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'.
[  499.624783][ T8172] netlink: 'syz.3.1073': attribute type 5 has an invalid length.
[  499.651102][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1073'.
[  501.046055][ T6516] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  501.248091][ T6516] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  501.266145][ T6516] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  501.307340][ T6516] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  501.317601][ T6516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.340447][ T6516] cdc_acm: probe of 1-1:1.0 failed with error -12
[  501.410323][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.416783][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.130080][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'.
[  502.150288][ T8212] netlink: 'syz.4.1085': attribute type 5 has an invalid length.
[  502.174705][ T8212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1085'.
[  502.519875][   T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  502.806099][   T27] usb 3-1: Using ep0 maxpacket: 8
[  502.816664][   T27] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  502.825393][   T27] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  502.838381][   T27] usb 3-1: config 135 has no interface number 0
[  502.846512][   T27] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  502.864293][   T27] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  502.873564][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.881831][   T27] usb 3-1: Product: syz
[  502.886235][   T27] usb 3-1: Manufacturer: syz
[  502.891000][   T27] usb 3-1: SerialNumber: syz
[  503.118004][   T27] usb 3-1: USB disconnect, device number 12
[  504.510233][   T27] usb 1-1: USB disconnect, device number 4
[  505.861367][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'.
[  505.891242][ T8264] netlink: 'syz.2.1099': attribute type 5 has an invalid length.
[  505.948911][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1099'.
[  507.873868][ T8295] serio: Serial port ptm0
[  508.399420][ T8298] usb usb1: usbfs: process 8298 (syz.0.1107) did not claim interface 0 before use
[  512.773143][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  512.806409][ T8321] netlink: 'syz.2.1115': attribute type 5 has an invalid length.
[  512.823209][ T8321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1115'.
[  513.496021][ T6516] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  514.138893][ T8340] serio: Serial port ptm0
[  514.613036][ T6516] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  515.494007][ T6516] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  515.558496][ T6516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.589666][ T6516] usb 3-1: Product: syz
[  515.593969][ T6516] usb 3-1: Manufacturer: syz
[  517.569324][ T6516] usb 3-1: SerialNumber: syz
[  519.644644][ T6516] usb 3-1: can't set config #2, error -71
[  519.714318][ T6516] usb 3-1: USB disconnect, device number 13
[  519.931938][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'.
[  519.987815][ T8367] netlink: 'syz.1.1130': attribute type 5 has an invalid length.
[  519.995635][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'.
[  520.253074][ T8383] ima: Unable to open file: /e (-2)
[  520.897110][ T8376] ima: policy update failed
[  520.907609][   T26] audit: type=1802 audit(1786486372.081:7): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1133" res=0 errno=0
[  521.568468][ T8392] serio: Serial port ptm0
[  521.742474][ T8401] tmpfs: Unknown parameter 'usrquota'
[  522.597288][ T8405] input: syz1 as /devices/virtual/input/input39
[  523.106212][ T4321] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  523.916040][ T4321] usb 2-1: Using ep0 maxpacket: 32
[  524.736010][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  524.775216][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.808522][ T4321] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  524.841823][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.891110][ T4321] usb 2-1: config 0 descriptor??
[  525.483529][ T4321] savu 0003:1E7D:2D5A.0002: ignoring exceeding usage max
[  525.493581][ T4321] savu 0003:1E7D:2D5A.0002: item fetching failed at offset 5/8
[  525.502171][ T4321] savu 0003:1E7D:2D5A.0002: parse failed
[  525.508183][ T4321] savu: probe of 0003:1E7D:2D5A.0002 failed with error -22
[  525.580941][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'.
[  525.599460][ T8434] netlink: 'syz.4.1145': attribute type 5 has an invalid length.
[  525.611591][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1145'.
[  525.883748][    T7] usb 2-1: USB disconnect, device number 12
[  527.993336][ T8453] tmpfs: Unknown parameter 'usrquota'
[  530.345128][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'.
[  530.428252][ T8478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.215582][ T8478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.854676][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'.
[  533.875939][ T8488] netlink: 'syz.0.1159': attribute type 5 has an invalid length.
[  533.912742][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1159'.
[  534.380373][ T8499] serio: Serial port ptm0
[  534.729950][ T8506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1166'.
[  535.315952][ T4321] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  536.022832][ T4321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  536.052349][ T8519] tmpfs: Unknown parameter 'usrquota'
[  536.248789][ T4321] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  537.165413][ T4321] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  537.174921][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.187215][ T4321] usb 2-1: config 0 descriptor??
[  537.195327][ T4321] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  537.202571][ T4321] dvb-usb: bulk message failed: -22 (3/0)
[  537.252793][ T4321] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  537.272074][ T4321] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  537.300766][ T4321] usb 2-1: media controller created
[  537.318395][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  537.362422][ T4321] dvb-usb: bulk message failed: -22 (6/0)
[  537.377987][ T4321] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  537.398153][ T8511] dvb-usb: bulk message failed: -22 (2/0)
[  537.406800][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40
[  538.338087][ T4321] dvb-usb: schedule remote query interval to 150 msecs.
[  538.345129][ T4321] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  538.455198][ T4321] usb 2-1: USB disconnect, device number 13
[  538.498445][   T27] dvb-usb: bulk message failed: -22 (1/0)
[  538.505656][   T27] dvb-usb: error while querying for an remote control event.
[  539.366567][ T4321] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  539.401063][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'.
[  539.446097][ T8540] netlink: 'syz.3.1174': attribute type 5 has an invalid length.
[  539.490500][ T8540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'.
[  539.773884][ T8553] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1177'.
[  539.866129][ T7182] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  540.069245][ T7182] usb 1-1: config 0 has no interfaces?
[  540.075015][ T7182] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  540.111874][ T7182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.145398][ T7182] usb 1-1: config 0 descriptor??
[  540.389304][   T27] usb 1-1: USB disconnect, device number 5
[  542.064743][   T26] audit: type=1400 audit(1786486393.231:8): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8575 comm="syz.3.1182"
[  543.711478][ T8593] jffs2: notice: (8593) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  544.620769][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'.
[  544.667288][ T8599] netlink: 'syz.0.1188': attribute type 5 has an invalid length.
[  544.677056][    T7] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  544.742168][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'.
