last executing test programs:

25m29.110200954s ago: executing program 32 (id=317):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030020007f03e3f7000000006ee217cb1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00fc0f0001400a0c0c00bdad446ba6bc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af923475135c556a20ff27fff", 0x89}], 0x1}, 0x4004010)

25m20.65560293s ago: executing program 33 (id=337):
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x9d, 0x74, 0xff, 0x10, 0x458, 0x704a, 0x7521, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0xaf5ab7443cfb8f59, 0x7f, "", [{{0x9, 0x4, 0xc8, 0xf6, 0x0, 0x88, 0x26, 0x81}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x50)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x26, "afceeb03dcad0c3d385b9d1d57c3ff1f6ad7d540f84de6306783b897769be692", "b43dac8751f5d8cd78fac9c424effa585240135a695e1e33c9ae64fec6e36adc", "644cbcfec6d34d6142ddfd393b7f1d0c23b2e21ed0717f6203058a44a427fb1b", "9313c981621bec72e628cd3c5b21d90945db5c38ca9df508af689aee1a9775bb", "3eb56c5371594cdfa4f964ca8a2044537b971d33ac7c8da8c4aa6adf90eeeea0", "8b151f0600000000000000c3", 0x8, 0x7, 0x2, 0x80000001, 0x3}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="d850000044000701fefffffffcdbdf25037c000004004580c05001"], 0x50d8}}, 0xc000)

24m44.805374025s ago: executing program 4 (id=387):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
set_mempolicy(0x2, &(0x7f0000000000)=0x8001, 0x7)
bind(r0, &(0x7f0000000100)=@generic={0x8, "0000ffff01002000"}, 0xc)

24m44.491990046s ago: executing program 4 (id=389):
syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000002100050100000000000000000200000000400000010001000c0014000bb5f912b64910ef"], 0x28}}, 0x0)
r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x180000)
accept$phonet_pipe(r2, 0x0, &(0x7f00000000c0))
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x3, 0xf8, 0x5})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000480)={0x0, "bdc5495897f7e0f71ee6e4714a98df1b"})

24m41.418620162s ago: executing program 4 (id=392):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c000000", @ANYRESOCT, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e2040000800010001000000140002", @ANYRESOCT=r4, @ANYRESHEX=r0], 0x8c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4004)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)

24m39.33442195s ago: executing program 4 (id=393):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r0, &(0x7f0000000680)='enable_event:s', 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000600000000008100"/28], 0x1c}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
r3 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0)
pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x5)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
unshare(0x22020600)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
write$binfmt_register(r2, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xcf80000000000000, 0x3a, '\x1c', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x4f]}, 0x2c)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(r6, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d09"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050)
socket$alg(0x26, 0x5, 0x0)

24m37.90134583s ago: executing program 4 (id=396):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
timerfd_create(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fchdir(r5)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x7)
mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000300)='localhost / 2147483647 0 0 0 0\n\x00', 0x1f)
write(r7, &(0x7f0000000340)='localhost / 2147483647 1 0 0\n\x00', 0x1d)

24m36.238460035s ago: executing program 34 (id=397):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)=ANY=[@ANYBLOB='transfd,rfdno=\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

24m36.216014409s ago: executing program 4 (id=400):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)=ANY=[@ANYBLOB='transfd,rfdno=\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20804}, 0x44800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

24m35.323666347s ago: executing program 35 (id=400):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)=ANY=[@ANYBLOB='transfd,rfdno=\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20804}, 0x44800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

24m34.065254078s ago: executing program 3 (id=401):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r2 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0)
ioctl$I2C_PEC(r2, 0x708, 0x6)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x1, 0xc8, 0xa, &(0x7f00000000c0)={0x1, "fd7b44512b7e1b0420ec2a3ba531dd77e7ffffff030015120000000100"}}) (async, rerun: 32)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async, rerun: 32)
r3 = eventfd2(0x7, 0x801)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r3}) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x2, 0x3}, 0x6) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) (async)
r4 = getpid()
modify_ldt$read(0x0, &(0x7f00000005c0)=""/4096, 0x1000) (async, rerun: 64)
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = syz_open_dev$MSR(&(0x7f0000000180), 0xfff, 0x0)
read$msr(r7, &(0x7f00000001c0)=""/38, 0x26) (async)
connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8)
socket$inet6(0xa, 0x3, 0x7) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async)
mlockall(0x7)
io_setup(0xe70, &(0x7f0000000500))
close_range(r0, 0xffffffffffffffff, 0x0)

24m33.547315783s ago: executing program 3 (id=402):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c000000b1d45fef42152d919e1248b5897942aad3641befec5f2c376391a79d03c74c8ba553c2d3b27678782d6a4a1b1ab650e420f6430b01f5030fbd907ca14369fb13a22f10fcd1a1ee42902a9fed2f4d16c013982c9c4b3655b977be09738330854ce283c3a3747b7bf1d4aac950e3753eccdb65ace4c20f96d7b962abbe830bbcda96046ee116e49f64cef62342441e3a831dadf36ac671c5", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf255100000008000300", @ANYRESHEX, @ANYBLOB="0c009980fe00080000008c2300debe8ffd2ae9a6518b497600ffff000000000000000006000000000000000000ff"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="420f030000002002ce"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x5, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, &(0x7f0000000180)={0x0, &(0x7f0000000100)="1f1f4405e49f178a9afdef8028c3f2a79d849986f28a6d6599e3ad5fa485b202481ddb2d327fd8477015a5efff3da4543ba4efdeb4752610a860ccace4d27ad6bf6df96e93189e75e9c65dc7a3d35eb19ea1ed7f9580136231e18a2c19fa74a71b725fb4794bbbe2798efb6741c589d1afd3", 0x72})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
unshare(0x2e000480)
fcntl$setpipe(r5, 0x407, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x41, 0x3}, 0x4)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x100, 0xffffffff}}, 0x50)
r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r8, 0x5452, &(0x7f00000001c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})

24m31.663777417s ago: executing program 3 (id=403):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0)
pwrite64(r0, 0x0, 0x0, 0x1ff)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
dup3(r0, r1, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000402404345500010000000109021900010100e00009040000010900000007058103"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

24m29.599995117s ago: executing program 3 (id=404):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r0, &(0x7f0000000680)='enable_event:s', 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000600000000008100"/28], 0x1c}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
r3 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0)
pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x5)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
unshare(0x22020600)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
write$binfmt_register(r2, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xcf80000000000000, 0x3a, '\x1c', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x4f]}, 0x2c)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(r6, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d09"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050)
socket$alg(0x26, 0x5, 0x0)

24m29.134483854s ago: executing program 3 (id=405):
mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', 0x0, 0x1800, &(0x7f0000000200)={[{@inode32}]})

24m26.747335296s ago: executing program 3 (id=407):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
timerfd_create(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fchdir(r5)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x7)
mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000300)='localhost / 2147483647 0 0 0 0\n\x00', 0x1f)
write(r7, &(0x7f0000000340)='localhost / 2147483647 1 0 0\n\x00', 0x1d)

24m26.373889689s ago: executing program 36 (id=407):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
timerfd_create(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fchdir(r5)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x7)
mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000300)='localhost / 2147483647 0 0 0 0\n\x00', 0x1f)
write(r7, &(0x7f0000000340)='localhost / 2147483647 1 0 0\n\x00', 0x1d)

22m3.410433542s ago: executing program 9 (id=512):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
timerfd_create(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fchdir(r5)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x7)
mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)

22m1.073865284s ago: executing program 9 (id=513):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

21m59.313971341s ago: executing program 9 (id=518):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
timerfd_create(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fchdir(r5)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x7)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)

21m57.214486636s ago: executing program 9 (id=520):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10600, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl(r0, 0x8915, &(0x7f0000000180)='wpan0')

21m56.319451244s ago: executing program 5 (id=523):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
timerfd_create(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fchdir(r5)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x7)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000300)='localhost / 2147483647 0 0 0 0\n\x00', 0x1f)

21m52.604461092s ago: executing program 5 (id=524):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)=ANY=[@ANYBLOB='transfd,rfdno=\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

21m51.10750388s ago: executing program 9 (id=529):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
timerfd_create(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fchdir(r5)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x7)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)

21m47.219432157s ago: executing program 9 (id=531):
unshare(0x10e00)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000040))
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000000)=@arm64)
r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
unshare(0x44000400)
syz_emit_ethernet(0x85, &(0x7f0000000180)={@empty, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x2}}, {@llc={0x4, {@snap={0xa8, 0xaa, "1d", "f1163a", 0x88ca, "8863d22c241cc04940230e60ec308437c7ec21d30efcf91512f0a9167217ae84814934843924e12598386e3eb5fdb1bda100721a752bcff4697e8f92560116145f0f55ce5bc390328bbdb0623569e173cff948c5ead4f19c2982b9d2b96cf0af66d5410f01ac9e"}}}}}, &(0x7f0000000240)={0x1, 0x2, [0x7d9, 0x6a8, 0x715, 0x1b9]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
dup(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010025bd7000f9dbdf2500000000", @ANYRES32=r4, @ANYBLOB="13900000003c000024001a8020000a8014000700fc0000000000000000000000000000010500080000000000cfd62494b9decf1958e15a04d00d004da299fa744fab8e4354c47cfa0052cc25181c065e999c"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x1, 0x2, 0x7fffffff})

21m46.85168887s ago: executing program 5 (id=532):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
timerfd_create(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fchdir(r5)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x7)
mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000300)='localhost / 2147483647 0 0 0 0\n\x00', 0x1f)
write(0xffffffffffffffff, &(0x7f0000000340)='localhost / 2147483647 1 0 0\n\x00', 0x1d)
write(0xffffffffffffffff, &(0x7f0000000380)='localhost / 2147483647 1 0 0 0 0\n\x00', 0x21)

21m44.694481727s ago: executing program 5 (id=533):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='e&my_read_msr1 msr/read_msr', 0x1b)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000b14de04a9bb65b4568f7d2219d4d95b3630aa8ec3cf52c3141562130b2499958a92e397a8540d7a19be5ab1918dc13f1f0eea3e9dafa86b627ab8cdf031f1e0c0ecff5e4c16ef334dd685fae59db2b615a91b96dd22ab4cebb08dee50c757c49562db595ad903c097c"], 0x0)

21m38.395399328s ago: executing program 5 (id=535):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', <r3=>0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x5, [{@local, 0x4}, {@multicast2, 0x3}]}]}}}}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', r3, r1}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
r8 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}})
close_range(r0, 0xffffffffffffffff, 0x0)

21m32.050370388s ago: executing program 37 (id=531):
unshare(0x10e00)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000040))
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000000)=@arm64)
r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
unshare(0x44000400)
syz_emit_ethernet(0x85, &(0x7f0000000180)={@empty, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x2}}, {@llc={0x4, {@snap={0xa8, 0xaa, "1d", "f1163a", 0x88ca, "8863d22c241cc04940230e60ec308437c7ec21d30efcf91512f0a9167217ae84814934843924e12598386e3eb5fdb1bda100721a752bcff4697e8f92560116145f0f55ce5bc390328bbdb0623569e173cff948c5ead4f19c2982b9d2b96cf0af66d5410f01ac9e"}}}}}, &(0x7f0000000240)={0x1, 0x2, [0x7d9, 0x6a8, 0x715, 0x1b9]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
dup(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010025bd7000f9dbdf2500000000", @ANYRES32=r4, @ANYBLOB="13900000003c000024001a8020000a8014000700fc0000000000000000000000000000010500080000000000cfd62494b9decf1958e15a04d00d004da299fa744fab8e4354c47cfa0052cc25181c065e999c"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x1, 0x2, 0x7fffffff})

21m30.953356615s ago: executing program 5 (id=543):
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000200)=0x1, 0x12) (fail_nth: 1)

21m30.157405241s ago: executing program 38 (id=543):
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000200)=0x1, 0x12) (fail_nth: 1)

7m19.651014802s ago: executing program 7 (id=1529):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)

7m7.90406904s ago: executing program 7 (id=1543):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="b7c1a015012f10dcad9c0dea0df944ffff000000000000000055fc7e5fceb51958162fa20100c90e148a0569d50b928ca1f89861b9700de7bc25cc3c7e31064727ea648181f97c7ce5c3909b43eb3beb9d6188c6c245af6b39493f8444224ebcbaa0e5b49c41bbdef7d31301136e0a9822", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300f9da32fbcf0ad8"], 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0xc080)
socket(0x2, 0x3, 0xff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c060)
syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9)

7m4.451010344s ago: executing program 7 (id=1548):
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0xfffff000)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)

7m1.220002461s ago: executing program 7 (id=1554):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080), 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000000100)={0xa, 0x4001, 0xfffe, @loopback, 0x4}, 0x1c) (fail_nth: 1)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00)

7m0.607533261s ago: executing program 7 (id=1556):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
fchdir(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x7)
mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000300)='localhost / 2147483647 0 0 0 0\n\x00', 0x1f)
write(r5, &(0x7f0000000340)='localhost / 2147483647 1 0 0\n\x00', 0x1d)
write(r5, &(0x7f0000000380)='localhost / 2147483647 1 0 0 0 0\n\x00', 0x21)

6m57.080257563s ago: executing program 7 (id=1558):
shutdown(0xffffffffffffffff, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f0000000100)=0x1, 0x3, 0x4, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)

6m39.843362844s ago: executing program 39 (id=1558):
shutdown(0xffffffffffffffff, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f0000000100)=0x1, 0x3, 0x4, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)

4m17.416194278s ago: executing program 1 (id=1754):
socket$inet6(0xa, 0x805, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf03000000000000850000009c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x1ff)
sched_setaffinity(r3, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)

4m9.118913579s ago: executing program 8 (id=1760):
r0 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300), 0x1000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@subj_type={'subj_type', 0x3d, ':'}}]}})
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='dir0\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0)
creat(&(0x7f00000000c0)='dir0/per_cpu/cpu0/trace\x00', 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="d361080010010000957d9d6e8231dcad3ca48626985380d23d9a340008c018000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x4, &(0x7f0000000080)=""/4, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
truncate(&(0x7f00000000c0)='./file0\x00', 0xffffffff7fffffff)
r4 = socket$igmp(0x2, 0x3, 0x2)
pipe2(&(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140))
fcntl$setpipe(r6, 0x407, 0x0)
read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'veth1_vlan\x00', 0x1}, 0x18)
r8 = open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f00000005c0), 0x8)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
poll(&(0x7f0000000000)=[{r9, 0x141}], 0x1, 0x3)
sendmsg$key(r0, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2, 0x18, 0x1, 0x0, 0x14, 0x0, 0x20024, 0x10, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0xfffe, 0x0, 0x0, 0x20004, 0x7, {0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}]}, 0xa0}}, 0x20000000)

4m6.494867935s ago: executing program 1 (id=1763):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30fc3000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0)

4m0.420121036s ago: executing program 8 (id=1766):
shutdown(0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(&(0x7f0000000100)=0x1, 0x3, 0x4, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
close(0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30000000000800034000000007"], 0x28}}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x8}, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x20000400)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

3m58.46900591s ago: executing program 6 (id=1767):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)

3m58.394466517s ago: executing program 1 (id=1768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c000000b1d45fef42152d919e1248b5897942aad3641befec5f2c376391a79d03c74c8ba553c2d3b27678782d6a4a1b1ab650e420f6430b01f5030fbd907ca14369fb13a22f10fcd1a1ee42902a9fed2f4d16c013982c9c4b3655b977be09738330854ce283c3a3747b7bf1d4aac950e3753eccdb65ace4c20f96d7b962abbe830bbcda96046ee116e49f64cef62342441e3a831dadf36ac671c5", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf255100000008000300", @ANYRESHEX, @ANYBLOB="0c009980fe00080000008c2300debe8ffd2ae9a6518b497600ffff000000000000000006000000000000000000ff"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="420f030000002002ce"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x5, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, &(0x7f0000000180)={0x0, &(0x7f0000000100)="1f1f4405e49f178a9afdef8028c3f2a79d849986f28a6d6599e3ad5fa485b202481ddb2d327fd8477015a5efff3da4543ba4efdeb4752610a860ccace4d27ad6bf6df96e93189e75e9c65dc7a3d35eb19ea1ed7f9580136231e18a2c19fa74a71b725fb4794bbbe2798efb6741c589d1afd3", 0x72})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
unshare(0x2e000480)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x41, 0x3}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x100, 0xffffffff}}, 0x50)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})