[  544.969093][    T7] usb 5-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0x79, skipping
[  544.988047][    T7] usb 5-1: config 0 interface 0 has no altsetting 0
[  545.008227][    T7] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  545.082600][    T7] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  545.120228][ T8608] serio: Serial port ptm0
[  545.132489][    T7] usb 5-1: Product: syz
[  545.151268][    T7] usb 5-1: Manufacturer: syz
[  545.161825][    T7] usb 5-1: SerialNumber: syz
[  545.188895][    T7] usb 5-1: config 0 descriptor??
[  545.374713][    T7] snd-usb-audio: probe of 5-1:0.0 failed with error -22
[  545.437250][ T4843] udevd[4843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  545.523363][    T7] usb 5-1: USB disconnect, device number 9
[  546.338750][ T8625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1195'.
[  546.849242][ T8628] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1196'.
[  548.169075][ T8642] random: crng reseeded on system resumption
[  550.878588][ T8663] device syzkaller0 entered promiscuous mode
[  551.614129][ T8672] =======================================================
[  551.614129][ T8672] WARNING: The mand mount option has been deprecated and
[  551.614129][ T8672]          and is ignored by this kernel. Remove the mand
[  551.614129][ T8672]          option from the mount to silence this warning.
[  551.614129][ T8672] =======================================================
[  551.653861][   T14] kernel write not supported for file /sequencer2 (pid: 14 comm: kworker/0:1)
[  554.887538][ T8705] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1218'.
[  555.687066][ T8710] tmpfs: Unknown parameter 'quota'
[  558.100637][ T8731] ima: Unable to open file: /e (-2)
[  558.100864][ T8730] ima: policy update failed
[  558.127334][ T8728] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1221'.
[  558.212064][   T26] audit: type=1802 audit(1786486409.381:9): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1225" res=0 errno=0
[  559.707644][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'.
[  559.756055][ T6170] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  559.948102][ T6170] usb 5-1: unable to get BOS descriptor or descriptor too short
[  559.995424][ T6170] usb 5-1: not running at top speed; connect to a high speed hub
[  560.017869][ T6170] usb 5-1: config 200 has an invalid interface number: 97 but max is 0
[  560.027675][ T8760] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1233'.
[  560.037006][ T6170] usb 5-1: config 200 has no interface number 0
[  560.044740][ T6170] usb 5-1: config 200 interface 97 has no altsetting 0
[  560.075086][ T6170] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[  560.099662][ T6170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.143084][ T6170] usb 5-1: Product: syz
[  560.153505][ T6170] usb 5-1: Manufacturer: syz
[  560.169054][ T6170] usb 5-1: SerialNumber: syz
[  562.866488][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.872876][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  564.207383][ T6170] go7007: probe of 5-1:200.97 failed with error -12
[  564.237032][ T6170] usb 5-1: USB disconnect, device number 10
[  564.738779][ T8783] ima: Unable to open file: /e (-2)
[  564.739071][ T8782] ima: policy update failed
[  564.788511][   T26] audit: type=1802 audit(1786486415.961:10): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1239" res=0 errno=0
[  565.960400][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'.
[  568.116949][ T8810] infiniband syz2: set active
[  568.122584][ T8810] infiniband syz2: added veth1_vlan
[  568.137940][ T8810] rdma_rxe: unable to create cq
[  568.143956][ T8810] infiniband syz2: Couldn't create ib_mad CQ
[  568.162474][ T8810] infiniband syz2: Couldn't open port 1
[  568.225160][ T8810] RDS/IB: syz2: added
[  568.234707][ T8810] smc: adding ib device syz2 with port count 1
[  568.250903][ T8810] smc:    ib device syz2 port 1 has pnetid 
[  569.950460][ T8841] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  569.962702][ T8839] ima: Unable to open file: /e (-2)
[  569.963070][ T8838] ima: policy update failed
[  570.021611][   T26] audit: type=1802 audit(1786486421.191:11): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1254" res=0 errno=0
[  570.096631][   T26] audit: type=1326 audit(1786486421.271:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c6b9e0d9 code=0x7ffc0000
[  570.220072][   T26] audit: type=1326 audit(1786486421.301:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c6b9e0d9 code=0x7ffc0000
[  570.290968][   T26] audit: type=1326 audit(1786486421.301:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c6b9e0d9 code=0x7ffc0000
[  570.307479][ T8847] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1256'.
[  570.326694][   T26] audit: type=1326 audit(1786486421.301:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c6b9e0d9 code=0x7ffc0000
[  570.371447][   T26] audit: type=1326 audit(1786486421.301:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=175 compat=0 ip=0x7fe9c6b9e0d9 code=0x7ffc0000
[  570.428301][   T26] audit: type=1326 audit(1786486421.301:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c6b9e0d9 code=0x7ffc0000
[  570.465453][   T26] audit: type=1326 audit(1786486421.301:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c6b9e0d9 code=0x7ffc0000
[  570.590351][   T26] audit: type=1326 audit(1786486421.301:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe9c6b9e0d9 code=0x7ffc0000
[  570.893879][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'.
[  571.135333][   T26] audit: type=1326 audit(1786486421.301:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe9c6b9e0d9 code=0x7ffc0000
[  573.983467][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'.
[  574.675781][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'.
[  577.210532][ T8933] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1281'.
[  578.967031][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'.
[  579.435087][   T22] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  579.707907][   T22] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  579.718894][   T22] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  579.728730][   T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  579.738418][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.850779][   T22] cdc_acm: probe of 2-1:1.0 failed with error -12
[  581.167161][ T8982] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1300'.
[  582.055816][ T6170] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  582.258205][ T6170] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  582.285062][ T6170] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  582.295925][ T6170] usb 5-1: config 0 interface 0 has no altsetting 0
[  582.323546][ T6170] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  582.349977][ T6170] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  582.406389][ T6170] usb 5-1: Product: syz
[  582.423523][ T6170] usb 5-1: Manufacturer: syz
[  583.416010][ T6170] usb 5-1: SerialNumber: syz
[  583.442466][ T6170] usb 5-1: config 0 descriptor??