3m52.223656659s ago: executing program 6 (id=1769):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x13, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x588)
landlock_create_ruleset(0x0, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f00000007c0)={0x2, 0x0, {&(0x7f00000000c0)=""/125, 0x7d, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f00000004c0)=""/195, 0xc3, 0x0, 0x2, 0x3}}, 0x48)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00')
write$FUSE_INTERRUPT(r1, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920e000000000000000000000000000000000000e30117b559beb1e60deeeb0bac0e0e73c3f5024be1d615ee43195ab1e31be1b737e40fb60a517c3c1c8180095edbf16dd0ebc81f7cc6f254a6a8431cb05b6d3a7422cf68ea368ab3b593bd1fb93038b2fed74955658c71463de336bc9d67fb5623bf7767fd8ce4deb284d01db8aa10c736be56577520c18aff162e5d3ec75b95a4e76137fec687e0091f5d55f3631a9c96dacbc8ace916", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000040000000000000000010000850000000f00000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESHEX], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
write$P9_RGETATTR(r3, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0xc00, {0x1, 0x0, 0x5}, 0x58, 0xffffffffffffffff, 0x0, 0x100, 0x4, 0xfffffffffffffffe, 0x2, 0x8c6, 0x540b, 0x8, 0x9, 0xc, 0xf, 0x1, 0x8, 0x1, 0x6, 0x8}}, 0xa0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000005, 0x11, 0xffffffffffffffff, 0x4000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0), 0xfffffffffffffe66)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0)

3m51.568988038s ago: executing program 8 (id=1771):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r0, &(0x7f0000000680)='enable_event:s', 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000600000000008100"/28], 0x1c}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
r3 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0)
pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x5)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x22020600)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d09"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050)
socket$alg(0x26, 0x5, 0x0)

3m50.369339755s ago: executing program 6 (id=1772):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="4006"], 0x0, 0x0, 0x0}, 0x0)

3m48.704766379s ago: executing program 6 (id=1773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, 0xffffffffffffffff, 0x6000}, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
r3 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r7, 0xd)

3m46.769833922s ago: executing program 1 (id=1775):
r0 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300), 0x1000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@subj_type={'subj_type', 0x3d, ':'}}]}})
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='dir0\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0)
creat(&(0x7f00000000c0)='dir0/per_cpu/cpu0/trace\x00', 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="d361080010010000957d9d6e8231dcad3ca48626985380d23d9a340008c018000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x4, &(0x7f0000000080)=""/4, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
truncate(&(0x7f00000000c0)='./file0\x00', 0xffffffff7fffffff)
r4 = socket$igmp(0x2, 0x3, 0x2)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140))
fcntl$setpipe(r5, 0x407, 0x0)
write$FUSE_ENTRY(r5, &(0x7f00000024c0)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x80000000, 0x9, 0x8, 0x0, 0x0, {0x1, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x9, 0x9, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x3, 0x2}}}, 0x90)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'veth1_vlan\x00', 0x1}, 0x18)
r7 = open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f00000005c0), 0x8)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
poll(&(0x7f0000000000)=[{r8, 0x141}], 0x1, 0x3)
sendmsg$key(r0, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2, 0x18, 0x1, 0x0, 0x14, 0x0, 0x20024, 0x10, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0xfffe, 0x0, 0x0, 0x20004, 0x7, {0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}]}, 0xa0}}, 0x20000000)

3m44.343072444s ago: executing program 6 (id=1777):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
syz_ublk_add_dev(r4, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=<r5=>0x0)
syz_ublk_setup_queues(r4, r5, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r0}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r0}}, {0x0, 0x0, <r6=>0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x200004d, 0x6})
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000380)={0x80200, 0x4f, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608})
close_range(r10, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/trace\x00', 0x1, 0x0)
lseek(r6, 0x5, 0x1)
r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$sierra_net(r11, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r14, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x9}}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x56, 0x1}, @union={0x4, 0x4, 0x0, 0x5, 0x1, 0x9, [{0x2, 0x4, 0x4}, {0x8, 0x0, 0x7fffffff}, {0x2, 0x0, 0xc}, {0xc, 0x0, 0x7}]}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x2}, {0x10, 0x3}]}, @func={0xb, 0x0, 0x0, 0xc, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x5a1}}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000004c0)=""/4096, 0xcc, 0x1000, 0x1, 0x0, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/153, 0x99, 0x0, &(0x7f0000000240)=""/206, 0xce}}, 0x10)

3m44.27113586s ago: executing program 1 (id=1778):
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda6d, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000f00)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}})
r5 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1492)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
sendmmsg$sock(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)="f86278fb1d12797fd1076d2a6f1a50c39d7032daddf158f45ebf90c4f84041be23632b9e5ff17cc4493575fc3c0531645014a37f4ec03137c814612191b27b08dd59b389dd6bd572243de45723299fc78f8631bb1739679271dc07acd286de3beb47a24e5153ad1cc4dedd1bb97bc3147806f05a4635d6a911eb7ccc5babe06b0b48b5c2f840e7c39f420190b844c42fc2b429f026363ed031efc6c26a8eebb33607756918128e7ba7d8ea524bf3fc0fcca4ce52805a0fa5cd27efc51d8870", 0xbf}, {&(0x7f00000005c0)="a6d8077d5e87bfa5459d90c5869038b5d0c12afb4158e981a84a48ff55b458dc8370b411a1b4ea28", 0x28}, {&(0x7f0000000600)="2bc05ae4052829d262b5ee348d6d56d8823766bc2b7d88e741dc8880b15244b55bf92289c4530cc395282b85363a577a0037ee1ae44c2fb9a842ce24f07b3ea16c118382e683d94e9b6c88d3bbab7a0fc0f1de6bb0b3b3d22a2a44829b0b9f41c7cb91f459d36c474c1957004e4f0a824a0135d548fa2bdd40432f3e345c1b33e4c794d62f81d88b22ef48e7d1439857fd642e5b", 0x94}, {&(0x7f00000006c0)="11f33f6530429adb4f84d379ec1cc7aaabda3a56c3f94e00b40f6cacc4c6b9213f0e72845f13ecf8dae6014316d2e60121b6745ef16ab1cc03ef836511fdeacb91e5ff2e0963f3a3036da433a5801d243efa6e6013196d1d6f400b746bd43eff318cf5d17d91698e4c8d5a3c3c1a6485afe2c33de78e4338a00aa34c66e6b27755f3e4d76b4c095841dabb84324a865dfdb4a7bf200e604d383cc39ec7ce4392ee3ff4100a1a9732273ed857e1c974f4cb84664e1d33b9717251be022f2730872f9ab0b4e1cd7797cf1b099f6203618e31108fac5890c388aad287c3", 0xdc}, {&(0x7f00000007c0)="f07ec0cceb5f6e78be24d30d9fa60723d71c3535a2efcff8545c75a2eaf701cde0ca07e7397d5ccd7f9d8961b543ffe5739c432a087991642c8eca8db0d39fa6a515804c5f94a751712a53d6fb33f582d15ba6a0e3", 0x55}, {&(0x7f0000000840)="bf7fb822ec8ab9203755cfd3393dce866a48c703fc6c01573000688e111a862f4e4ee4d9b07b5a43166425bd0da215aa2562346fce2994c46436705d26c04354d41c37409044b2837c983d5e6a16d2e18e2c9c1a70f0343833d26499b1fe5b1127e0b1ae0dacd9228eda5c3b676465abf012bfccfb53988f6e8d3098de91b364e0317df23133653929056c395176ce5e4d9d32aba307585102e9e589e4414e2450190781c5cbe08c48d00e980f5daad479e4a4f51088487a1986a7eb512199c5", 0xc0}, {&(0x7f0000000900)="c22783f336dd805f0459936a0d99c16ef825d17bdb1b7b378fbaf429d7dd3f8e67cc65f7b2b89dc687ada38531a5f45a5c820aa60bedf22fd84cade3b2d4bb2b89ab442e215f119ed6df17bd82f3a3474df81b0b92ab5a4517ba0b80", 0x5c}], 0x7, &(0x7f0000000a80)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b00)="e13494e2b60473a8f4bd3aad3c2fbb1d7a57622bb4a5320d9c4fd4c89fe57eb0022b6ddbffca18d292a215f2fe159585e5538dcafe608848bc4f81d2831b311e3337d09298c1fa83011670fb41b06d8cba2f4b97ebe90cc9aa21e0ba07fe58407f1189bacfa6f6cebcf4314ba7652ad48bb410513d8afc78cdb81dbdf80db5a743bddecbda69587ab7f66bb9cced3198b3a3f0f8e70161e7ae218c4cdc7feb8070284d01030bb62ceb70886cc0a6f8492ecad0c686e4c82c73df3e670ddc787b1e51ef60978aaebe1a37bb26a2d7", 0xce}, {&(0x7f0000000c00)="b267063e954641c5ae1012df68463245fae8ec5cb2417f9517d8000567ca62395e470379ac4e484650b8e1f04a60d231", 0x30}, {&(0x7f0000000c40)="1a703dfd0f29586240b20bca152916b411aa148c5524fa6cbbe8dd09051082630a740646d91e5a33e7ac81ac6e2cc50c0033a7e4ad2844404cf96e3660aed1e1628645565f642bf7e550a1ec5dcc95f7ce3158aac259c5d05de8ae1cfee2ce1483276a33c1f4c248349a73b06f46c2eda20b8f80bb4f43738816d8e1388e32df18e638df321ec9ae0acc82a396566e3a6899f15948a9d09afe6a24c9e6092a22ed6e9a3824f0eb9a79b2962378819f04edf03f102dbfacbddaad7a0ff9aa5d0f56f2613cd18a13e1f2806e8ca69a6a791d319a103bd1801a623469f04e23e944869d99a0d42fbca9d4", 0xe9}, {&(0x7f0000000d40)="04c0d504689342fc73beeeb53f93ce97c73011ffa04034fceccc815ed54aa7e3ddd77161db49488aabf3dc2c1d6b3cb70f434b75c6b080f3a413a6ed100336d62411a22ebd4f8bc0525985389b94a2e10efe092e3040006638628ac3146e583303a4b3c1d20102c75d507a8a", 0x6c}, {&(0x7f0000000dc0)="d5803f82996a772615e47096f48b7b62057f2a96734690c3b9078993a7c7e49d9f1e4b458d06749e3295ad4d58080efc2c6f", 0x32}, {&(0x7f0000000e00)="6861a3876004a2e5e02800ba7329ee2f35eb9b07c944ea81078a2453147ef5132eb618bc18def8e9f3b931a8ac325145fabbad3442786711e8af392e1f4ae8e70bcfbf1a5a8e82209799c32c6b7274d3d297e8907cf59d6e4cfae70de0470aeba66d4bbb2d200b3c9554bd8ab906c4e0ba947fb384e07f94ad89c199688eb6f5c8cdb3143a53da5dd75069f8d23d6efb0f9a63", 0x93}, {&(0x7f0000000f40)="96b3d4e6366c697749890a0df146a2b426865657357bd00dfdffe1ffce21d72a598a9f66f6db3f550183db7f8847b7f1437b0e75408999778dcd3110ff11f0b6b2ba3c387f47ff97f493447e047c39dedc52dd68856815028da0e84cd79cd762bd7a5348900bcbe35746c0ad584b5bdaee9a5277445dda41e4ef19aeb702eb8cfb873581145d860920bd618d955e618e144869b5a72335e392793a98e9dab0da272c84666aa1ee6f20f3518a3b698485ecf028c09171bc512a00ce43aef139243d8ded193d5a82daacdc6cc3f131394c8f", 0xd1}, {&(0x7f0000001040)="c3ce170a6af85941a670ab18bb85ee2c77360b580ab1d1faa5ac73309d5a422798bb43c59d0de7290a849f4d35ccde45dd0f923cb68c2caaaa9f51c6ebf8e73ed6859053bcd027a4adc5755f5efad3b8c3393ca611659223fb42dfc6e0991e6efebd0b5154a2c30f7b7413394f18c6b5", 0x70}], 0x8}}], 0x2, 0x0)
unlink(&(0x7f0000000100)='./file0\x00')
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e03006d0c"], 0x7)

3m43.572030511s ago: executing program 8 (id=1780):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)

3m41.814248213s ago: executing program 8 (id=1781):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2)
ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfff, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r6, 0x80086303, &(0x7f0000000000))
accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000)

3m39.519276798s ago: executing program 8 (id=1782):
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda6d, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000f00)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}})
r5 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1492)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
sendmmsg$sock(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b00)="e13494e2b60473a8f4bd3aad3c2fbb1d7a57622bb4a5320d9c4fd4c89fe57eb0022b6ddbffca18d292a215f2fe159585e5538dcafe608848bc4f81d2831b311e3337d09298c1fa83011670fb41b06d8cba2f4b97ebe90cc9aa21e0ba07fe58407f1189bacfa6f6cebcf4314ba7652ad48bb410513d8afc78cdb81dbdf80db5a743bddecbda69587ab7f66bb9cced3198b3a3f0f8e70161e7ae218c4cdc7feb8070284d01030bb62ceb70886cc0a6f8492ecad0c686e4c82c73df3e670ddc787b1e51ef60978aaebe1a37bb26a2d7a7", 0xcf}, {&(0x7f0000000c00)="b267063e954641c5ae1012df68463245fae8ec5cb2417f9517d8000567ca62395e470379ac4e484650b8e1f04a60d231", 0x30}, {&(0x7f0000000c40)="1a703dfd0f29586240b20bca152916b411aa148c5524fa6cbbe8dd09051082630a740646d91e5a33e7ac81ac6e2cc50c0033a7e4ad2844404cf96e3660aed1e1628645565f642bf7e550a1ec5dcc95f7ce3158aac259c5d05de8ae1cfee2ce1483276a33c1f4c248349a73b06f46c2eda20b8f80bb4f43738816d8e1388e32df18e638df321ec9ae0acc82a396566e3a6899f15948a9d09afe6a24c9e6092a22ed6e9a3824f0eb9a79b2962378819f04edf03f102dbfacbddaad7a0ff9aa5d0f56f2613cd18a13e1f2806e8ca69a6a791d319a103bd1801a623469f04e23e944869d99a0d42fbca9d4", 0xe9}, {&(0x7f0000000d40)="04c0d504689342fc73beeeb53f93ce97c73011ffa04034fceccc815ed54aa7e3ddd77161db49488aabf3dc2c1d6b3cb70f434b75c6b080f3a413a6ed100336d62411a22ebd4f8bc0525985389b94a2e10efe092e3040006638628ac3146e583303a4b3c1d20102c75d507a8a", 0x6c}, {&(0x7f0000000dc0)="d5803f82996a772615e47096f48b7b62057f2a96734690c3b9078993a7c7e49d9f1e4b458d06749e3295ad4d58080efc2c6f", 0x32}, {&(0x7f0000000e00)="6861a3876004a2e5e02800ba7329ee2f35eb9b07c944ea81078a2453147ef5132eb618bc18def8e9f3b931a8ac325145fabbad3442786711e8af392e1f4ae8e70bcfbf1a5a8e82209799c32c6b7274d3d297e8907cf59d6e4cfae70de0470aeba66d4bbb2d200b3c9554bd8ab906c4e0ba947fb384e07f94ad89c199688eb6f5c8cdb3143a53da5dd75069f8d23d6efb0f9a63", 0x93}, {&(0x7f0000000f40)="96b3d4e6366c697749890a0df146a2b426865657357bd00dfdffe1ffce21d72a598a9f66f6db3f550183db7f8847b7f1437b0e75408999778dcd3110ff11f0b6b2ba3c387f47ff97f493447e047c39dedc52dd68856815028da0e84cd79cd762bd7a5348900bcbe35746c0ad584b5bdaee9a5277445dda41e4ef19aeb702eb8cfb873581145d860920bd618d955e618e144869b5a72335e392793a98e9dab0da272c84666aa1ee6f20f3518a3b698485ecf028c09171bc512a00ce43aef139243d8ded193d5a82daacdc6cc3f131394c8f", 0xd1}, {&(0x7f0000001040)="c3ce170a6af85941a670ab18bb85ee2c77360b580ab1d1faa5ac73309d5a422798bb43c59d0de7290a849f4d35ccde45dd0f923cb68c2caaaa9f51c6ebf8e73ed6859053bcd027a4adc5755f5efad3b8c3393ca611659223fb42dfc6e0991e6efebd0b5154a2c30f7b7413394f18c6b5", 0x70}], 0x8}}], 0x2, 0x0)
unlink(&(0x7f0000000100)='./file0\x00')
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e03006d0c"], 0x7)