[  583.447537][ T4373] usb 2-1: USB disconnect, device number 14
[  583.524509][ T6170] hub 5-1:0.0: bad descriptor, ignoring hub
[  583.680163][ T9001] ima: Unable to open file: /e (-2)
[  584.341068][ T8997] ima: policy update failed
[  584.361562][   T26] audit: type=1802 audit(1786486435.531:21): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1304" res=0 errno=0
[  584.384729][ T6170] hub: probe of 5-1:0.0 failed with error -5
[  584.395761][ T6170] usb 5-1: selecting invalid altsetting 0
[  584.447615][ T6170] usb 5-1: USB disconnect, device number 11
[  585.649701][ T6196] udevd[6196]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  585.822588][ T9014] tmpfs: Bad value for 'nr_inodes'
[  587.908619][ T9040] ima: Unable to open file: /e (-2)
[  588.616772][ T9035] ima: policy update failed
[  588.630305][   T26] audit: type=1802 audit(1786486439.801:22): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1318" res=0 errno=0
[  589.333142][ T9047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1321'.
[  589.690784][ T9051] serio: Serial port ptm0
[  592.094735][ T9081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1328'.
[  592.979816][ T9083] capability: warning: `syz.0.1330' uses 32-bit capabilities (legacy support in use)
[  594.182363][ T9091] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1332'.
[  594.441668][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1333'.
[  596.224827][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'.
[  596.282494][ T9123] netlink: 'syz.1.1339': attribute type 5 has an invalid length.
[  596.324747][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1339'.
[  597.850227][ T9134] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1345'.
[  599.159417][ T9149] serio: Serial port ptm0
[  599.806499][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'.
[  600.949178][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'.
[  600.974775][ T9167] netlink: 'syz.4.1353': attribute type 5 has an invalid length.
[  601.040266][ T9167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1353'.
[  601.386883][ T4373] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  601.578891][ T4373] usb 3-1: unable to get BOS descriptor or descriptor too short
[  601.610359][ T4373] usb 3-1: not running at top speed; connect to a high speed hub
[  601.629685][ T4373] usb 3-1: config 200 has an invalid interface number: 97 but max is 0
[  601.648266][ T4373] usb 3-1: config 200 has no interface number 0
[  601.654622][ T4373] usb 3-1: config 200 interface 97 has no altsetting 0
[  601.684423][ T4373] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[  601.705075][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.723923][ T4373] usb 3-1: Product: syz
[  601.746980][ T4373] usb 3-1: Manufacturer: syz
[  601.751709][ T4373] usb 3-1: SerialNumber: syz
[  603.808665][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  605.533369][ T4373] go7007: probe of 3-1:200.97 failed with error -12
[  605.742820][ T4373] usb 3-1: USB disconnect, device number 14
[  606.256457][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'.
[  610.763833][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'.
[  610.865935][ T9222] netlink: 'syz.0.1369': attribute type 5 has an invalid length.
[  610.939496][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1369'.
[  611.362850][ T9230] using random self ethernet address
[  611.377504][ T9230] using random host ethernet address
[  611.615986][ T6170] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  611.684557][ T9247] file system registered
[  611.729910][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'.
[  611.749372][ T9247] netlink: 'syz.2.1377': attribute type 5 has an invalid length.
[  611.765838][ T9247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1377'.
[  611.817858][ T6170] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  611.835984][ T6170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.204552][ T6170] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  614.380412][ T6170] usb 1-1: USB disconnect, device number 6
[  614.562978][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'.
[  614.593754][ T9279] netlink: 'syz.4.1383': attribute type 5 has an invalid length.
[  614.666014][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1383'.
[  616.946177][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'.
[  616.955348][ T9295] netlink: 'syz.4.1390': attribute type 5 has an invalid length.
[  616.963194][ T9295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1390'.
[  621.705846][ T9332] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1401'.
[  621.882039][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'.
[  621.985459][ T9335] netlink: 'syz.0.1400': attribute type 5 has an invalid length.
[  621.993958][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1400'.
[  622.006129][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'.
[  622.034539][ T9334] netlink: 'syz.1.1402': attribute type 5 has an invalid length.
[  622.052707][ T9334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1402'.
[  624.266091][ T9357] random: crng reseeded on system resumption
[  624.288067][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.294481][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  625.506511][ T9367] netlink: 'syz.1.1411': attribute type 10 has an invalid length.
[  625.535323][ T9367] team0: Port device dummy0 added
[  627.638192][ T9381] serio: Serial port ptm0
[  628.048697][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'.
[  628.453209][ T9398] netlink: 'syz.3.1418': attribute type 5 has an invalid length.
[  628.734282][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'.
[  628.921088][ T9396] read descriptors
[  630.006537][ T9410] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1421'.
[  630.058434][ T4273] ffs_data_put(): freeing
[  630.253372][ T9416] syz.3.1423 uses obsolete (PF_INET,SOCK_PACKET)
[  630.551348][ T9423] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004
[  634.667267][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'.
[  634.676539][ T9455] netlink: 'syz.3.1433': attribute type 5 has an invalid length.
[  634.684815][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1433'.
[  634.708122][ T9455] read descriptors
[  634.787783][ T9462] binder: 9459:9462 ioctl 40046205 0 returned -22
[  636.676692][ T9465] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1435'.
[  636.888243][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'.
[  636.913310][ T4273] ffs_data_put(): freeing
[  640.606367][ T9504] binder: 9501:9504 ioctl 40046205 0 returned -22
[  642.601655][ T9511] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1449'.
[  645.972972][ T9550] binder: 9545:9550 ioctl 40046205 0 returned -22
[  646.629010][ T9560] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  651.188732][ T9599] netlink: 'syz.4.1471': attribute type 39 has an invalid length.
[  651.767968][ T9606] binder: 9603:9606 ioctl c0306201 0 returned -14
[  654.025871][ T4319] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  654.227714][ T4319] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  654.291230][ T4319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  654.325944][ T4319] usb 1-1: config 0 has no interface number 0
[  655.116201][ T4319] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  655.129082][ T4319] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  655.142699][ T4319] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  655.154606][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.175700][ T4319] usb 1-1: config 0 descriptor??
[  655.188376][ T4319] ldusb 1-1:0.55: Interrupt in endpoint not found
[  655.638239][ T4319] usb 1-1: USB disconnect, device number 7
[  656.598373][ T9644] binder: 9642:9644 ioctl c0306201 0 returned -14
[  662.141949][ T9691] binder: 9689:9691 ioctl c0306201 0 returned -14
[  662.786671][ T9693] serio: Serial port ptm0
[  663.848955][ T9700] netlink: 'syz.3.1500': attribute type 10 has an invalid length.