3m39.334242457s ago: executing program 6 (id=1783):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000000)={0xa, 0x2, 0xb2})

3m39.184021657s ago: executing program 1 (id=1785):
r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
timer_settime(0x0, 0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = eventfd2(0x4, 0x80000)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000002c0)={&(0x7f00004b8000/0x4000)=nil, 0x4000})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210})
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000000)={0x1, r1, 0x400})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x85, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="90", 0x1}], 0x1}, 0x4c0e0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x4)

3m22.154749203s ago: executing program 40 (id=1783):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000000)={0xa, 0x2, 0xb2})

3m19.004534132s ago: executing program 41 (id=1782):
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda6d, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000f00)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}})
r5 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1492)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
sendmmsg$sock(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b00)="e13494e2b60473a8f4bd3aad3c2fbb1d7a57622bb4a5320d9c4fd4c89fe57eb0022b6ddbffca18d292a215f2fe159585e5538dcafe608848bc4f81d2831b311e3337d09298c1fa83011670fb41b06d8cba2f4b97ebe90cc9aa21e0ba07fe58407f1189bacfa6f6cebcf4314ba7652ad48bb410513d8afc78cdb81dbdf80db5a743bddecbda69587ab7f66bb9cced3198b3a3f0f8e70161e7ae218c4cdc7feb8070284d01030bb62ceb70886cc0a6f8492ecad0c686e4c82c73df3e670ddc787b1e51ef60978aaebe1a37bb26a2d7a7", 0xcf}, {&(0x7f0000000c00)="b267063e954641c5ae1012df68463245fae8ec5cb2417f9517d8000567ca62395e470379ac4e484650b8e1f04a60d231", 0x30}, {&(0x7f0000000c40)="1a703dfd0f29586240b20bca152916b411aa148c5524fa6cbbe8dd09051082630a740646d91e5a33e7ac81ac6e2cc50c0033a7e4ad2844404cf96e3660aed1e1628645565f642bf7e550a1ec5dcc95f7ce3158aac259c5d05de8ae1cfee2ce1483276a33c1f4c248349a73b06f46c2eda20b8f80bb4f43738816d8e1388e32df18e638df321ec9ae0acc82a396566e3a6899f15948a9d09afe6a24c9e6092a22ed6e9a3824f0eb9a79b2962378819f04edf03f102dbfacbddaad7a0ff9aa5d0f56f2613cd18a13e1f2806e8ca69a6a791d319a103bd1801a623469f04e23e944869d99a0d42fbca9d4", 0xe9}, {&(0x7f0000000d40)="04c0d504689342fc73beeeb53f93ce97c73011ffa04034fceccc815ed54aa7e3ddd77161db49488aabf3dc2c1d6b3cb70f434b75c6b080f3a413a6ed100336d62411a22ebd4f8bc0525985389b94a2e10efe092e3040006638628ac3146e583303a4b3c1d20102c75d507a8a", 0x6c}, {&(0x7f0000000dc0)="d5803f82996a772615e47096f48b7b62057f2a96734690c3b9078993a7c7e49d9f1e4b458d06749e3295ad4d58080efc2c6f", 0x32}, {&(0x7f0000000e00)="6861a3876004a2e5e02800ba7329ee2f35eb9b07c944ea81078a2453147ef5132eb618bc18def8e9f3b931a8ac325145fabbad3442786711e8af392e1f4ae8e70bcfbf1a5a8e82209799c32c6b7274d3d297e8907cf59d6e4cfae70de0470aeba66d4bbb2d200b3c9554bd8ab906c4e0ba947fb384e07f94ad89c199688eb6f5c8cdb3143a53da5dd75069f8d23d6efb0f9a63", 0x93}, {&(0x7f0000000f40)="96b3d4e6366c697749890a0df146a2b426865657357bd00dfdffe1ffce21d72a598a9f66f6db3f550183db7f8847b7f1437b0e75408999778dcd3110ff11f0b6b2ba3c387f47ff97f493447e047c39dedc52dd68856815028da0e84cd79cd762bd7a5348900bcbe35746c0ad584b5bdaee9a5277445dda41e4ef19aeb702eb8cfb873581145d860920bd618d955e618e144869b5a72335e392793a98e9dab0da272c84666aa1ee6f20f3518a3b698485ecf028c09171bc512a00ce43aef139243d8ded193d5a82daacdc6cc3f131394c8f", 0xd1}, {&(0x7f0000001040)="c3ce170a6af85941a670ab18bb85ee2c77360b580ab1d1faa5ac73309d5a422798bb43c59d0de7290a849f4d35ccde45dd0f923cb68c2caaaa9f51c6ebf8e73ed6859053bcd027a4adc5755f5efad3b8c3393ca611659223fb42dfc6e0991e6efebd0b5154a2c30f7b7413394f18c6b5", 0x70}], 0x8}}], 0x2, 0x0)
unlink(&(0x7f0000000100)='./file0\x00')
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e03006d0c"], 0x7)

3m16.376065562s ago: executing program 42 (id=1785):
r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
timer_settime(0x0, 0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = eventfd2(0x4, 0x80000)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000002c0)={&(0x7f00004b8000/0x4000)=nil, 0x4000})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210})
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000000)={0x1, r1, 0x400})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x85, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="90", 0x1}], 0x1}, 0x4c0e0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x4)

16.213346534s ago: executing program 2 (id=1957):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, 0xffffffffffffffff, 0x6000}, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
r3 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0})
ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000700)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r7, 0xd)

14.937823746s ago: executing program 2 (id=1958):
r0 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300), 0x1000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@subj_type={'subj_type', 0x3d, ':'}}]}})
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='dir0\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0)
creat(&(0x7f00000000c0)='dir0/per_cpu/cpu0/trace\x00', 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="d361080010010000957d9d6e8231dcad3ca48626985380d23d9a340008c018000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x4, &(0x7f0000000080)=""/4, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
epoll_create1(0x0)
fcntl$setpipe(r4, 0x407, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_ENTRY(r4, &(0x7f00000024c0)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x80000000, 0x9, 0x8, 0x0, 0x0, {0x1, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x9, 0x9, 0x0, 0xa000, 0x0, 0x0, r5, 0x3, 0x2}}}, 0x90)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'veth1_vlan\x00', 0x1}, 0x18)
r6 = open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f00000005c0), 0x8)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
poll(&(0x7f0000000000)=[{r7, 0x141}], 0x1, 0x3)
sendmsg$key(r0, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2, 0x18, 0x1, 0x0, 0x14, 0x0, 0x20024, 0x10, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0xfffe, 0x0, 0x0, 0x20004, 0x7, {0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}]}, 0xa0}}, 0x20000000)

10.524714421s ago: executing program 2 (id=1961):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x35)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x6}, 0x1c)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @broadcast}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
timerfd_create(0x0, 0x0)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

7.70000857s ago: executing program 0 (id=1963):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000200001"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = mq_open(&(0x7f0000000280)='$@\x00', 0x40, 0x1b4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
timer_getoverrun(0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x107)
mount(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x18800, &(0x7f0000000100)='trans=rdma,\xd6\x17\x0foQW\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3\xc90$A\x7fL0R\v!{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80sm\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xf2\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xf9\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY')
readv(r3, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/185, 0xb9}], 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000440)='westwood', 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x8, 0x19)
poll(&(0x7f0000000180)=[{r5, 0x9001}], 0x1, 0xef5)
ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000880))

7.341002548s ago: executing program 0 (id=1964):
socket$kcm(0x2, 0xa, 0x2)
r0 = socket(0x11, 0x2, 0x10001)
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000002640)={0xffffffffffffffee, 0x7253, 0xffffffffffffffdf, 0x696c, 0x9, 0x6, 0x52e6ac5d, 0x8, 0x0, 0x0, 0x400000000000000d, 0x7fffffff, 0x6, 0x8000000b, 0x80000004000000, 0x9, 0xfffffffffffffffd, 0x89, 0x3, 0x8000000, 0x5, 0x3, 0x200000005, 0xfffffffffffffffe, 0x9dc6, 0xa})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x6})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baebab028deda525e19bdeffafde2500", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r5, <r6=>0xffffffffffffffff})
close_range(r2, r3, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0xfffffffb, 0x46, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7, 0x8, 0x40, 0x2}})
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r8 = io_uring_setup(0x6fbf, &(0x7f0000000100)={0x0, 0x2ba7, 0x1, 0x3, 0x251})
r9 = dup2(r7, r8)
read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2020)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, 0x0, 0xc000)

5.865336037s ago: executing program 0 (id=1965):
r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'lo\x00'})
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x64)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
close(r1)
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x1, 0x40, 0x20008, r0, 0xfffffff7, '\x00', r4, r0, 0x0, 0x3, 0x5, 0x5}, 0x50)
r6 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000000)=<r9=>0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1})
io_uring_enter(r6, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x31, {0x7, 0x8000000000000003}, 0xb}, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000980)={0x3, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000740)=""/228, 0xe4}, {&(0x7f0000000840)=""/184, 0xb8}], &(0x7f0000000940)=[0x3, 0xffffffffffff9e11], 0x3}, 0x20)
pipe2(&(0x7f0000000000)={<r10=>0x0, <r11=>0x0}, 0x0)
r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r13 = fanotify_init(0x200, 0x0)
fanotify_mark(r13, 0x39, 0x1a, r12, 0x0)
vmsplice(r11, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x0)
r14 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
splice(r10, 0x0, r14, 0x0, 0x1, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x58}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.18716865s ago: executing program 2 (id=1966):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', <r2=>0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x5, [{@multicast2, 0x3}]}]}}}}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', r2, r0}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)

2.035255041s ago: executing program 0 (id=1967):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = semget$private(0x0, 0x4000000009, 0x42a)
semctl$GETNCNT(r3, 0x0, 0xe, 0x0)
semtimedop(r3, &(0x7f00000000c0)=[{0x0, 0x3, 0x1800}], 0x1, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1\x00', 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x42, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5)
socket$packet(0x11, 0x2, 0x300)
semctl$SEM_INFO(r3, 0x1, 0x13, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x28)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044800}, 0x1)

2.03482165s ago: executing program 2 (id=1968):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, 0xffffffffffffffff, 0x6000}, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
r3 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0})
ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000700)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r7, 0xd)

332.410002ms ago: executing program 0 (id=1969):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x4}, {0xfff1, 0x7}}}, 0x24}}, 0x4008000)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x35, 0x1, 0x8, "100000df000000f1ff00000000e9ffffffffffff0f00", 0x20363059})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

8.721332ms ago: executing program 0 (id=1970):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c)
r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_gettime(0x0, &(0x7f0000000180))
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x4, 0x80000)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000002c0)={&(0x7f00004b8000/0x4000)=nil, 0x4000})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210})
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4020aeb2, &(0x7f0000000000)={0x1, r3, 0x400})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="90", 0x1}], 0x1}, 0x4c0e0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x4)

0s ago: executing program 2 (id=1971):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d3eda16f33fe62b0e948e41d905cc958efc8a4c004ab091a8debcc197ac5b9e7c0ff4e75e81c47bce7d63cdc8986ba5753342bcccb74670dad74e86e4e2dda8285eddb7f205eedc4228d1fbca53bea330f431ff1997194497261a66e7cd1a442281e8e26347ab2664202437eba53b2eef44bebdd83c91119ee487dc492ea2d9d19ae78"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000140))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[], 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e1c, @multicast1}, 0x10)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r6, &(0x7f0000000680)="903233", 0x3)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x34)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$vhost_msg_v2(r7, 0x0, 0x0)
write$vhost_msg_v2(r7, 0x0, 0x0)
syz_usb_connect(0x2, 0xc7, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYRES16=r7], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