[  666.401380][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1502'.
[  670.091836][ T9739] binder: 9736:9739 ioctl c0306201 2000000004c0 returned -11
[  671.271779][ T7182] kernel write not supported for file /sequencer2 (pid: 7182 comm: kworker/0:10)
[  676.861229][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'.
[  677.567458][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  677.612013][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  677.629219][ T9791] binder: 9785:9791 ioctl c0306201 2000000004c0 returned -11
[  677.645468][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  677.679323][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  677.708254][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  677.737873][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  679.806092][ T4290] Bluetooth: hci5: command 0x0409 tx timeout
[  680.225720][ T5298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.389146][ T5298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  681.957030][ T4290] Bluetooth: hci5: command 0x041b tx timeout
[  682.111426][ T5298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.323886][ T5298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  682.925605][ T5298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.150547][ T5298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  683.641456][ T9840] binder: 9838:9840 ioctl c0306201 2000000004c0 returned -11
[  683.965872][ T4290] Bluetooth: hci5: command 0x040f tx timeout
[  685.727779][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  685.741401][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  685.928395][ T5298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.055942][ T4290] Bluetooth: hci5: command 0x0419 tx timeout
[  686.162477][ T5298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  688.823723][ T9784] chnl_net:caif_netlink_parms(): no params data found
[  688.845669][ T5298] tipc: Left network mode
[  691.139647][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.208888][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.244840][ T9784] device bridge_slave_0 entered promiscuous mode
[  691.536510][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.575073][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.592461][ T9784] device bridge_slave_1 entered promiscuous mode
[  691.742915][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  691.756264][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  691.832805][ T9784] team0: Port device team_slave_0 added
[  691.942160][ T9784] team0: Port device team_slave_1 added
[  692.114828][ T9899] binder: 9896:9899 ioctl c0306201 2000000004c0 returned -11
[  694.286165][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  694.293165][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.346308][ T5298] IPVS: stopping backup sync thread 6801 ...
[  694.375876][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.392613][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  694.399853][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.434736][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.738474][ T9784] device hsr_slave_0 entered promiscuous mode
[  695.776599][ T9784] device hsr_slave_1 entered promiscuous mode
[  695.833568][ T9784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  696.203999][ T9784] Cannot create hsr debugfs directory
[  696.418311][ T9922] read descriptors
[  697.734322][ T9934] jffs2: notice: (9934) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  698.670727][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'.
[  698.715949][ T9917] netlink: 'syz.0.1549': attribute type 5 has an invalid length.
[  698.723766][ T9917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1549'.
[  698.892841][ T4276] ffs_data_put(): freeing
[  699.249729][ T9951] binder: 9948:9951 ioctl c0306201 2000000004c0 returned -11
[  701.400350][ T5298] device hsr_slave_0 left promiscuous mode
[  701.506562][ T5298] device hsr_slave_1 left promiscuous mode
[  702.269947][ T5298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  702.804082][ T5298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  703.052690][ T5298] device bridge_slave_1 left promiscuous mode
[  703.073756][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.216721][ T5298] device bridge_slave_0 left promiscuous mode
[  703.224332][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.600061][ T9996] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1569'.
[  703.603333][ T5298] device veth1_macvtap left promiscuous mode
[  703.993242][ T5298] device veth0_macvtap left promiscuous mode
[  704.178451][ T5298] device veth1_vlan left promiscuous mode
[  704.190522][ T5298] device veth0_vlan left promiscuous mode
[  706.357381][T10014] binder: 10011:10014 ioctl c0306201 2000000004c0 returned -11
[  708.945916][ T4325] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  709.850414][ T4325] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  709.859904][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.868841][ T4325] usb 2-1: Product: syz
[  709.876086][ T4325] usb 2-1: Manufacturer: syz
[  709.882546][ T4325] usb 2-1: SerialNumber: syz
[  709.906879][ T4325] usb 2-1: config 0 descriptor??
[  710.133676][ T4325] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  712.291647][ T4325] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  712.318304][ T4325] usb 2-1: USB disconnect, device number 15
[  712.484771][ T5298] team0 (unregistering): Port device team_slave_1 removed
[  712.549042][ T5298] team0 (unregistering): Port device team_slave_0 removed
[  712.631905][ T5298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  712.704012][ T5298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.483278][ T5298] bond0 (unregistering): Released all slaves
[  713.755655][ T9784] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  713.778374][ T9784] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  713.802982][ T9784] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  713.827878][ T9784] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  714.200322][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'.
[  714.259509][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.798933][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  714.862369][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  714.984724][ T9784] 8021q: adding VLAN 0 to HW filter on device team0
[  715.078317][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  715.123950][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  715.143046][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.150803][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.454771][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  715.648596][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  715.828868][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  716.031988][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.039223][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.191168][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1587'.
[  717.609295][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  718.654498][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  718.713570][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  718.734688][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  718.752666][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  718.763523][T10083] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1592'.
[  718.979522][T10077] netlink: 'syz.4.1587': attribute type 10 has an invalid length.
[  720.986916][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  721.049403][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  721.196438][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  721.300233][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  721.671876][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  721.721573][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  721.777574][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  722.182956][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'.
[  724.557035][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  724.581549][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  724.616422][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  726.310273][T10159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1608'.
[  726.813316][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'.
[  730.434951][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  730.450978][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  732.289396][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  732.452791][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  732.495895][ T9784] device veth0_vlan entered promiscuous mode
[  732.510510][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  732.551963][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  732.591962][ T9784] device veth1_vlan entered promiscuous mode
[  732.711172][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1620'.
[  733.490700][T10221] tmpfs: Unknown parameter 'usrquota'
[  733.532083][T10224] netlink: 'syz.4.1621': attribute type 39 has an invalid length.
[  733.659949][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  733.683394][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  733.759154][T10227] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1622'.