9695][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.029931][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.030178][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.030551][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.030963][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.031550][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.031918][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.032338][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.032749][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.033255][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.033668][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.034044][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.034458][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.034843][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.035241][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.035827][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.036258][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.036646][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.037041][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.037471][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.037875][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.038323][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.038722][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.039066][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.039628][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.040092][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.040509][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.040895][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.041290][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.041716][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.042198][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.042641][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.043015][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.043553][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.043959][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.044345][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.044722][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.045127][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.045523][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.045896][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.046323][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.046704][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.047095][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.047497][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.047897][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.048287][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.048674][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.049063][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.049398][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.049839][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.050251][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.050653][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.051068][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.051482][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.051868][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.052315][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.052693][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.053083][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.053501][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.053929][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.054344][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.054919][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.055344][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.055763][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.056157][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.056588][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.057055][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.057458][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.057900][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.058340][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.058749][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.059180][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.059523][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.059924][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.060324][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.060741][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.061100][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.061535][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.061947][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.062322][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.062730][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.063129][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.063530][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.064013][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.064409][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.064783][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.065202][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.065617][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.066035][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.068117][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.068546][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.068943][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.073172][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.073429][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.073672][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.074039][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.074500][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.074943][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.075349][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.075670][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.076084][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.076494][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.076869][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.077110][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.077366][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.077618][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.077867][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.078106][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.078343][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.078579][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.078824][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.079071][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.079346][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.079586][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.079944][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.080348][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.080729][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.081273][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.081684][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.082076][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.082468][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.082863][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.083289][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.083704][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.084125][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.084522][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.084917][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.085318][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.085735][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.086122][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.086522][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.086921][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.087360][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.087755][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.088152][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.088519][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.095050][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.095542][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.095948][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.096305][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.096726][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.097098][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.097509][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.097933][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.098336][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.098857][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.099238][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.099471][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.099726][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.100124][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.100536][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.101001][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.101428][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.101843][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.102256][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.102654][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.104725][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.105097][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.105539][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.105897][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.106320][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.106693][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.107101][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.107515][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.107971][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.108380][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.108769][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.109320][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.109749][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.110193][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.110680][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.111084][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.111503][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.112086][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.112492][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.112903][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.113343][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.113725][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.114132][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.114568][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.114907][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.115345][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.115783][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.116194][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.116652][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.117047][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.117440][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.117871][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.118305][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.118703][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.119144][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.119442][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.119838][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.120243][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.120659][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.121060][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.121469][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.121871][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.122295][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.122686][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.123069][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.123653][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.124057][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.124457][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.124859][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.125208][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.125634][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.126028][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.126511][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.126903][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.127318][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.127719][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.128115][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.128555][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.128947][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.129345][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.129741][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.130144][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.130590][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.131012][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.131418][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.131802][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.132207][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.132630][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.133017][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.133558][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.133991][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.134400][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.134801][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.135328][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.135770][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.136177][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.136575][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.136873][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.137111][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.137358][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.137593][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.137830][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.138064][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.138410][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.138874][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.139376][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.139768][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.140168][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.140593][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.140977][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.141388][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.141764][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.142140][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.142553][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.142979][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.143357][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.143727][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.144126][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.144543][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.144933][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.145367][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.145881][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.146313][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.146687][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.147136][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.147562][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.147949][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.148349][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.148706][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.149196][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.149646][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.150047][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.150453][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.150864][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.151326][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.151727][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.152120][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.152523][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.152947][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.153350][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.153752][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.154173][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.154605][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.155017][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.155430][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.155837][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.156241][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.156615][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.157001][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.157490][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.157898][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.158329][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.158792][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.159361][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.159766][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.160188][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.160588][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.160980][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.161366][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.161789][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.162203][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.162642][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.163080][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.163493][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.163906][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.164342][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.164728][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.165151][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.165547][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.165958][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.166351][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.166784][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.167210][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.167570][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.167979][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.168387][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.168796][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.169402][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.169804][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.170178][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.170642][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.171034][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.171453][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.171854][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.172323][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.172713][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.173127][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.173497][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.173879][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.174270][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.174688][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.175080][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.175465][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.175882][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.176302][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.176677][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.177076][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.177438][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[ 1548.177466][ T4938] usb 3-1: control msg error: -71
[ 1548.177666][    C1] usb 3-1: pegasus_irq - urb shutting down with status: -2
[ 1548.735035][    T9] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1549.290657][   T37] usb 3-1: USB disconnect, device number 15
[ 1549.303349][    T9] usb 1-1: USB disconnect, device number 28
[ 1553.566150][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1553.702373][    T9] cp210x 1-1:0.0: device disconnected
[ 1556.360521][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[ 1556.360598][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[ 1564.426235][T10522] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1564.690079][T10522] usb 3-1: Using ep0 maxpacket: 8
[ 1564.711971][T10522] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1570.655952][T10522] usb 3-1: unable to read config index 0 descriptor/all
[ 1570.656100][T10522] usb 3-1: can't read configurations, error -71
[ 1577.257758][T13996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1577.425652][T13996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1577.452548][T13996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1577.475639][T13996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1577.567412][T13996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1578.722474][T15703] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1579.680752][T10522] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1579.942672][T10522] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1580.598861][ T5596] Bluetooth: hci0: command tx timeout
[ 1582.575829][T13996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1582.660942][T13996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1582.663813][T13996] Bluetooth: hci0: command tx timeout
[ 1582.680208][T13996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1582.770450][T13996] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1582.796768][T13996] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1583.677267][T13996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1583.754597][T13996] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1583.775305][T13996] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1583.788310][T13996] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1583.863105][T13996] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1583.961549][T10522] usb 3-1: unable to read config index 0 descriptor/all
[ 1583.961603][T10522] usb 3-1: can't read configurations, error -71
[ 1584.739276][ T5596] Bluetooth: hci0: command tx timeout
[ 1586.436048][ T5596] Bluetooth: hci5: command tx timeout
[ 1586.659321][ T5596] Bluetooth: hci7: command tx timeout
[ 1586.861196][ T5596] Bluetooth: hci0: command tx timeout
[ 1587.903296][T15738] jffs2: notice: (15738) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 12 of xref (0 dead, 9 orphan) found.
[ 1587.981213][ T5596] Bluetooth: hci6: unexpected event for opcode 0x0c6d
[ 1588.505876][ T5596] Bluetooth: hci5: command tx timeout
[ 1588.739352][ T5596] Bluetooth: hci7: command tx timeout
[ 1589.217584][  T157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1592.787524][ T5596] Bluetooth: hci5: command tx timeout
[ 1592.787563][T13996] Bluetooth: hci7: command tx timeout
[ 1592.787674][ T5596] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[ 1592.788014][ T5596] Bluetooth: hci6: Injecting HCI hardware error event
[ 1592.799627][ T5596] Bluetooth: hci6: hardware error 0x00
[ 1594.819474][T13996] Bluetooth: hci5: command tx timeout
[ 1594.820336][T15709] Bluetooth: hci7: command tx timeout
[ 1595.908931][  T157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1597.751527][ T5596] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[ 1598.531981][T15804] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1598.600166][  T157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1598.789588][T10522] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1598.940113][T10522] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1598.941708][T10522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1598.977572][T10522] usb 1-1: config 0 descriptor??
[ 1598.998819][T10522] cp210x 1-1:0.0: cp210x converter detected
[ 1599.576124][T15817] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present
[ 1600.832150][ T4300] IPVS: starting estimator thread 0...
[ 1601.052850][T15826] IPVS: using max 9 ests per chain, 21600 per kthread
[ 1601.211622][  T157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1602.343989][T10522] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71
[ 1602.359476][T10522] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1602.359534][T10522] cp210x 1-1:0.0: GPIO initialisation failed: -71
[ 1602.406229][T10522] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1602.482730][T10522] usb 1-1: USB disconnect, device number 29
[ 1602.506280][T10522] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1602.507105][T10522] cp210x 1-1:0.0: device disconnected
[ 1603.157729][T15688] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1603.157866][T15688] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1603.158097][T15688] bridge_slave_0: entered allmulticast mode
[ 1603.188611][T15688] bridge_slave_0: entered promiscuous mode
[ 1603.316950][T15688] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1603.317096][T15688] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1604.789647][ T5596] Bluetooth: hci2: command 0x0406 tx timeout
[ 1604.791634][T15688] bridge_slave_1: entered allmulticast mode
[ 1604.802220][T15688] bridge_slave_1: entered promiscuous mode
[ 1605.189299][  T199] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1605.231598][T15688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1605.351408][  T199] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00
[ 1605.357392][  T199] usb 3-1: config index 0 descriptor too short (expected 59, got 54)
[ 1605.357427][  T199] usb 3-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config
[ 1605.420132][  T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.420167][  T199] usb 3-1: Product: syz
[ 1605.420185][  T199] usb 3-1: Manufacturer: syz
[ 1605.420203][  T199] usb 3-1: SerialNumber: syz
[ 1605.476502][T15688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1605.742465][T15688] team0: Port device team_slave_0 added
[ 1605.815275][T15688] team0: Port device team_slave_1 added
[ 1606.355973][T15867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1606.364810][T15867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1606.432256][T15688] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1606.432278][T15688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1606.432310][T15688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1606.528201][  T199] ljca 3-1:1.0: enumerate GPIO error
[ 1606.533418][  T199] ljca 3-1:1.0: probe with driver ljca failed with error -110
[ 1606.601870][T15688] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1606.601892][T15688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1606.601923][T15688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1606.605051][  T199] usb 3-1: USB disconnect, device number 20
[ 1607.216065][T15880] FAULT_INJECTION: forcing a failure.
[ 1607.216065][T15880] name failslab, interval 1, probability 0, space 0, times 0
[ 1607.216107][T15880] CPU: 1 UID: 0 PID: 15880 Comm: syz.2.1815 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1607.216137][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1607.216155][T15880] Call Trace:
[ 1607.216165][T15880]  <TASK>
[ 1607.216177][T15880]  dump_stack_lvl+0xe8/0x150
[ 1607.216225][T15880]  should_fail_ex+0x46b/0x600
[ 1607.216266][T15880]  should_failslab+0xa8/0x100
[ 1607.216305][T15880]  ? do_getname+0x2e/0x250
[ 1607.216340][T15880]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1607.216511][T15880]  ? do_getname+0x2e/0x250
[ 1607.216548][T15880]  ? lock_vma_under_rcu+0x45a/0x500
[ 1607.216587][T15880]  do_getname+0x2e/0x250
[ 1607.216621][T15880]  ? getname_flags+0x11/0x20
[ 1607.216661][T15880]  do_sys_openat2+0xcc/0x200
[ 1607.216703][T15880]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1607.216742][T15880]  ? exc_page_fault+0x6a/0xc0
[ 1607.216784][T15880]  ? do_user_addr_fault+0xc4c/0x1340
[ 1607.216816][T15880]  __x64_sys_openat+0x138/0x170
[ 1607.216845][T15880]  do_syscall_64+0x166/0x520
[ 1607.216867][T15880]  ? trace_irq_disable+0x3b/0x140
[ 1607.216899][T15880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1607.216926][T15880]  ? clear_bhb_loop+0x70/0xc0
[ 1607.216955][T15880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1607.216980][T15880] RIP: 0033:0x7f4019e4e98e
[ 1607.217006][T15880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1607.217028][T15880] RSP: 002b:00007f40180e5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1607.217054][T15880] RAX: ffffffffffffffda RBX: 00007f40180e66c0 RCX: 00007f4019e4e98e
[ 1607.217072][T15880] RDX: 0000000000000002 RSI: 00007f40180e5c00 RDI: ffffffffffffff9c
[ 1607.217088][T15880] RBP: 00007f40180e5c00 R08: 0000000000000000 R09: 0000000000000000
[ 1607.217104][T15880] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1607.217121][T15880] R13: 00007f401a116038 R14: 00007f401a115fa0 R15: 00007fff32ec3b68
[ 1607.217157][T15880]  </TASK>
[ 1609.024506][  T157] bridge_slave_1: left allmulticast mode
[ 1609.024557][  T157] bridge_slave_1: left promiscuous mode
[ 1609.024847][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1609.080341][T15899] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1609.317924][  T157] bridge_slave_0: left allmulticast mode
[ 1609.317964][  T157] bridge_slave_0: left promiscuous mode
[ 1609.318338][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1609.323699][T10522] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1609.508804][T10522] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1609.528217][T10522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1609.548248][T10522] usb 1-1: config 0 descriptor??
[ 1609.561676][T13444] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1609.575073][T10522] cp210x 1-1:0.0: cp210x converter detected
[ 1609.720142][T13444] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[ 1609.721519][T13444] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1609.721544][T13444] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1609.724169][T13444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1609.724189][T13444] usb 3-1: Product: syz
[ 1609.724201][T13444] usb 3-1: Manufacturer: syz
[ 1609.724264][T13444] usb 3-1: SerialNumber: syz
[ 1610.046600][T13444] kaweth 3-1:1.0: Firmware present in device.
[ 1610.047135][T13444] kaweth 3-1:1.0: Error reading configuration (-71), no net device created
[ 1610.105975][T13444] kaweth 3-1:1.0: probe with driver kaweth failed with error -5
[ 1610.192113][T13444] usb 3-1: USB disconnect, device number 21