[  733.773043][ T9784] device veth0_macvtap entered promiscuous mode
[  733.847404][ T9784] device veth1_macvtap entered promiscuous mode
[  733.933773][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  733.951043][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  733.971364][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  733.979992][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  733.996877][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  734.014871][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  734.039873][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  734.056262][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  734.083661][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.116317][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  734.125651][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  734.140991][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  734.389319][T10236] ima: Unable to open file: /e (-2)
[  734.925856][T10230] ima: policy update failed
[  734.937303][   T26] audit: type=1802 audit(1786486586.111:23): pid=10230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1623" res=0 errno=0
[  734.962370][ T9784] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  735.003195][ T9784] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  735.082312][ T9784] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  735.094360][ T9784] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  735.252963][ T8573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.262588][ T8573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  735.289811][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  735.357113][ T8573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.400378][ T8573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  735.433932][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  736.097074][ T7182] libceph: connect (1)[c::]:6789 error -101
[  736.114966][ T7182] libceph: mon0 (1)[c::]:6789 connect error
[  736.160778][ T7182] libceph: connect (1)[c::]:6789 error -101
[  736.192166][ T7182] libceph: mon0 (1)[c::]:6789 connect error
[  736.497475][ T4278] libceph: connect (1)[c::]:6789 error -101
[  736.503986][ T4278] libceph: mon0 (1)[c::]:6789 connect error
[  736.516053][ T4358] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  736.733297][ T4358] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  736.776930][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.964708][T10242] ceph: No mds server is up or the cluster is laggy
[  736.997051][ T4358] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  737.050735][ T4278] libceph: connect (1)[c::]:6789 error -101
[  737.075700][ T4278] libceph: mon0 (1)[c::]:6789 connect error
[  738.642496][ T7182] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  738.846160][ T7182] usb 6-1: Using ep0 maxpacket: 16
[  738.857720][ T7182] usb 6-1: config 0 interface 0 altsetting 239 endpoint 0x81 has an invalid bInterval 184, changing to 11
[  738.950211][T10294] ima: Unable to open file: /e (-2)
[  739.048715][ T7182] usb 6-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  739.342508][ T7182] usb 6-1: config 0 interface 0 has no altsetting 0
[  739.433014][ T7182] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  739.554193][ T7182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.592254][T10285] ima: policy update failed
[  739.597890][   T26] audit: type=1802 audit(1786486590.771:24): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1634" res=0 errno=0
[  739.644386][ T7182] usb 6-1: config 0 descriptor??
[  739.788019][ T4330] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  739.884252][ T7182] usbhid 6-1:0.0: can't add hid device: -71
[  739.906085][ T7182] usbhid: probe of 6-1:0.0 failed with error -71
[  739.945715][ T7182] usb 6-1: USB disconnect, device number 2
[  739.997346][ T4330] usb 2-1: unable to get BOS descriptor or descriptor too short
[  740.026711][ T4330] usb 2-1: not running at top speed; connect to a high speed hub
[  741.189337][ T4330] usb 2-1: config 200 has an invalid interface number: 97 but max is 0
[  741.197801][ T4330] usb 2-1: config 200 has no interface number 0
[  741.204197][ T4330] usb 2-1: config 200 interface 97 has no altsetting 0
[  741.222654][ T4330] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[  741.264719][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.304136][ T4330] usb 2-1: Product: syz
[  741.315645][ T4330] usb 2-1: Manufacturer: syz
[  741.326384][ T4330] usb 2-1: SerialNumber: syz
[  741.597731][ T4330] go7007: probe of 2-1:200.97 failed with error -12
[  741.632808][ T4330] usb 2-1: USB disconnect, device number 16
[  742.815874][ T4320] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  743.184588][ T9185] usb 4-1: USB disconnect, device number 7
[  743.195278][ T4320] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  743.222576][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.465561][ T4320] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  744.083682][T10357] ima: Unable to open file: /e (-2)
[  744.777888][T10352] ima: policy update failed
[  744.791976][   T26] audit: type=1802 audit(1786486595.961:25): pid=10352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1648" res=0 errno=0
[  746.955604][T10368] XFS (mtdblock0): Invalid superblock magic number
[  747.167911][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.174427][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  748.800587][ T4358] kernel write not supported for file /sequencer2 (pid: 4358 comm: kworker/0:6)
[  749.009815][ T4330] usb 1-1: USB disconnect, device number 8
[  750.437820][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'.
[  751.331360][T10413] netlink: 'syz.1.1662': attribute type 10 has an invalid length.
[  753.657865][T10442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1669'.
[  756.283886][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1675'.
[  757.297761][T10483] netlink: 'syz.1.1676': attribute type 10 has an invalid length.
[  759.963196][T10501] XFS (mtdblock0): Invalid superblock magic number
[  760.015910][ T4318] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  760.225231][ T4318] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  760.281633][ T4318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.664179][ T4318] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[  763.755203][    C0] ------------[ cut here ]------------
[  763.761087][    C0] WARNING: CPU: 0 PID: 10540 at net/mac80211/tx.c:4961 __ieee80211_beacon_get+0x1141/0x1520
[  763.771452][    C0] Modules linked in:
[  763.775413][    C0] CPU: 0 PID: 10540 Comm: syz.1.1688 Not tainted syzkaller #0
[  763.783000][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  763.793230][    C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520
[  763.800079][    C0] Code: f7 4c 89 ef e8 80 75 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 db d0 ce f7 0f 0b e9 61 f8 ff ff e8 cf d0 ce f7 <0f> 0b e9 85 fb ff ff e8 c3 d0 ce f7 48 c7 c7 a0 fc fb 8d 4c 89 e6
[  763.819831][    C0] RSP: 0000:ffffc90000007a48 EFLAGS: 00010246
[  763.826017][    C0] RAX: ffffffff89b35d51 RBX: dffffc0000000000 RCX: ffff88807d5d3c00
[  763.834702][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  763.842700][    C0] RBP: 0000000000000000 R08: ffff88807d5d3c00 R09: 0000000000000003
[  763.850821][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888028c02228
[  763.858999][    C0] R13: ffff888057162024 R14: ffff888028c02760 R15: ffff888057162000
[  763.867016][    C0] FS:  00007f4d056396c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  763.875975][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  763.882580][    C0] CR2: fffffffffffffe70 CR3: 0000000077983000 CR4: 00000000003506f0
[  763.890591][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  763.898593][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  763.906601][    C0] Call Trace:
[  763.909955][    C0]  <IRQ>
[  763.912841][    C0]  ? __ieee80211_beacon_get+0x36/0x1520
[  763.918472][    C0]  ieee80211_beacon_get_tim+0x63/0x4e0
[  763.923948][    C0]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  763.929573][    C0]  __iterate_interfaces+0x225/0x4c0
[  763.934785][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  763.941049][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  763.948417][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  763.954708][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  763.961810][    C0]  mac80211_hwsim_beacon+0xb7/0x1b0
[  763.967151][    C0]  __hrtimer_run_queues+0x522/0xc90
[  763.972441][    C0]  ? hw_scan_work+0xf00/0xf00
[  763.977179][    C0]  ? hrtimer_interrupt+0x980/0x980
[  763.982321][    C0]  hrtimer_run_softirq+0x173/0x290
[  763.987501][    C0]  handle_softirqs+0x291/0x910
[  763.992482][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  763.997387][    C0]  ? do_softirq+0x210/0x210
[  764.001907][    C0]  ? hrtimer_interrupt+0x775/0x980
[  764.007066][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  764.012352][    C0]  __irq_exit_rcu+0x13b/0x230
[  764.017150][    C0]  ? irq_exit_rcu+0x20/0x20
[  764.021671][    C0]  irq_exit_rcu+0x5/0x20
[  764.025948][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  764.031614][    C0]  </IRQ>
[  764.034573][    C0]  <TASK>
[  764.037586][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  764.043662][    C0] RIP: 0010:lock_release+0x8f/0x920
[  764.048909][    C0] Code: f1 f1 f8 f2 f2 f2 4b 89 04 2f 43 c7 44 2f 08 f8 f3 f3 f3 0f 1f 44 00 00 65 8b 1d 6c 9e 9d 7e 48 c7 c0 f0 0c 21 8e 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 c7 05 00 00 3b 1d 9e 91 bc 0c 0f 83 3a
[  764.068903][    C0] RSP: 0000:ffffc900036f67c0 EFLAGS: 00000a02
[  764.075086][    C0] RAX: 1ffffffff1c4219e RBX: 0000000000000000 RCX: 0000000000000000
[  764.083114][    C0] RDX: dffffc0000000000 RSI: ffffffff81c807ea RDI: ffff8880b8e41558
[  764.091160][    C0] RBP: ffffc900036f68d0 R08: ffffea0001304337 R09: 1ffffd4000260866
[  764.099201][    C0] R10: dffffc0000000000 R11: fffff94000260867 R12: fffffffffffffff5
[  764.107223][    C0] R13: dffffc0000000000 R14: ffff8880b8e41540 R15: 1ffff920006ded04
[  764.115226][    C0]  ? get_page_from_freelist+0x73a/0x2180
[  764.120989][    C0]  ? __rmqueue_pcplist+0x105d/0x13b0
[  764.126404][    C0]  ? get_page_from_freelist+0x73a/0x2180
[  764.132075][    C0]  ? __lock_acquire+0x7c40/0x7c40
[  764.137144][    C0]  ? do_raw_spin_trylock+0xae/0x190
[  764.142372][    C0]  _raw_spin_unlock+0x12/0x40
[  764.147106][    C0]  get_page_from_freelist+0x73a/0x2180
[  764.153032][    C0]  ? __alloc_pages+0x130/0x4f0
[  764.157959][    C0]  __alloc_pages+0x1ec/0x4f0
[  764.162572][    C0]  ? zone_statistics+0x170/0x170
[  764.167544][    C0]  ? __lock_acquire+0x1465/0x7c40
[  764.172583][    C0]  ? verify_lock_unused+0x140/0x140
[  764.177823][    C0]  __folio_alloc+0xe/0x30
[  764.182167][    C0]  vma_alloc_folio+0x499/0x900
[  764.187045][    C0]  ? mpol_shared_policy_lookup+0x147/0x1e0
[  764.193142][    C0]  shmem_alloc_and_acct_folio+0x463/0xbd0
[  764.198992][    C0]  ? shmem_replace_folio+0xdc0/0xdc0
[  764.204323][    C0]  ? xas_load+0x127/0x140
[  764.208710][    C0]  ? __filemap_get_folio+0x10f/0xde0
[  764.214072][    C0]  ? __filemap_get_folio+0xb43/0xde0
[  764.219662][    C0]  ? __filemap_get_folio+0x10f/0xde0
[  764.224960][    C0]  ? page_cache_prev_miss+0x380/0x380
[  764.230374][    C0]  ? mark_lock+0x94/0x320
[  764.234720][    C0]  shmem_get_folio_gfp+0x1439/0x35e0
[  764.240058][    C0]  shmem_write_begin+0xee/0x3f0
[  764.245041][    C0]  generic_perform_write+0x2fa/0x5c0
[  764.250394][    C0]  ? generic_file_direct_write+0x330/0x330