[ 1610.220306][T15899] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present
[ 1612.652766][T10522] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71
[ 1612.679383][T10522] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1612.679444][T10522] cp210x 1-1:0.0: GPIO initialisation failed: -71
[ 1612.767386][T10522] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1612.788681][T10522] usb 1-1: USB disconnect, device number 30
[ 1612.860199][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1612.902642][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1612.915189][T10522] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1612.918609][T10522] cp210x 1-1:0.0: device disconnected
[ 1612.937762][  T157] bond0 (unregistering): Released all slaves
[ 1612.997036][T15912] ip6gretap2: entered allmulticast mode
[ 1613.000818][T15912] batman_adv: batadv0: Adding interface: ip6gretap2
[ 1613.000841][T15912] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1613.000883][T15912] batman_adv: batadv0: Interface activated: ip6gretap2
[ 1613.906020][ T5248] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1618.035243][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[ 1618.035321][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[ 1618.494737][T15930] FAULT_INJECTION: forcing a failure.
[ 1618.494737][T15930] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1618.494777][T15930] CPU: 1 UID: 0 PID: 15930 Comm: syz.2.1825 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1618.494804][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1618.494819][T15930] Call Trace:
[ 1618.494829][T15930]  <TASK>
[ 1618.494839][T15930]  dump_stack_lvl+0xe8/0x150
[ 1618.494888][T15930]  should_fail_ex+0x46b/0x600
[ 1618.494926][T15930]  _copy_to_user+0x31/0xb0
[ 1618.494964][T15930]  simple_read_from_buffer+0xe1/0x170
[ 1618.494999][T15930]  proc_fail_nth_read+0x1be/0x230
[ 1618.495032][T15930]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1618.495057][T15688] hsr_slave_0: entered promiscuous mode
[ 1618.495065][T15930]  ? rw_verify_area+0x250/0x4d0
[ 1618.495094][T15930]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1618.495122][T15930]  vfs_read+0x219/0xa90
[ 1618.495157][T15930]  ? __pfx_vfs_read+0x10/0x10
[ 1618.495185][T15930]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1618.495218][T15930]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1618.495242][T15930]  ? mutex_lock_nested+0x152/0x1d0
[ 1618.495271][T15930]  ? fdget_pos+0x252/0x320
[ 1618.495306][T15930]  ksys_read+0x156/0x270
[ 1618.495335][T15930]  ? __pfx_ksys_read+0x10/0x10
[ 1618.495376][T15930]  do_syscall_64+0x166/0x520
[ 1618.495399][T15930]  ? trace_irq_disable+0x3b/0x140
[ 1618.495429][T15930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1618.495454][T15930]  ? clear_bhb_loop+0x70/0xc0
[ 1618.495484][T15930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1618.495509][T15930] RIP: 0033:0x7f4019e4e98e
[ 1618.495531][T15930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1618.495552][T15930] RSP: 002b:00007f40180e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1618.495578][T15930] RAX: ffffffffffffffda RBX: 00007f40180e66c0 RCX: 00007f4019e4e98e
[ 1618.495597][T15930] RDX: 000000000000000f RSI: 00007f40180e60a0 RDI: 0000000000000003
[ 1618.495612][T15930] RBP: 00007f40180e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1618.495629][T15930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1618.495643][T15930] R13: 00007f401a116038 R14: 00007f401a115fa0 R15: 00007fff32ec3b68
[ 1618.495681][T15930]  </TASK>
[ 1618.680110][T15688] hsr_slave_1: entered promiscuous mode
[ 1618.681128][T15688] debugfs: 'hsr0' already exists in 'hsr'
[ 1618.681156][T15688] Cannot create hsr debugfs directory
[ 1618.855504][T15706] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1618.855636][T15706] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1618.855821][T15706] bridge_slave_0: entered allmulticast mode
[ 1618.858810][T15706] bridge_slave_0: entered promiscuous mode
[ 1618.933967][T15712] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1618.934437][T15712] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1618.934646][T15712] bridge_slave_0: entered allmulticast mode
[ 1618.937515][T15712] bridge_slave_0: entered promiscuous mode
[ 1619.028252][T15706] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1619.028392][T15706] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1619.028591][T15706] bridge_slave_1: entered allmulticast mode
[ 1619.052305][T15706] bridge_slave_1: entered promiscuous mode
[ 1619.857126][T13996] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1619.960666][T13996] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1619.986776][T13996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1620.239129][T13996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1620.239990][T13996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1620.590653][T15712] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1620.590793][T15712] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1620.590993][T15712] bridge_slave_1: entered allmulticast mode
[ 1620.599005][T15949] comedi comedi1: dt2811-pgh: a I/O base address must be specified
[ 1620.629761][T15712] bridge_slave_1: entered promiscuous mode
[ 1620.961192][T15949] bridge_slave_1: left allmulticast mode
[ 1620.961248][T15949] bridge_slave_1: left promiscuous mode
[ 1620.961552][T15949] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1621.285645][T15709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1621.436829][T15709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1621.452851][T15709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1621.470135][T15949] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1621.526880][T15709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1621.538790][T15709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1623.136429][T13996] Bluetooth: hci1: command tx timeout
[ 1623.534698][T15978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1828'.
[ 1623.581677][T15982] netlink: 'syz.0.1829': attribute type 11 has an invalid length.
[ 1623.581706][T15982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1829'.
[ 1623.779457][T13996] Bluetooth: hci0: command tx timeout
[ 1625.151869][ T5596] Bluetooth: hci1: command tx timeout
[ 1625.187234][T15709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1625.475776][T15709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1625.556397][T15709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1625.679350][T15709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1625.742919][T15709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1625.869723][T13996] Bluetooth: hci0: command tx timeout
[ 1628.131545][T13996] Bluetooth: hci1: command tx timeout
[ 1628.132288][T13996] Bluetooth: hci0: command tx timeout
[ 1628.203192][ T5248] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1628.259458][T15709] Bluetooth: hci3: command tx timeout
[ 1628.623430][T15712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1629.976881][T16015] jffs2: notice: (16015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (2 unchecked, 1 orphan) and 13 of xref (0 dead, 10 orphan) found.
[ 1630.189181][T15709] Bluetooth: hci0: command tx timeout
[ 1630.189193][T13996] Bluetooth: hci1: command tx timeout
[ 1630.369247][T13996] Bluetooth: hci3: command tx timeout
[ 1631.996499][T16046] FAULT_INJECTION: forcing a failure.
[ 1631.996499][T16046] name failslab, interval 1, probability 0, space 0, times 0
[ 1631.996540][T16046] CPU: 0 UID: 0 PID: 16046 Comm: syz.2.1839 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1631.996571][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1631.996588][T16046] Call Trace:
[ 1631.996599][T16046]  <TASK>
[ 1631.996611][T16046]  dump_stack_lvl+0xe8/0x150
[ 1631.996657][T16046]  should_fail_ex+0x46b/0x600
[ 1631.996698][T16046]  should_failslab+0xa8/0x100
[ 1631.996738][T16046]  ? do_getname+0x2e/0x250
[ 1631.996777][T16046]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1631.996819][T16046]  ? do_getname+0x2e/0x250
[ 1631.996866][T16046]  do_getname+0x2e/0x250
[ 1631.996904][T16046]  ? getname_uflags+0x11/0x30
[ 1631.996948][T16046]  do_fchownat+0xe3/0x250
[ 1631.996989][T16046]  ? __pfx_do_fchownat+0x10/0x10
[ 1631.997033][T16046]  ? __pfx_ksys_write+0x10/0x10
[ 1631.997074][T16046]  __x64_sys_chown+0x82/0xa0
[ 1631.997115][T16046]  do_syscall_64+0x166/0x520
[ 1631.997142][T16046]  ? trace_irq_disable+0x3b/0x140
[ 1631.997176][T16046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1631.997204][T16046]  ? clear_bhb_loop+0x70/0xc0
[ 1631.997237][T16046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1631.997265][T16046] RIP: 0033:0x7f4019e8e159
[ 1631.997289][T16046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1631.997313][T16046] RSP: 002b:00007f40180e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[ 1631.997342][T16046] RAX: ffffffffffffffda RBX: 00007f401a115fa0 RCX: 00007f4019e8e159
[ 1631.997363][T16046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[ 1631.997381][T16046] RBP: 00007f40180e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1631.997398][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1631.997423][T16046] R13: 00007f401a116038 R14: 00007f401a115fa0 R15: 00007fff32ec3b68
[ 1631.997464][T16046]  </TASK>
[ 1632.539393][ T5578] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1632.597171][T13996] Bluetooth: hci3: command tx timeout
[ 1633.736484][ T5578] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[ 1633.738069][ T5578] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1633.738131][ T5578] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1633.738179][ T5578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1633.979516][  T157] hsr_slave_0: left promiscuous mode
[ 1634.014583][ T5578] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report
[ 1634.014805][ T5578] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -2
[ 1634.016019][T16061] FAULT_INJECTION: forcing a failure.
[ 1634.016019][T16061] name failslab, interval 1, probability 0, space 0, times 0
[ 1634.016056][T16061] CPU: 1 UID: 0 PID: 16061 Comm: syz.0.1841 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1634.016084][T16061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1634.016098][T16061] Call Trace:
[ 1634.016108][T16061]  <TASK>
[ 1634.016119][T16061]  dump_stack_lvl+0xe8/0x150
[ 1634.016160][T16061]  should_fail_ex+0x46b/0x600
[ 1634.016197][T16061]  should_failslab+0xa8/0x100
[ 1634.016236][T16061]  __kmalloc_noprof+0xfb/0x790
[ 1634.016274][T16061]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1634.016309][T16061]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1634.016350][T16061]  tomoyo_realpath_from_path+0xef/0x640
[ 1634.016420][T16061]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1634.016451][T16061]  tomoyo_path_number_perm+0x246/0x5f0
[ 1634.016480][T16061]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1634.016838][T16061]  ? sb_end_write+0xe8/0x190
[ 1634.016865][T16061]  ? vfs_write+0x9e0/0xbb0
[ 1634.016891][T16061]  ? hook_file_ioctl+0x1f5/0x610
[ 1634.016928][T16061]  ? ksys_write+0x202/0x270
[ 1634.016953][T16061]  security_file_ioctl+0xc3/0x2a0
[ 1634.016977][T16061]  __se_sys_ioctl+0x47/0x170
[ 1634.017002][T16061]  do_syscall_64+0x166/0x520
[ 1634.017019][T16061]  ? trace_irq_disable+0x3b/0x140
[ 1634.017042][T16061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.017122][T16061]  ? clear_bhb_loop+0x70/0xc0
[ 1634.017177][T16061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.017205][T16061] RIP: 0033:0x7f8aa6fae159
[ 1634.017228][T16061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1634.017260][T16061] RSP: 002b:00007f8aa5206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1634.017314][T16061] RAX: ffffffffffffffda RBX: 00007f8aa7235fa0 RCX: 00007f8aa6fae159
[ 1634.017332][T16061] RDX: 0000200000000000 RSI: 00000000000007a0 RDI: 0000000000000003
[ 1634.017348][T16061] RBP: 00007f8aa5206090 R08: 0000000000000000 R09: 0000000000000000
[ 1634.017712][T16061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1634.017726][T16061] R13: 00007f8aa7236038 R14: 00007f8aa7235fa0 R15: 00007ffd5b3ea4e8
[ 1634.017754][T16061]  </TASK>
[ 1634.019897][T16061] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1634.049243][  T157] hsr_slave_1: left promiscuous mode
[ 1634.188992][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1634.189023][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1634.317522][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1634.317559][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1634.517713][  T157] veth1_macvtap: left promiscuous mode
[ 1634.517833][  T157] veth0_macvtap: left promiscuous mode
[ 1634.518130][  T157] veth1_vlan: left promiscuous mode
[ 1634.518332][  T157] veth0_vlan: left promiscuous mode
[ 1634.659479][T13996] Bluetooth: hci3: command tx timeout
[ 1634.704022][ T5578] usb 3-1: USB disconnect, device number 22
[ 1635.607331][T16076] jffs2: notice: (16076) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (2 unchecked, 2 orphan) and 14 of xref (0 dead, 11 orphan) found.
[ 1635.676246][T13996] Bluetooth: hci2: unexpected event for opcode 0x0c6d
[ 1635.809273][ T9668] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1635.949959][  T157] team0 (unregistering): Port device team_slave_1 removed
[ 1635.968669][ T9668] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[ 1635.970325][ T9668] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1635.970358][ T9668] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1636.000835][ T9668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1636.000868][ T9668] usb 1-1: Product: syz
[ 1636.000885][ T9668] usb 1-1: Manufacturer: syz
[ 1636.000903][ T9668] usb 1-1: SerialNumber: syz
[ 1636.060148][  T157] team0 (unregistering): Port device team_slave_0 removed
[ 1636.251035][ T9668] kaweth 1-1:1.0: Firmware present in device.
[ 1636.251530][ T9668] kaweth 1-1:1.0: Error reading configuration (-71), no net device created
[ 1636.251812][ T9668] kaweth 1-1:1.0: probe with driver kaweth failed with error -5
[ 1636.294920][ T9668] usb 1-1: USB disconnect, device number 31
[ 1636.466626][T16081] FAULT_INJECTION: forcing a failure.
[ 1636.466626][T16081] name failslab, interval 1, probability 0, space 0, times 0
[ 1636.466666][T16081] CPU: 0 UID: 0 PID: 16081 Comm: syz.2.1847 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1636.466695][T16081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1636.466710][T16081] Call Trace:
[ 1636.466719][T16081]  <TASK>
[ 1636.466731][T16081]  dump_stack_lvl+0xe8/0x150
[ 1636.466771][T16081]  should_fail_ex+0x46b/0x600
[ 1636.466810][T16081]  should_failslab+0xa8/0x100
[ 1636.466847][T16081]  __kvmalloc_node_noprof+0x176/0x890
[ 1636.466884][T16081]  ? traverse+0xf1/0x620
[ 1636.466917][T16081]  ? traverse+0xf1/0x620
[ 1636.466964][T16081]  traverse+0xf1/0x620
[ 1636.467000][T16081]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1636.467026][T16081]  ? seq_read_iter+0xa5/0xcb0
[ 1636.467060][T16081]  seq_read_iter+0xb6b/0xcb0
[ 1636.467111][T16081]  seq_read+0x36a/0x490
[ 1636.467142][T16081]  ? kstrtoull+0x137/0x1d0
[ 1636.467176][T16081]  ? __pfx_seq_read+0x10/0x10
[ 1636.467216][T16081]  ? __import_iovec+0x5d7/0x7e0
[ 1636.467258][T16081]  ? __pfx_seq_read+0x10/0x10
[ 1636.467287][T16081]  proc_reg_read+0x1f6/0x2f0
[ 1636.467324][T16081]  vfs_readv+0x588/0x850
[ 1636.467359][T16081]  ? __pfx_proc_reg_read+0x10/0x10
[ 1636.467397][T16081]  ? __pfx_vfs_readv+0x10/0x10
[ 1636.467444][T16081]  ? __fget_files+0x2a/0x420
[ 1636.467472][T16081]  ? __fget_files+0x3a8/0x420
[ 1636.467496][T16081]  ? __fget_files+0x2a/0x420
[ 1636.467530][T16081]  __x64_sys_preadv+0x19f/0x2c0
[ 1636.467564][T16081]  ? __pfx___x64_sys_preadv+0x10/0x10
[ 1636.467606][T16081]  do_syscall_64+0x166/0x520
[ 1636.467630][T16081]  ? trace_irq_disable+0x3b/0x140
[ 1636.467660][T16081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1636.467685][T16081]  ? clear_bhb_loop+0x70/0xc0
[ 1636.467715][T16081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1636.467738][T16081] RIP: 0033:0x7f4019e8e159
[ 1636.467760][T16081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1636.467781][T16081] RSP: 002b:00007f40180e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1636.467806][T16081] RAX: ffffffffffffffda RBX: 00007f401a115fa0 RCX: 00007f4019e8e159
[ 1636.467824][T16081] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[ 1636.467841][T16081] RBP: 00007f40180e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1636.467857][T16081] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[ 1636.467871][T16081] R13: 00007f401a116038 R14: 00007f401a115fa0 R15: 00007fff32ec3b68
[ 1636.467908][T16081]  </TASK>
[ 1637.412858][T16097] FAULT_INJECTION: forcing a failure.
[ 1637.412858][T16097] name failslab, interval 1, probability 0, space 0, times 0
[ 1637.412907][T16097] CPU: 0 UID: 0 PID: 16097 Comm: syz.0.1851 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1637.412935][T16097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1637.412951][T16097] Call Trace:
[ 1637.412961][T16097]  <TASK>
[ 1637.412972][T16097]  dump_stack_lvl+0xe8/0x150
[ 1637.413013][T16097]  should_fail_ex+0x46b/0x600
[ 1637.413052][T16097]  should_failslab+0xa8/0x100
[ 1637.413090][T16097]  __kmalloc_noprof+0xfb/0x790
[ 1637.413123][T16097]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1637.413159][T16097]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1637.413202][T16097]  tomoyo_realpath_from_path+0xef/0x640
[ 1637.413248][T16097]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1637.413278][T16097]  tomoyo_path_number_perm+0x246/0x5f0
[ 1637.413311][T16097]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1637.413341][T16097]  ? __lock_acquire+0x747/0x2de0
[ 1637.413387][T16097]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1637.413409][T16097]  ? hook_file_ioctl+0x1f5/0x610
[ 1637.413449][T16097]  ? __fget_files+0x2a/0x420
[ 1637.413501][T16097]  ? __fget_files+0x2a/0x420
[ 1637.413524][T16097]  ? __fget_files+0x3a8/0x420
[ 1637.413548][T16097]  ? __fget_files+0x2a/0x420
[ 1637.413588][T16097]  security_file_ioctl+0xc3/0x2a0
[ 1637.413622][T16097]  __se_sys_ioctl+0x47/0x170
[ 1637.413657][T16097]  do_syscall_64+0x166/0x520
[ 1637.413680][T16097]  ? trace_irq_disable+0x3b/0x140
[ 1637.413710][T16097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1637.413734][T16097]  ? clear_bhb_loop+0x70/0xc0
[ 1637.413764][T16097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1637.413787][T16097] RIP: 0033:0x7f8aa6fae159
[ 1637.413809][T16097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1637.413830][T16097] RSP: 002b:00007f8aa5206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1637.413857][T16097] RAX: ffffffffffffffda RBX: 00007f8aa7235fa0 RCX: 00007f8aa6fae159
[ 1637.413883][T16097] RDX: 0000200000000180 RSI: 00000000c0d05605 RDI: 0000000000000003
[ 1637.413900][T16097] RBP: 00007f8aa5206090 R08: 0000000000000000 R09: 0000000000000000
[ 1637.413916][T16097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1637.413930][T16097] R13: 00007f8aa7236038 R14: 00007f8aa7235fa0 R15: 00007ffd5b3ea4e8
[ 1637.413966][T16097]  </TASK>
[ 1637.416643][T16097] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1637.677044][ T7462] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1637.899277][ T7462] usb 3-1: Using ep0 maxpacket: 32
[ 1637.936215][ T7462] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1637.936275][ T7462] usb 3-1: New USB device found, idVendor=093a, idProduct=2461, bcdDevice=35.29
[ 1637.939933][ T7462] usb 3-1: config 10 has an invalid interface number: 208 but max is 0
[ 1637.939963][ T7462] usb 3-1: config 10 has no interface number 0
[ 1637.940000][ T7462] usb 3-1: config 10 interface 208 has no altsetting 0
[ 1637.956492][ T7462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.956579][ T7462] usb 3-1: Product: syz
[ 1637.956663][ T7462] usb 3-1: Manufacturer: syz
[ 1637.956708][ T7462] usb 3-1: SerialNumber: syz
[ 1638.782787][ T7462] gspca_main: pac207-2.14.0 probing 093a:2461
[ 1638.783309][ T7462] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[ 1638.800210][ T7462] usb 3-1: USB disconnect, device number 23
[ 1639.212560][T16121] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1639.331337][  T157] IPVS: stop unused estimator thread 0...
[ 1639.449514][ T7462] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1639.493135][ T5248] 8021q: adding VLAN 0 to HW filter on device eth19
[ 1639.611232][ T7462] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1639.612865][ T7462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1639.661114][ T7462] usb 1-1: config 0 descriptor??
[ 1639.681014][ T7462] cp210x 1-1:0.0: cp210x converter detected
[ 1639.699412][T13996] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1639.699746][T13996] Bluetooth: hci2: Injecting HCI hardware error event
[ 1639.711965][T15709] Bluetooth: hci2: hardware error 0x00
[ 1640.237843][T16137] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present
[ 1642.245173][ T7462] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71
[ 1642.245694][ T7462] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1642.245749][ T7462] cp210x 1-1:0.0: GPIO initialisation failed: -71
[ 1642.283731][ T7462] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1642.320892][ T7462] usb 1-1: USB disconnect, device number 32
[ 1642.342892][ T7462] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1642.345256][ T7462] cp210x 1-1:0.0: device disconnected
[ 1642.659421][T15709] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1642.972989][  T157] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1643.010877][T16171] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1643.011515][T16171] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1858'.
[ 1643.499931][T16158] batadv_slave_1: entered promiscuous mode
[ 1643.590366][T16163] batadv_slave_1: left promiscuous mode
[ 1643.631818][T15990] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1643.632415][T15990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1643.632567][T15990] bridge_slave_0: entered allmulticast mode
[ 1643.637571][T15990] bridge_slave_0: entered promiscuous mode
[ 1644.246843][  T157] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1644.576286][T15941] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1644.576547][T15941] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1644.576759][T15941] bridge_slave_0: entered allmulticast mode
[ 1644.600886][T15941] bridge_slave_0: entered promiscuous mode
[ 1644.607150][T15990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1644.607306][T15990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1644.607531][T15990] bridge_slave_1: entered allmulticast mode
[ 1644.638343][T15990] bridge_slave_1: entered promiscuous mode
[ 1644.884959][T15941] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1644.885113][T15941] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1644.885377][T15941] bridge_slave_1: entered allmulticast mode
[ 1644.915788][T15941] bridge_slave_1: entered promiscuous mode
[ 1644.966905][T15961] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1644.967037][T15961] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1644.967254][T15961] bridge_slave_0: entered allmulticast mode
[ 1644.996193][T15961] bridge_slave_0: entered promiscuous mode
[ 1645.413735][  T157] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1645.454196][T15961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1645.454346][T15961] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1645.454560][T15961] bridge_slave_1: entered allmulticast mode
[ 1645.457630][T15961] bridge_slave_1: entered promiscuous mode
[ 1645.543773][T15990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1645.655121][T15941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1645.658955][T15990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1645.885705][T15941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1645.913505][T15961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1647.284472][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.284518][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.284547][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.284577][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.284607][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.284633][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.284661][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.284701][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.284730][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.284760][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1647.336809][  T157] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1647.938379][T15961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1647.946640][ T1001] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[ 1648.224024][T15990] team0: Port device team_slave_0 added
[ 1648.323568][T15990] team0: Port device team_slave_1 added
[ 1648.333993][T15941] team0: Port device team_slave_0 added
[ 1648.533550][T15941] team0: Port device team_slave_1 added
[ 1648.535884][T15961] team0: Port device team_slave_0 added
[ 1648.713739][T15961] team0: Port device team_slave_1 added
[ 1648.714496][T15990] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1648.714511][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1648.714534][T15990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1648.816058][T15990] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1648.816113][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1648.816199][T15990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1649.060749][T15941] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1649.060765][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1649.060787][T15941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1649.372012][T15941] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1649.372034][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1649.372066][T15941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1649.403936][T15961] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1649.404000][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1649.429638][T15961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1649.534587][T15961] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1649.534603][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1649.534625][T15961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1650.247856][T15990] hsr_slave_0: entered promiscuous mode
[ 1650.257266][T15990] hsr_slave_1: entered promiscuous mode
[ 1650.277537][T15990] debugfs: 'hsr0' already exists in 'hsr'
[ 1650.277572][T15990] Cannot create hsr debugfs directory
[ 1652.317494][T10522] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1652.460049][T10522] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[ 1652.461338][T10522] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1652.461373][T10522] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1652.463939][T10522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1652.463967][T10522] usb 3-1: Product: syz
[ 1652.463983][T10522] usb 3-1: Manufacturer: syz
[ 1652.464000][T10522] usb 3-1: SerialNumber: syz
[ 1652.793778][T10522] kaweth 3-1:1.0: Firmware present in device.
[ 1652.809552][T10522] kaweth 3-1:1.0: Error reading configuration (-71), no net device created
[ 1652.809832][T10522] kaweth 3-1:1.0: probe with driver kaweth failed with error -5
[ 1652.883188][T10522] usb 3-1: USB disconnect, device number 24
[ 1653.051320][T15941] hsr_slave_0: entered promiscuous mode
[ 1653.052813][T15941] hsr_slave_1: entered promiscuous mode
[ 1653.053830][T15941] debugfs: 'hsr0' already exists in 'hsr'
[ 1653.053860][T15941] Cannot create hsr debugfs directory
[ 1653.057517][ T5248] 8021q: adding VLAN 0 to HW filter on device eth20
[ 1653.308278][T15961] hsr_slave_0: entered promiscuous mode
[ 1653.315750][T15961] hsr_slave_1: entered promiscuous mode
[ 1653.316522][T15961] debugfs: 'hsr0' already exists in 'hsr'
[ 1653.316551][T15961] Cannot create hsr debugfs directory
[ 1654.381354][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'.
[ 1655.699392][T14104] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1655.705274][  T157] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1655.849286][T14104] usb 1-1: Using ep0 maxpacket: 8
[ 1655.861237][T14104] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1655.861374][T14104] usb 1-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a
[ 1655.863177][T14104] usb 1-1: config 246 has an invalid interface number: 91 but max is 0
[ 1655.863213][T14104] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[ 1655.863291][T14104] usb 1-1: config 246 has no interface number 0
[ 1655.863426][T14104] usb 1-1: config 246 interface 91 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1655.863503][T14104] usb 1-1: config 246 interface 91 has no altsetting 0
[ 1655.866776][T14104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1655.866873][T14104] usb 1-1: Product: syz
[ 1655.866924][T14104] usb 1-1: Manufacturer: syz
[ 1655.866974][T14104] usb 1-1: SerialNumber: syz
[ 1656.767590][  T157] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1657.338833][T14104] uvcvideo 1-1:246.91: probe with driver uvcvideo failed with error -22
[ 1657.417996][T14104] usb 1-1: USB disconnect, device number 33
[ 1659.067200][   T38] kauditd_printk_skb: 79 callbacks suppressed
[ 1659.067222][   T38] audit: type=1326 audit(1790452168.534:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16271 comm="syz.0.1878" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aa6fae159 code=0x0
[ 1659.117055][  T157] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1659.604067][  T157] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1660.097854][T16279] jffs2: notice: (16279) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (2 unchecked, 2 orphan) and 15 of xref (0 dead, 12 orphan) found.
[ 1661.140779][ T5578] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1661.145777][T16298] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1884'.
[ 1661.241375][T16298] bond1: Unable to set peer notification delay as MII monitoring is disabled
[ 1661.289419][T16298] bond1 (unregistering): Released all slaves
[ 1661.322791][ T5578] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1661.322853][ T5578] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1661.324103][ T5578] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1661.324149][ T5578] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1661.324180][ T5578] usb 3-1: config 1 interface 0 has no altsetting 1
[ 1661.378666][ T5578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1661.378699][ T5578] usb 3-1: Product: syz
[ 1661.378717][ T5578] usb 3-1: Manufacturer: syz
[ 1661.378734][ T5578] usb 3-1: SerialNumber: syz
[ 1661.456404][ T5578] smsusb:smsusb_probe: board id=8, interface number 0
[ 1661.675953][ T5578] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1661.676007][ T5578] smsusb 3-1:1.0: probe with driver smsusb failed with error -71
[ 1661.725109][ T5578] usb 3-1: USB disconnect, device number 25
[ 1661.962596][ T5248] 8021q: adding VLAN 0 to HW filter on device eth25