[  764.256265][    C0]  ? __file_remove_privs+0x5f0/0x5f0
[  764.261622][    C0]  ? rwsem_write_trylock+0x135/0x1c0
[  764.266944][    C0]  ? clear_nonspinnable+0x60/0x60
[  764.271994][    C0]  ? generic_write_checks_count+0x363/0x440
[  764.278026][    C0]  __generic_file_write_iter+0x148/0x2a0
[  764.283680][    C0]  generic_file_write_iter+0xab/0x2e0
[  764.289086][    C0]  __kernel_write_iter+0x298/0x690
[  764.294370][    C0]  ? vfs_read+0x960/0x960
[  764.298757][    C0]  ? _raw_spin_unlock+0x24/0x40
[  764.303626][    C0]  ? generic_file_llseek_size+0x344/0x390
[  764.309413][    C0]  ? iov_iter_bvec+0x4a/0x1f0
[  764.314214][    C0]  dump_user_range+0x40a/0x840
[  764.319079][    C0]  ? dump_skip+0x40/0x40
[  764.323426][    C0]  ? dump_emit+0x74/0xe0
[  764.327748][    C0]  ? dump_emit+0xa2/0xe0
[  764.332016][    C0]  ? elf_core_dump+0x2aa9/0x3630
[  764.337270][    C0]  elf_core_dump+0x30ca/0x3630
[  764.342069][    C0]  ? load_elf_binary+0x2820/0x2820
[  764.347219][    C0]  ? dump_vma_snapshot+0xaea/0xe40
[  764.352349][    C0]  ? verify_lock_unused+0x140/0x140
[  764.357598][    C0]  ? __lock_acquire+0x7c40/0x7c40
[  764.362666][    C0]  ? mas_next_entry+0xe03/0xe90
[  764.367621][    C0]  ? rcu_read_lock_any_held+0xb0/0x130
[  764.373175][    C0]  ? 0xffffffffff600000
[  764.377375][    C0]  ? getname_kernel+0x142/0x2f0
[  764.382363][    C0]  do_coredump+0x16c1/0x2480
[  764.387018][    C0]  ? nfs_stat_to_errno+0x170/0x170
[  764.392174][    C0]  ? lock_chain_count+0x20/0x20
[  764.397079][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  764.402299][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  764.407563][    C0]  get_signal+0x1093/0x1340
[  764.412108][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  764.418148][    C0]  arch_do_signal_or_restart+0xc4/0x1310
[  764.423941][    C0]  ? __send_signal_locked+0xb38/0xde0
[  764.429476][    C0]  ? get_sigframe_size+0x10/0x10
[  764.434447][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  764.440503][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[  764.446073][    C0]  exit_to_user_mode_loop+0x70/0x110
[  764.451382][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  764.456982][    C0]  irqentry_exit_to_user_mode+0x5/0x30
[  764.462465][    C0]  exc_page_fault+0x88/0x100
[  764.467091][    C0]  asm_exc_page_fault+0x22/0x30
[  764.471959][    C0] RIP: 0033:0x7f4d0479e0e1
[  764.476403][    C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  764.496065][    C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  764.502161][    C0] RAX: 0000000000000000 RBX: 00007f4d04a26090 RCX: 00007f4d0479e0d9
[  764.510163][    C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  764.518181][    C0] RBP: 00007f4d04835024 R08: 0000000000000000 R09: 0000000000000000
[  764.526196][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  764.534186][    C0] R13: 00007f4d04a26128 R14: 00007f4d04a26090 R15: 00007ffc5bd64568
[  764.542209][    C0]  </TASK>
[  764.545252][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  764.552544][    C0] CPU: 0 PID: 10540 Comm: syz.1.1688 Not tainted syzkaller #0
[  764.560017][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  764.570518][    C0] Call Trace:
[  764.573805][    C0]  <IRQ>
[  764.576658][    C0]  dump_stack_lvl+0x188/0x24e
[  764.581398][    C0]  ? memcpy+0x3c/0x60
[  764.585442][    C0]  ? show_regs_print_info+0x12/0x12
[  764.590653][    C0]  ? load_image+0x410/0x410
[  764.595188][    C0]  panic+0x2d3/0x710
[  764.599097][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  764.603612][    C0]  __warn+0x2f8/0x4f0
[  764.607596][    C0]  ? __ieee80211_beacon_get+0x1141/0x1520
[  764.613347][    C0]  ? __ieee80211_beacon_get+0x1141/0x1520
[  764.619073][    C0]  report_bug+0x2ba/0x4f0
[  764.623418][    C0]  ? __ieee80211_beacon_get+0x1141/0x1520
[  764.629148][    C0]  handle_bug+0x3a/0x70
[  764.633315][    C0]  exc_invalid_op+0x16/0x40
[  764.637845][    C0]  asm_exc_invalid_op+0x16/0x20
[  764.642717][    C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520
[  764.649058][    C0] Code: f7 4c 89 ef e8 80 75 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 db d0 ce f7 0f 0b e9 61 f8 ff ff e8 cf d0 ce f7 <0f> 0b e9 85 fb ff ff e8 c3 d0 ce f7 48 c7 c7 a0 fc fb 8d 4c 89 e6
[  764.668684][    C0] RSP: 0000:ffffc90000007a48 EFLAGS: 00010246
[  764.674771][    C0] RAX: ffffffff89b35d51 RBX: dffffc0000000000 RCX: ffff88807d5d3c00
[  764.682759][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  764.690745][    C0] RBP: 0000000000000000 R08: ffff88807d5d3c00 R09: 0000000000000003
[  764.698732][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888028c02228
[  764.706726][    C0] R13: ffff888057162024 R14: ffff888028c02760 R15: ffff888057162000
[  764.714733][    C0]  ? __ieee80211_beacon_get+0x1141/0x1520
[  764.720480][    C0]  ? __ieee80211_beacon_get+0x1141/0x1520
[  764.726212][    C0]  ? __ieee80211_beacon_get+0x36/0x1520
[  764.731778][    C0]  ieee80211_beacon_get_tim+0x63/0x4e0
[  764.737250][    C0]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  764.742823][    C0]  __iterate_interfaces+0x225/0x4c0
[  764.748049][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  764.754297][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  764.761513][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  764.767773][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  764.774822][    C0]  mac80211_hwsim_beacon+0xb7/0x1b0
[  764.780047][    C0]  __hrtimer_run_queues+0x522/0xc90
[  764.785263][    C0]  ? hw_scan_work+0xf00/0xf00
[  764.789963][    C0]  ? hrtimer_interrupt+0x980/0x980
[  764.795091][    C0]  hrtimer_run_softirq+0x173/0x290
[  764.800223][    C0]  handle_softirqs+0x291/0x910
[  764.804995][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  764.809856][    C0]  ? do_softirq+0x210/0x210
[  764.814366][    C0]  ? hrtimer_interrupt+0x775/0x980
[  764.819582][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  764.824791][    C0]  __irq_exit_rcu+0x13b/0x230
[  764.829475][    C0]  ? irq_exit_rcu+0x20/0x20
[  764.834008][    C0]  irq_exit_rcu+0x5/0x20
[  764.838268][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  764.843906][    C0]  </IRQ>
[  764.846865][    C0]  <TASK>
[  764.849802][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  764.855812][    C0] RIP: 0010:lock_release+0x8f/0x920
[  764.861033][    C0] Code: f1 f1 f8 f2 f2 f2 4b 89 04 2f 43 c7 44 2f 08 f8 f3 f3 f3 0f 1f 44 00 00 65 8b 1d 6c 9e 9d 7e 48 c7 c0 f0 0c 21 8e 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 c7 05 00 00 3b 1d 9e 91 bc 0c 0f 83 3a
[  764.880656][    C0] RSP: 0000:ffffc900036f67c0 EFLAGS: 00000a02
[  764.886747][    C0] RAX: 1ffffffff1c4219e RBX: 0000000000000000 RCX: 0000000000000000
[  764.894745][    C0] RDX: dffffc0000000000 RSI: ffffffff81c807ea RDI: ffff8880b8e41558
[  764.902747][    C0] RBP: ffffc900036f68d0 R08: ffffea0001304337 R09: 1ffffd4000260866
[  764.910731][    C0] R10: dffffc0000000000 R11: fffff94000260867 R12: fffffffffffffff5
[  764.918713][    C0] R13: dffffc0000000000 R14: ffff8880b8e41540 R15: 1ffff920006ded04
[  764.926700][    C0]  ? get_page_from_freelist+0x73a/0x2180
[  764.932368][    C0]  ? __rmqueue_pcplist+0x105d/0x13b0
[  764.937668][    C0]  ? get_page_from_freelist+0x73a/0x2180
[  764.943318][    C0]  ? __lock_acquire+0x7c40/0x7c40
[  764.948389][    C0]  ? do_raw_spin_trylock+0xae/0x190
[  764.953616][    C0]  _raw_spin_unlock+0x12/0x40
[  764.958331][    C0]  get_page_from_freelist+0x73a/0x2180
[  764.963814][    C0]  ? __alloc_pages+0x130/0x4f0
[  764.968642][    C0]  __alloc_pages+0x1ec/0x4f0
[  764.973261][    C0]  ? zone_statistics+0x170/0x170
[  764.978229][    C0]  ? __lock_acquire+0x1465/0x7c40
[  764.983290][    C0]  ? verify_lock_unused+0x140/0x140
[  764.988661][    C0]  __folio_alloc+0xe/0x30
[  764.993007][    C0]  vma_alloc_folio+0x499/0x900
[  764.997787][    C0]  ? mpol_shared_policy_lookup+0x147/0x1e0
[  765.003616][    C0]  shmem_alloc_and_acct_folio+0x463/0xbd0
[  765.009356][    C0]  ? shmem_replace_folio+0xdc0/0xdc0
[  765.014667][    C0]  ? xas_load+0x127/0x140
[  765.019023][    C0]  ? __filemap_get_folio+0x10f/0xde0
[  765.024336][    C0]  ? __filemap_get_folio+0xb43/0xde0
[  765.029662][    C0]  ? __filemap_get_folio+0x10f/0xde0
[  765.034983][    C0]  ? page_cache_prev_miss+0x380/0x380
[  765.040375][    C0]  ? mark_lock+0x94/0x320
[  765.044736][    C0]  shmem_get_folio_gfp+0x1439/0x35e0
[  765.050071][    C0]  shmem_write_begin+0xee/0x3f0
[  765.054952][    C0]  generic_perform_write+0x2fa/0x5c0
[  765.060265][    C0]  ? generic_file_direct_write+0x330/0x330
[  765.066120][    C0]  ? __file_remove_privs+0x5f0/0x5f0
[  765.071431][    C0]  ? rwsem_write_trylock+0x135/0x1c0
[  765.076733][    C0]  ? clear_nonspinnable+0x60/0x60
[  765.081786][    C0]  ? generic_write_checks_count+0x363/0x440
[  765.087707][    C0]  __generic_file_write_iter+0x148/0x2a0
[  765.093366][    C0]  generic_file_write_iter+0xab/0x2e0
[  765.098771][    C0]  __kernel_write_iter+0x298/0x690
[  765.103907][    C0]  ? vfs_read+0x960/0x960
[  765.108259][    C0]  ? _raw_spin_unlock+0x24/0x40
[  765.113141][    C0]  ? generic_file_llseek_size+0x344/0x390
[  765.118880][    C0]  ? iov_iter_bvec+0x4a/0x1f0
[  765.123571][    C0]  dump_user_range+0x40a/0x840
[  765.128366][    C0]  ? dump_skip+0x40/0x40
[  765.132618][    C0]  ? dump_emit+0x74/0xe0
[  765.136882][    C0]  ? dump_emit+0xa2/0xe0
[  765.141144][    C0]  ? elf_core_dump+0x2aa9/0x3630
[  765.146091][    C0]  elf_core_dump+0x30ca/0x3630
[  765.150879][    C0]  ? load_elf_binary+0x2820/0x2820
[  765.156004][    C0]  ? dump_vma_snapshot+0xaea/0xe40
[  765.161131][    C0]  ? verify_lock_unused+0x140/0x140
[  765.166368][    C0]  ? __lock_acquire+0x7c40/0x7c40
[  765.171415][    C0]  ? mas_next_entry+0xe03/0xe90
[  765.176316][    C0]  ? rcu_read_lock_any_held+0xb0/0x130
[  765.181812][    C0]  ? 0xffffffffff600000
[  765.185979][    C0]  ? getname_kernel+0x142/0x2f0
[  765.190847][    C0]  do_coredump+0x16c1/0x2480
[  765.195464][    C0]  ? nfs_stat_to_errno+0x170/0x170
[  765.200603][    C0]  ? lock_chain_count+0x20/0x20
[  765.205486][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  765.210719][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  765.215936][    C0]  get_signal+0x1093/0x1340
[  765.220490][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  765.226513][    C0]  arch_do_signal_or_restart+0xc4/0x1310
[  765.232356][    C0]  ? __send_signal_locked+0xb38/0xde0
[  765.237762][    C0]  ? get_sigframe_size+0x10/0x10
[  765.242715][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  765.248714][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[  765.254468][    C0]  exit_to_user_mode_loop+0x70/0x110
[  765.259767][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  765.265357][    C0]  irqentry_exit_to_user_mode+0x5/0x30
[  765.270827][    C0]  exc_page_fault+0x88/0x100
[  765.275443][    C0]  asm_exc_page_fault+0x22/0x30
[  765.280303][    C0] RIP: 0033:0x7f4d0479e0e1
[  765.284741][    C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  765.304386][    C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  765.310470][    C0] RAX: 0000000000000000 RBX: 00007f4d04a26090 RCX: 00007f4d0479e0d9
[  765.318451][    C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  765.326432][    C0] RBP: 00007f4d04835024 R08: 0000000000000000 R09: 0000000000000000
[  765.334432][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  765.342427][    C0] R13: 00007f4d04a26128 R14: 00007f4d04a26090 R15: 00007ffc5bd64568
[  765.350426][    C0]  </TASK>
[  765.354151][    C0] Kernel Offset: disabled
[  765.358541][    C0] Rebooting in 86400 seconds..