syzkaller
syzkaller login: [ 1664.379305][T13561] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1664.530235][T13561] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1664.533301][T13561] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1664.533333][T13561] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.533356][T13561] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1664.533412][T13561] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1664.538491][T13561] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1664.538521][T13561] usb 3-1: Product: syz
[ 1664.538539][T13561] usb 3-1: Manufacturer: syz
[ 1664.626050][T13561] cdc_wdm 3-1:1.0: skipping garbage
[ 1664.626076][T13561] cdc_wdm 3-1:1.0: skipping garbage
[ 1664.643811][T13561] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1664.643909][T13561] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1664.830260][ T5578] usb 3-1: USB disconnect, device number 26
[ 1664.868021][ T5248] 8021q: adding VLAN 0 to HW filter on device eth26
[ 1665.459268][ T5578] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1665.459630][  T157] bridge_slave_1: left allmulticast mode
[ 1665.459666][  T157] bridge_slave_1: left promiscuous mode
[ 1665.459975][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1665.593995][  T157] bridge_slave_0: left allmulticast mode
[ 1665.594025][  T157] bridge_slave_0: left promiscuous mode
[ 1665.594233][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1665.613471][ T5578] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1665.621428][ T5578] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1665.621511][ T5578] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1665.621567][ T5578] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1665.621713][ T5578] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1665.636083][ T5578] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1665.636450][ T5578] usb 3-1: Product: syz
[ 1665.636502][ T5578] usb 3-1: Manufacturer: syz
[ 1665.695262][ T5578] cdc_wdm 3-1:1.0: skipping garbage
[ 1665.695280][ T5578] cdc_wdm 3-1:1.0: skipping garbage
[ 1665.697234][ T5578] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1665.697267][ T5578] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1665.929570][  T157] bridge_slave_1: left allmulticast mode
[ 1665.929602][  T157] bridge_slave_1: left promiscuous mode
[ 1665.929862][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1666.030781][  T157] bridge_slave_0: left allmulticast mode
[ 1666.030824][  T157] bridge_slave_0: left promiscuous mode
[ 1666.031069][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1666.229581][  T157] bridge_slave_1: left allmulticast mode
[ 1666.229616][  T157] bridge_slave_1: left promiscuous mode
[ 1666.229900][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1666.340574][  T157] bridge_slave_0: left allmulticast mode
[ 1666.340611][  T157] bridge_slave_0: left promiscuous mode
[ 1666.340865][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1666.571222][  T157] bridge_slave_1: left allmulticast mode
[ 1666.571264][  T157] bridge_slave_1: left promiscuous mode
[ 1666.571598][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1666.625978][    T9] usb 3-1: USB disconnect, device number 27
[ 1666.730655][  T157] bridge_slave_0: left allmulticast mode
[ 1666.730698][  T157] bridge_slave_0: left promiscuous mode
[ 1666.731611][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1668.770307][T16350] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1668.951173][  T157] bridge_slave_1: left allmulticast mode
[ 1668.951215][  T157] bridge_slave_1: left promiscuous mode
[ 1668.951498][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1669.019343][ T5578] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1669.121176][  T157] bridge_slave_0: left allmulticast mode
[ 1669.121218][  T157] bridge_slave_0: left promiscuous mode
[ 1669.121484][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1669.171126][ T5578] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1669.173051][ T5578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1669.190675][ T5578] usb 3-1: config 0 descriptor??
[ 1669.208003][ T5578] cp210x 3-1:0.0: cp210x converter detected
[ 1669.741427][T16356] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present
[ 1670.496320][ T5578] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71
[ 1670.496893][ T5578] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1670.496946][ T5578] cp210x 3-1:0.0: GPIO initialisation failed: -71
[ 1670.532811][ T5578] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1670.581792][ T5578] usb 3-1: USB disconnect, device number 28
[ 1670.626056][ T5578] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1670.645595][ T5578] cp210x 3-1:0.0: device disconnected
[ 1674.759265][ T5578] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1674.841997][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1674.919448][ T5578] usb 3-1: Using ep0 maxpacket: 32
[ 1674.921645][ T5578] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1674.928761][ T5578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1674.978689][  T157] bond0 (unregistering): Released all slaves
[ 1674.996162][ T5578] usb 3-1: config 0 descriptor??
[ 1675.201966][ T5578] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1675.278368][ T5578] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1675.285015][ T5578] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1675.285193][ T5578] usb 3-1: media controller created
[ 1675.324951][ T5578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1675.636462][  T157] bond0 (unregistering): Released all slaves
[ 1675.999879][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1676.109318][ T9668] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1676.112041][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1676.181888][  T157] bond0 (unregistering): Released all slaves
[ 1676.279345][ T9668] usb 1-1: Using ep0 maxpacket: 8
[ 1676.283806][ T9668] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1676.285955][ T9668] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1676.286098][ T9668] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1676.286135][ T9668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1676.286168][ T9668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1676.286266][ T9668] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1676.414956][ T9668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1676.415043][ T9668] usb 1-1: Product: syz
[ 1676.415056][ T9668] usb 1-1: Manufacturer: syz
[ 1676.415068][ T9668] usb 1-1: SerialNumber: syz
[ 1676.444674][ T9668] usb 1-1: config 0 descriptor??
[ 1676.980642][ T9668] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110
[ 1677.010451][ T9668] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[ 1677.160165][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1677.241250][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1677.266391][  T157] bond0 (unregistering): Released all slaves
[ 1678.112920][ T5578] az6027: usb out operation failed. (-110)
[ 1678.112946][ T5578] stb0899_attach: Driver disabled by Kconfig
[ 1678.112988][ T5578] az6027: no front-end attached
[ 1678.112988][ T5578] 
[ 1678.114550][ T5578] az6027: usb out operation failed. (-32)
[ 1678.114572][ T5578] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1678.117158][ T5578] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19
[ 1678.177962][ T5578] dvb-usb: schedule remote query interval to 400 msecs.
[ 1678.177991][ T5578] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1678.260001][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1678.340065][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1678.382622][  T157] bond0 (unregistering): Released all slaves
[ 1678.398241][  T157] bond1 (unregistering): Released all slaves
[ 1678.785498][T13996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1678.803559][T13444] usb 3-1: USB disconnect, device number 29
[ 1678.808494][T13996] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1678.848789][T13996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1678.928458][T13996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1678.942966][T13996] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1679.019311][   T37] usb 1-1: USB disconnect, device number 34
[ 1679.221976][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[ 1679.222074][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[ 1679.997177][T13444] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1680.185387][T16391] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL)
[ 1680.185419][T16391] device-mapper: ioctl: error adding target to table
[ 1681.107029][T13996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1681.169616][T13996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1681.256143][T16384] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1681.268349][T13996] Bluetooth: hci4: command tx timeout
[ 1681.285676][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1681.313358][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1681.344900][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1681.522346][T16384] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[ 1681.576057][T16384] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1681.576097][T16384] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1681.599162][T16384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1681.599201][T16384] usb 3-1: Product: syz
[ 1681.599219][T16384] usb 3-1: Manufacturer: syz
[ 1681.599236][T16384] usb 3-1: SerialNumber: syz
[ 1681.975599][T16418] FAULT_INJECTION: forcing a failure.
[ 1681.975599][T16418] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1681.975643][T16418] CPU: 1 UID: 0 PID: 16418 Comm: syz.0.1901 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1681.975676][T16418] Tainted: [L]=SOFTLOCKUP
[ 1681.975685][T16418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1681.975701][T16418] Call Trace:
[ 1681.975710][T16418]  <TASK>
[ 1681.975721][T16418]  dump_stack_lvl+0xe8/0x150
[ 1681.975763][T16418]  should_fail_ex+0x46b/0x600
[ 1681.975802][T16418]  _copy_to_user+0x31/0xb0
[ 1681.975841][T16418]  simple_read_from_buffer+0xe1/0x170
[ 1681.975873][T16418]  proc_fail_nth_read+0x1be/0x230
[ 1681.975906][T16418]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1681.975939][T16418]  ? rw_verify_area+0x250/0x4d0
[ 1681.975968][T16418]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1681.975997][T16418]  vfs_read+0x219/0xa90
[ 1681.976033][T16418]  ? __pfx_vfs_read+0x10/0x10
[ 1681.976060][T16418]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1681.976090][T16418]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1681.976121][T16418]  ? mutex_lock_nested+0x152/0x1d0
[ 1681.976151][T16418]  ? fdget_pos+0x252/0x320
[ 1681.976186][T16418]  ksys_read+0x156/0x270
[ 1681.976216][T16418]  ? __pfx_ksys_read+0x10/0x10
[ 1681.976256][T16418]  do_syscall_64+0x166/0x520
[ 1681.976279][T16418]  ? trace_irq_disable+0x3b/0x140
[ 1681.976310][T16418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1681.976337][T16418]  ? clear_bhb_loop+0x70/0xc0
[ 1681.976364][T16418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1681.976389][T16418] RIP: 0033:0x7f8aa6f6e98e
[ 1681.976410][T16418] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1681.976430][T16418] RSP: 002b:00007f8aa51e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1681.976455][T16418] RAX: ffffffffffffffda RBX: 00007f8aa51e56c0 RCX: 00007f8aa6f6e98e
[ 1681.976476][T16418] RDX: 000000000000000f RSI: 00007f8aa51e50a0 RDI: 0000000000000008
[ 1681.976491][T16418] RBP: 00007f8aa51e5090 R08: 0000000000000000 R09: 0000000000000000
[ 1681.976505][T16418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1681.976521][T16418] R13: 00007f8aa7236128 R14: 00007f8aa7236090 R15: 00007ffd5b3ea4e8
[ 1681.976558][T16418]  </TASK>
[ 1681.976646][T16384] kaweth 3-1:1.0: Firmware present in device.
[ 1681.977576][T16384] kaweth 3-1:1.0: Error reading configuration (-71), no net device created
[ 1681.977860][T16384] kaweth 3-1:1.0: probe with driver kaweth failed with error -5
[ 1682.294013][T16384] usb 3-1: USB disconnect, device number 30
[ 1682.767164][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1903'.
[ 1682.767230][T16424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1903'.
[ 1682.922451][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'.
[ 1682.974013][ T5248] 8021q: adding VLAN 0 to HW filter on device eth27
[ 1683.300451][T15709] Bluetooth: hci4: command tx timeout
[ 1683.571137][T16424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1903'.
[ 1683.699532][T15709] Bluetooth: hci5: command tx timeout
[ 1685.390887][T15709] Bluetooth: hci4: command tx timeout
[ 1686.347499][T15709] Bluetooth: hci5: command tx timeout
[ 1687.050243][ T5596] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1687.152055][ T5596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1687.161098][ T5596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1687.181617][ T5596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1687.186643][ T5596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1687.469947][ T5596] Bluetooth: hci4: command tx timeout
[ 1688.446737][ T5596] Bluetooth: hci5: command tx timeout
[ 1688.464469][ T5248] 8021q: adding VLAN 0 to HW filter on device eth28
[ 1688.510613][T14104] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1688.665709][T14104] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[ 1688.666974][T14104] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1688.667008][T14104] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1688.672261][T14104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1688.672289][T14104] usb 3-1: Product: syz
[ 1688.672306][T14104] usb 3-1: Manufacturer: syz
[ 1688.672327][T14104] usb 3-1: SerialNumber: syz
[ 1688.972648][T14104] kaweth 3-1:1.0: Firmware present in device.
[ 1688.973296][T14104] kaweth 3-1:1.0: Error reading configuration (-71), no net device created
[ 1688.973697][T14104] kaweth 3-1:1.0: probe with driver kaweth failed with error -5
[ 1689.015563][T14104] usb 3-1: USB disconnect, device number 31
[ 1689.299218][   T37] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1689.379379][ T5596] Bluetooth: hci7: command tx timeout
[ 1689.529198][   T37] usb 1-1: Using ep0 maxpacket: 16
[ 1689.540636][   T37] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1689.550179][   T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1689.550213][   T37] usb 1-1: Product: syz
[ 1689.550232][   T37] usb 1-1: Manufacturer: syz
[ 1689.550249][   T37] usb 1-1: SerialNumber: syz
[ 1689.820896][T16498] FAULT_INJECTION: forcing a failure.
[ 1689.820896][T16498] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1689.820940][T16498] CPU: 0 UID: 0 PID: 16498 Comm: syz.0.1910 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1689.820973][T16498] Tainted: [L]=SOFTLOCKUP
[ 1689.820982][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1689.820999][T16498] Call Trace:
[ 1689.821009][T16498]  <TASK>
[ 1689.821020][T16498]  dump_stack_lvl+0xe8/0x150
[ 1689.821062][T16498]  should_fail_ex+0x46b/0x600
[ 1689.821100][T16498]  _copy_to_user+0x31/0xb0
[ 1689.821137][T16498]  simple_read_from_buffer+0xe1/0x170
[ 1689.821170][T16498]  proc_fail_nth_read+0x1be/0x230
[ 1689.821205][T16498]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1689.821239][T16498]  ? rw_verify_area+0x250/0x4d0
[ 1689.821269][T16498]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1689.821299][T16498]  vfs_read+0x219/0xa90
[ 1689.821337][T16498]  ? __pfx_vfs_read+0x10/0x10
[ 1689.821368][T16498]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1689.821397][T16498]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1689.821421][T16498]  ? mutex_lock_nested+0x152/0x1d0
[ 1689.821451][T16498]  ? fdget_pos+0x252/0x320
[ 1689.821490][T16498]  ksys_read+0x156/0x270
[ 1689.821530][T16498]  ? __pfx_ksys_read+0x10/0x10
[ 1689.821571][T16498]  do_syscall_64+0x166/0x520
[ 1689.821594][T16498]  ? trace_irq_disable+0x3b/0x140
[ 1689.821625][T16498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1689.821661][T16498]  ? clear_bhb_loop+0x70/0xc0
[ 1689.821691][T16498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1689.821715][T16498] RIP: 0033:0x7f8aa6f6e98e
[ 1689.821738][T16498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1689.821759][T16498] RSP: 002b:00007f8aa5205fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1689.821785][T16498] RAX: ffffffffffffffda RBX: 00007f8aa52066c0 RCX: 00007f8aa6f6e98e
[ 1689.821804][T16498] RDX: 000000000000000f RSI: 00007f8aa52060a0 RDI: 0000000000000004
[ 1689.821819][T16498] RBP: 00007f8aa5206090 R08: 0000000000000000 R09: 0000000000000000
[ 1689.821835][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1689.821850][T16498] R13: 00007f8aa7236038 R14: 00007f8aa7235fa0 R15: 00007ffd5b3ea4e8
[ 1689.821888][T16498]  </TASK>
[ 1690.157677][   T37] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1690.362590][   T37] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1690.368887][   T37] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1690.368965][   T37] usb 1-1: media controller created
[ 1690.455443][   T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1690.499272][ T5596] Bluetooth: hci5: command tx timeout
[ 1690.875463][   T37] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1690.930306][   T37] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1690.938478][   T37] usb 1-1: USB disconnect, device number 35
[ 1690.979282][T13561] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[ 1691.130142][T13561] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[ 1691.131669][T13561] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1691.131697][T13561] usb 3-1: config 0 has no interface number 0
[ 1691.131747][T13561] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1691.131778][T13561] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1691.131804][T13561] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1691.131835][T13561] usb 3-1: config 0 interface 1 has no altsetting 0
[ 1691.133339][T13561] usb 3-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[ 1691.133366][T13561] usb 3-1: Manufacturer: syz
[ 1691.228596][T13561] usb 3-1: config 0 descriptor??
[ 1691.339205][   T37] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1691.464206][ T5596] Bluetooth: hci7: command tx timeout
[ 1691.490110][   T37] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[ 1691.495736][   T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1691.495796][   T37] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1691.495908][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1691.931219][   T37] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report
[ 1691.932481][   T37] ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -2
[ 1693.259400][T13561] uclogic 0003:145F:0212.0005: failed retrieving string descriptor #100: -71
[ 1693.259468][T13561] uclogic 0003:145F:0212.0005: failed retrieving pen parameters: -71
[ 1693.259576][T13561] uclogic 0003:145F:0212.0005: pen probing failed: -71
[ 1693.259645][T13561] uclogic 0003:145F:0212.0005: failed probing parameters: -71
[ 1693.259795][T13561] uclogic 0003:145F:0212.0005: probe with driver uclogic failed with error -71
[ 1693.315821][T13561] usb 3-1: USB disconnect, device number 32
[ 1693.549510][ T5596] Bluetooth: hci7: command tx timeout
[ 1693.714232][T16384] usb 1-1: USB disconnect, device number 36
[ 1693.765237][T13561] kernel read not supported for file /trace_pipe (pid: 13561 comm: kworker/1:4)
[ 1695.619980][ T5596] Bluetooth: hci7: command tx timeout
[ 1695.859784][T13561] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1696.069279][T13561] usb 3-1: device descriptor read/64, error -71
[ 1696.359243][T13561] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1696.489384][T13561] usb 3-1: device descriptor read/64, error -71
[ 1696.599711][T13561] usb usb3-port1: attempt power cycle
[ 1696.939262][T13561] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1696.959971][T13561] usb 3-1: device descriptor read/8, error -71
[ 1697.199635][T13561] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1697.232288][T13561] usb 3-1: device descriptor read/8, error -71
[ 1697.343434][T13561] usb usb3-port1: unable to enumerate USB device
[ 1700.445716][  T157] hsr_slave_0: left promiscuous mode
[ 1700.491664][  T157] hsr_slave_1: left promiscuous mode
[ 1700.492706][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1700.532193][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1700.760864][  T157] hsr_slave_0: left promiscuous mode
[ 1700.813510][  T157] hsr_slave_1: left promiscuous mode
[ 1700.824426][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1700.824509][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1700.888051][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1700.888076][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1701.020031][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'.
[ 1701.234145][  T157] hsr_slave_0: left promiscuous mode
[ 1701.270469][  T157] hsr_slave_1: left promiscuous mode
[ 1701.272811][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1701.272845][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1701.511621][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1701.511648][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1701.930376][   T38] audit: type=1326 audit(1790452211.394:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16617 comm="syz.2.1923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4019e8e159 code=0x7ffc0000
[ 1701.930441][   T38] audit: type=1326 audit(1790452211.394:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16617 comm="syz.2.1923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4019e8e159 code=0x7ffc0000
[ 1701.932077][   T38] audit: type=1326 audit(1790452211.404:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16617 comm="syz.2.1923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4019e8e159 code=0x7ffc0000
[ 1701.932136][   T38] audit: type=1326 audit(1790452211.404:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16617 comm="syz.2.1923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4019e8e159 code=0x7ffc0000
[ 1701.932185][   T38] audit: type=1326 audit(1790452211.404:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16617 comm="syz.2.1923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4019e8e159 code=0x7ffc0000
[ 1701.932954][T16619] FAULT_INJECTION: forcing a failure.
[ 1701.932954][T16619] name failslab, interval 1, probability 0, space 0, times 0
[ 1701.932981][T16619] CPU: 1 UID: 0 PID: 16619 Comm: syz.2.1923 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1701.933003][T16619] Tainted: [L]=SOFTLOCKUP
[ 1701.933009][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1701.933020][T16619] Call Trace:
[ 1701.933027][T16619]  <TASK>
[ 1701.933034][T16619]  dump_stack_lvl+0xe8/0x150
[ 1701.933063][T16619]  should_fail_ex+0x46b/0x600
[ 1701.933089][T16619]  should_failslab+0xa8/0x100
[ 1701.933116][T16619]  ? audit_log_start+0x108/0xa30
[ 1701.933133][T16619]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1701.933156][T16619]  ? audit_log_start+0x108/0xa30
[ 1701.933177][T16619]  audit_log_start+0x108/0xa30
[ 1701.933198][T16619]  ? __pfx_audit_log_start+0x10/0x10
[ 1701.933216][T16619]  ? get_pid_task+0x20/0x1f0
[ 1701.933236][T16619]  ? get_pid_task+0x20/0x1f0
[ 1701.933251][T16619]  ? get_pid_task+0x20/0x1f0
[ 1701.933274][T16619]  audit_seccomp+0x63/0x190
[ 1701.933302][T16619]  __seccomp_filter+0xd14/0x1de0
[ 1701.933336][T16619]  ? __pfx___seccomp_filter+0x10/0x10
[ 1701.933360][T16619]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1701.933377][T16619]  ? rt_mutex_slowunlock+0x219/0x460
[ 1701.933399][T16619]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1701.933415][T16619]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1701.933443][T16619]  ? fput+0xa0/0xd0
[ 1701.933475][T16619]  ? __pfx_ksys_write+0x10/0x10
[ 1701.933498][T16619]  ? __seccomp_permit_syscall+0xe7/0x2b0
[ 1701.933527][T16619]  do_syscall_64+0x11f/0x520
[ 1701.933542][T16619]  ? trace_irq_disable+0x3b/0x140
[ 1701.933563][T16619]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1701.933580][T16619]  ? clear_bhb_loop+0x70/0xc0
[ 1701.933600][T16619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1701.933616][T16619] RIP: 0033:0x7f4019e8e159
[ 1701.933631][T16619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1701.933645][T16619] RSP: 002b:00007f40180e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 1701.933664][T16619] RAX: ffffffffffffffda RBX: 00007f401a115fa0 RCX: 00007f4019e8e159
[ 1701.933676][T16619] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000003e
[ 1701.933686][T16619] RBP: 00007f40180e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1701.933696][T16619] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1701.933707][T16619] R13: 00007f401a116038 R14: 00007f401a115fa0 R15: 00007fff32ec3b68
[ 1701.933737][T16619]  </TASK>
[ 1701.933783][   T38] audit: type=1326 audit(1790452211.404:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16617 comm="syz.2.1923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4019e4e98e code=0x7ffc0000
[ 1701.933820][   T38] audit: type=1326 audit(1790452211.404:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16617 comm="syz.2.1923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4019e4e98e code=0x7ffc0000
[ 1701.935638][T16619] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[ 1701.935658][T16619] audit: out of memory in audit_log_start
[ 1701.935921][   T38] audit: type=1326 audit(1790452211.404:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16617 comm="syz.2.1923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4019e4e98e code=0x7ffc0000
[ 1702.709212][ T9642] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[ 1702.869963][ T9642] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1702.870968][ T9642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1702.870993][ T9642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1702.871032][ T9642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1702.878884][ T9642] usb 1-1: config 0 descriptor??
[ 1703.788174][ T9642] usb 1-1: string descriptor 0 read error: -22
[ 1703.868058][  T157] veth1_macvtap: left promiscuous mode
[ 1703.883032][  T157] veth0_macvtap: left promiscuous mode
[ 1703.905260][  T157] veth1_vlan: left promiscuous mode
[ 1703.905909][  T157] veth0_vlan: left promiscuous mode
[ 1704.089699][ T9642] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0006/input/input20
[ 1704.195822][  T157] veth1_macvtap: left promiscuous mode
[ 1704.195936][  T157] veth0_macvtap: left promiscuous mode
[ 1704.196219][  T157] veth1_vlan: left promiscuous mode
[ 1704.226134][  T157] veth0_vlan: left promiscuous mode
[ 1704.321353][T16618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1704.322106][T16618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1705.272482][ T9642] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[ 1705.680276][ T9668] usb 1-1: reset full-speed USB device number 37 using dummy_hcd
[ 1707.630991][T16384] usb 1-1: USB disconnect, device number 37
[ 1707.954576][T16651] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1707.972863][T16651] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1707.976161][T16651] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1707.980397][T16651] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1708.595204][T16658] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1709.325779][  T157] team0 (unregistering): Port device team_slave_1 removed
[ 1709.403984][  T157] team0 (unregistering): Port device team_slave_0 removed
[ 1710.222303][  T157] team0 (unregistering): Port device team_slave_1 removed
[ 1710.250592][  T157] team0 (unregistering): Port device team_slave_0 removed
[ 1710.934642][  T157] team0 (unregistering): Port device team_slave_1 removed
[ 1711.140245][  T157] team0 (unregistering): Port device team_slave_0 removed
[ 1711.306444][ T5596] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1712.064013][T16374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1712.064335][T16374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1712.064614][T16374] bridge_slave_0: entered allmulticast mode
[ 1712.097844][T16374] bridge_slave_0: entered promiscuous mode
[ 1712.136219][   T38] kauditd_printk_skb: 6 callbacks suppressed
[ 1712.136243][   T38] audit: type=1800 audit(1790452221.604:2766): pid=16668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1930" name=08 dev="sda1" ino=2114 res=0 errno=0
[ 1712.226540][T16374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1712.226673][T16374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1712.226911][T16374] bridge_slave_1: entered allmulticast mode
[ 1712.307144][T16374] bridge_slave_1: entered promiscuous mode
[ 1712.717238][   T38] audit: type=1804 audit(1790452222.164:2767): pid=16673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1930" name=2F6E6577726F6F742F37372F6D6E742F08 dev="sda1" ino=2114 res=1 errno=0
[ 1713.049639][   T38] audit: type=1800 audit(1790452222.514:2768): pid=16672 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1930" name=08 dev="sda1" ino=2114 res=0 errno=0
[ 1713.143921][   T38] audit: type=1800 audit(1790452222.604:2769): pid=16673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1930" name=08 dev="sda1" ino=2114 res=0 errno=0
[ 1713.381922][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1713.479931][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1713.613754][T16411] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1713.613890][T16411] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1713.614112][T16411] bridge_slave_0: entered allmulticast mode
[ 1713.641632][T16411] bridge_slave_0: entered promiscuous mode
[ 1713.922053][T16384] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1714.140209][T16384] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1714.141898][T16384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1714.147797][T16384] usb 3-1: config 0 descriptor??
[ 1714.174226][T16384] cp210x 3-1:0.0: cp210x converter detected
[ 1714.248691][T16411] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1714.275679][T16411] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1714.276414][T16411] bridge_slave_1: entered allmulticast mode
[ 1714.300886][T16411] bridge_slave_1: entered promiscuous mode
[ 1714.759465][T16696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1932'.
[ 1715.287209][T16698] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present
[ 1717.153317][T16384] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71
[ 1717.153932][T16384] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1717.153983][T16384] cp210x 3-1:0.0: GPIO initialisation failed: -71
[ 1718.829387][T16384] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1718.851896][T16384] usb 3-1: USB disconnect, device number 37
[ 1718.879768][T16384] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1718.880774][T16384] cp210x 3-1:0.0: device disconnected
[ 1719.025481][T16374] team0: Port device team_slave_0 added
[ 1719.147420][T16374] team0: Port device team_slave_1 added
[ 1719.513203][T16411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1719.586796][T16384] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[ 1719.754725][T16384] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[ 1719.777243][T16384] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[ 1719.777277][T16384] usb 3-1: Product: syz
[ 1719.777293][T16384] usb 3-1: Manufacturer: syz
[ 1719.777311][T16384] usb 3-1: SerialNumber: syz
[ 1719.816871][T16384] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[ 1720.376907][T16411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1720.582370][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1720.582391][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1720.582422][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1720.832630][T16714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1720.833858][T16714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1720.882207][T16384] vp7045: USB control message 'in' went wrong.
[ 1720.882229][T16384] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1720.882270][T16384] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[ 1720.936302][T16384] usb 3-1: USB disconnect, device number 38
[ 1721.048657][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1721.048679][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1721.048707][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1721.119742][T16411] team0: Port device team_slave_0 added
[ 1721.343784][T16411] team0: Port device team_slave_1 added
[ 1722.312779][T16411] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1722.312801][T16411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1722.312831][T16411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1722.473835][T16374] hsr_slave_0: entered promiscuous mode
[ 1722.476109][T16374] hsr_slave_1: entered promiscuous mode
[ 1722.479781][T16411] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1722.479800][T16411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1722.479832][T16411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1722.629560][   T37] usb 3-1: new low-speed USB device number 39 using dummy_hcd
[ 1722.721750][T16480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1722.722689][T16480] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1722.722892][T16480] bridge_slave_0: entered allmulticast mode
[ 1722.742409][T16480] bridge_slave_0: entered promiscuous mode
[ 1723.885283][   T37] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[ 1723.923089][   T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[ 1723.923129][   T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt
[ 1723.923170][   T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1723.928882][   T37] usb 3-1: config 0 descriptor??
[ 1724.017321][T16739] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1724.017459][T16739] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1724.063768][   T37] usb 3-1: probing VID:PID(0424:012C)   
[ 1724.300446][   T37] usb 3-1: vub300 testing UNKNOWN EndPoint(0) 81
[ 1724.300469][   T37] usb 3-1: vub300 ignoring EndPoint(0) 81
[ 1724.300488][   T37] usb 3-1: vub300 testing UNKNOWN EndPoint(1) 04
[ 1724.300503][   T37] usb 3-1: vub300 ignoring EndPoint(1) 04
[ 1724.300515][   T37] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1724.427497][   T37] vub300 3-1:0.0: probe with driver vub300 failed with error -22
[ 1724.449218][T16384] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1724.484965][T16480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1724.485077][T16480] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1724.485207][T16480] bridge_slave_1: entered allmulticast mode
[ 1724.487272][T16480] bridge_slave_1: entered promiscuous mode
[ 1724.604670][T16411] hsr_slave_0: entered promiscuous mode
[ 1724.607705][T16411] hsr_slave_1: entered promiscuous mode
[ 1724.613499][T16411] debugfs: 'hsr0' already exists in 'hsr'
[ 1724.613595][T16411] Cannot create hsr debugfs directory
[ 1724.632080][T16384] usb 1-1: Using ep0 maxpacket: 8
[ 1724.636682][T16384] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[ 1724.658493][T16384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1724.658526][T16384] usb 1-1: Product: syz
[ 1724.658543][T16384] usb 1-1: Manufacturer: syz
[ 1724.658560][T16384] usb 1-1: SerialNumber: syz
[ 1724.688721][T16384] usb 1-1: config 0 descriptor??
[ 1724.698957][T16384] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[ 1724.699007][T16384] pctv452e: pctv452e_power_ctrl: 1
[ 1724.699007][T16384] 
[ 1724.714603][T16384] usb 1-1: selecting invalid altsetting 3
[ 1724.714624][T16384] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[ 1724.714624][T16384] 
[ 1724.714644][T16384] dvb-usb: bulk message failed: -22 (5/0)
[ 1724.811848][T16384] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1724.812728][T16384] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[ 1724.812790][T16384] usb 1-1: media controller created
[ 1724.812843][T16384] dvb-usb: bulk message failed: -22 (8/0)
[ 1724.812862][T16384] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[ 1724.812918][T16384] dvb-usb: MAC address reading failed.
[ 1724.946502][T16480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1724.968935][T16747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1725.007355][T16480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1725.043929][T16747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1725.071312][T16747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1725.097895][T16747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1725.120421][T16384] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1725.159647][T16747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1725.160510][T16747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1725.397058][T16480] team0: Port device team_slave_0 added
[ 1725.401935][T16480] team0: Port device team_slave_1 added
[ 1725.688422][T16384] DVB: Unable to find symbol stb0899_attach()
[ 1725.688443][T16384] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[ 1725.875728][ T5578] usb 3-1: USB disconnect, device number 39
[ 1726.052079][T16384] rc_core: IR keymap rc-tt-1500 not found
[ 1726.052102][T16384] Registered IR keymap rc-empty
[ 1726.053838][T16384] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[ 1726.057138][T16384] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input21
[ 1726.121721][T16384] dvb-usb: schedule remote query interval to 100 msecs.
[ 1726.121750][T16384] pctv452e: pctv452e_power_ctrl: 0
[ 1726.121750][T16384] 
[ 1726.121763][T16384] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[ 1726.172425][T16384] usb 1-1: USB disconnect, device number 38
[ 1726.632998][T16384] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[ 1726.667482][T16480] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1726.667519][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1726.667551][T16480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1726.920068][T16480] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1726.920083][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1726.920105][T16480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1727.662350][T16480] hsr_slave_0: entered promiscuous mode
[ 1727.677127][T16480] hsr_slave_1: entered promiscuous mode
[ 1727.693699][T16480] debugfs: 'hsr0' already exists in 'hsr'
[ 1727.693810][T16480] Cannot create hsr debugfs directory
[ 1727.810577][   T37] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1727.812753][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1729.118597][   T37] usb 1-1: Using ep0 maxpacket: 8
[ 1729.177486][   T37] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1729.185039][   T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1729.212833][   T37] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1729.212857][   T37] usb 1-1: Product: syz
[ 1729.212869][   T37] usb 1-1: Manufacturer: syz
[ 1729.212880][   T37] usb 1-1: SerialNumber: syz
[ 1729.557554][   T37] usb 1-1: Invalid connection information received from device
[ 1730.464928][T16374] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1730.504461][ T5578] usb 1-1: USB disconnect, device number 39
[ 1730.625346][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1730.646385][T16374] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1731.217999][  T157] IPVS: stop unused estimator thread 0...
[ 1731.230135][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1731.230955][  T157] IPVS: stop unused estimator thread 0...
[ 1731.264068][T16374] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1731.476487][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1731.495845][T16374] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1731.563728][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1735.601538][T16374] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1738.115601][T16411] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1739.124090][T16411] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1739.584328][T16411] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1739.642407][T16411] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1739.652369][T16411] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1739.679175][ T5578] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1739.771851][T16411] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1739.788240][T16411] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1739.816939][T15709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1739.848680][T15709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1739.860181][ T5578] usb 3-1: Using ep0 maxpacket: 8
[ 1739.861015][ T5578] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1739.862863][T15709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1739.864014][ T5578] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1739.898046][T15709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1739.946116][T15709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1739.948035][ T5578] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1739.948062][ T5578] usb 3-1: Product: syz
[ 1739.948077][ T5578] usb 3-1: Manufacturer: syz
[ 1739.948092][ T5578] usb 3-1: SerialNumber: syz
[ 1740.158831][T16411] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1740.315360][ T5578] usb 3-1: Invalid connection information received from device
[ 1740.669424][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[ 1740.669503][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[ 1741.217838][ T5705] usb 3-1: USB disconnect, device number 40
[ 1741.319698][ T9642] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1741.493529][ T9642] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[ 1741.495115][ T9642] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1741.495192][ T9642] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1741.495241][ T9642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1741.824983][ T9642] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report
[ 1741.825202][ T9642] ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -2
[ 1742.037040][T15709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1742.134361][T15709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1742.138394][T15709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1742.157989][T15709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1742.173269][T15709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1742.188202][T15709] Bluetooth: hci0: command tx timeout
[ 1742.714018][T16892] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0)
[ 1742.714083][T16892] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1744.278820][T15709] Bluetooth: hci0: command tx timeout
[ 1744.419666][T15709] Bluetooth: hci1: command tx timeout
[ 1744.875003][T15683] usb 1-1: USB disconnect, device number 40
[ 1746.953284][T15709] Bluetooth: hci0: command tx timeout
[ 1746.953324][T15709] Bluetooth: hci1: command tx timeout
[ 1747.746370][T15709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1747.808566][T15709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1747.826961][T15709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1747.851094][T15709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1747.880849][T15709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1748.391471][  T157] bridge_slave_1: left allmulticast mode
[ 1748.391511][  T157] bridge_slave_1: left promiscuous mode
[ 1748.391791][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1748.539320][  T157] bridge_slave_0: left allmulticast mode
[ 1748.539364][  T157] bridge_slave_0: left promiscuous mode
[ 1748.539643][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1748.662086][T16928] netlink: 'syz.2.1961': attribute type 4 has an invalid length.
[ 1748.718435][T16931] netlink: 'syz.2.1961': attribute type 4 has an invalid length.
[ 1748.830066][  T157] bridge_slave_1: left allmulticast mode
[ 1748.830097][  T157] bridge_slave_1: left promiscuous mode
[ 1748.830314][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1749.194944][ T5596] Bluetooth: hci1: command tx timeout
[ 1749.195143][ T5596] Bluetooth: hci0: command tx timeout
[ 1750.099301][T15709] Bluetooth: hci3: command tx timeout
[ 1750.171623][  T157] bridge_slave_0: left allmulticast mode
[ 1750.171652][  T157] bridge_slave_0: left promiscuous mode
[ 1750.171865][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1750.484534][  T157] bridge_slave_1: left allmulticast mode
[ 1750.484576][  T157] bridge_slave_1: left promiscuous mode
[ 1750.484850][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1750.660982][  T157] bridge_slave_0: left allmulticast mode
[ 1750.661022][  T157] bridge_slave_0: left promiscuous mode
[ 1750.661298][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1751.219660][T15709] Bluetooth: hci1: command tx timeout
[ 1751.308039][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1751.400329][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1751.461397][  T157] bond0 (unregistering): Released all slaves
[ 1751.870092][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1751.952271][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1752.011021][  T157] bond0 (unregistering): Released all slaves
[ 1752.179546][T15709] Bluetooth: hci3: command tx timeout
[ 1752.290128][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1752.390043][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1752.470988][  T157] bond0 (unregistering): Released all slaves
[ 1752.780911][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1754.259337][T15709] Bluetooth: hci3: command tx timeout
[ 1756.349612][T15709] Bluetooth: hci3: command tx timeout
[ 1756.926612][T16988] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0)
[ 1756.926713][T16988] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1758.727543][  T157] hsr_slave_0: left promiscuous mode
[ 1758.768377][  T157] hsr_slave_1: left promiscuous mode
[ 1758.771128][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1758.823079][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1759.039228][  T157] hsr_slave_0: left promiscuous mode
[ 1759.079297][  T157] hsr_slave_1: left promiscuous mode
[ 1759.080708][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1759.112885][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1759.249248][ T9642] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[ 1759.290884][  T157] hsr_slave_0: left promiscuous mode
[ 1759.326898][T17008] ------------[ cut here ]------------
[ 1759.326912][T17008] origin->pipe && origin->pipe != pipe
[ 1759.326927][T17008] WARNING: drivers/media/mc/mc-entity.c:785 at __media_pipeline_start+0x1eac/0x2440, CPU#0: syz.0.1970/17008
[ 1759.352635][T17008] Modules linked in:
[ 1759.356569][T17008] CPU: 0 UID: 0 PID: 17008 Comm: syz.0.1970 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1759.368095][T17008] Tainted: [L]=SOFTLOCKUP
[ 1759.372460][T17008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1759.382617][T17008] RIP: 0010:__media_pipeline_start+0x1eac/0x2440
[ 1759.389061][T17008] Code: e3 e9 90 e3 ff ff 0f 1f 44 00 00 e8 be 86 41 fa 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 28 e9 93 fd ff ff e8 a5 86 41 fa 90 <0f> 0b 90 b8 ea ff ff ff e9 72 f4 ff ff e8 92 86 41 fa 90 0f 0b 90
[ 1759.408741][T17008] RSP: 0018:ffffc90004c579c8 EFLAGS: 00010287
[ 1759.414885][T17008] RAX: ffffffff87852e0b RBX: ffff88802c1a8ce8 RCX: 0000000000080000
[ 1759.422938][T17008] RDX: ffffc900237eb000 RSI: 00000000000003ec RDI: 00000000000003ed
[ 1759.430972][T17008] RBP: ffff88802c1a8000 R08: 0000000000000000 R09: 0000000000000000
[ 1759.438989][T17008] R10: dffffc0000000000 R11: fffffbfff1f64550 R12: ffff88802c1a8bf8
[ 1759.447061][T17008] R13: ffff88802c1a8cb0 R14: ffff88802cc23010 R15: dffffc0000000000
[ 1759.455083][T17008] FS:  00007f8aa51e56c0(0000) GS:ffff888125bc4000(0000) knlGS:0000000000000000
[ 1759.464077][T17008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1759.470699][T17008] CR2: 000000110c3456ac CR3: 000000005c380000 CR4: 00000000003526f0
[ 1759.478684][T17008] Call Trace:
[ 1759.482018][T17008]  <TASK>
[ 1759.484990][T17008]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1759.490846][T17008]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1759.496758][T17008]  ? mutex_lock_nested+0x152/0x1d0
[ 1759.501924][T17008]  ? media_pipeline_start+0x46/0x70
[ 1759.507159][T17008]  ? __pfx_vimc_capture_start_streaming+0x10/0x10
[ 1759.513732][T17008]  media_pipeline_start+0x51/0x70
[ 1759.518790][T17008]  vimc_capture_start_streaming+0x7c/0x410
[ 1759.524647][T17008]  ? __pfx_vimc_capture_start_streaming+0x10/0x10
[ 1759.531112][T17008]  vb2_start_streaming+0x11e/0x450
[ 1759.536311][T17008]  ? __bitmap_weight+0xac/0x100
[ 1759.541237][T17008]  vb2_core_streamon+0x2c0/0x4d0
[ 1759.546195][T17008]  __video_do_ioctl+0x8b2/0xc70
[ 1759.551172][T17008]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1759.556570][T17008]  video_usercopy+0x860/0x1430
[ 1759.561382][T17008]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1759.566771][T17008]  ? __pfx_video_usercopy+0x10/0x10
[ 1759.572016][T17008]  ? smack_file_ioctl+0x265/0x370
[ 1759.577068][T17008]  ? __fget_files+0x2a/0x420
[ 1759.581734][T17008]  ? __fget_files+0x3a8/0x420
[ 1759.586427][T17008]  v4l2_ioctl+0x190/0x1e0
[ 1759.590808][T17008]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1759.595672][T17008]  __se_sys_ioctl+0xff/0x170
[ 1759.600313][T17008]  do_syscall_64+0x166/0x520
[ 1759.604918][T17008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1759.611053][T17008]  ? clear_bhb_loop+0x70/0xc0
[ 1759.615753][T17008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1759.621681][T17008] RIP: 0033:0x7f8aa6fae159
[ 1759.626109][T17008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1759.645848][T17008] RSP: 002b:00007f8aa51e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1759.654364][T17008] RAX: ffffffffffffffda RBX: 00007f8aa7236090 RCX: 00007f8aa6fae159
[ 1759.662385][T17008] RDX: 0000200000000100 RSI: 0000000040045612 RDI: 0000000000000003
[ 1759.670396][T17008] RBP: 00007f8aa704506b R08: 0000000000000000 R09: 0000000000000000
[ 1759.678417][T17008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1759.686458][T17008] R13: 00007f8aa7236128 R14: 00007f8aa7236090 R15: 00007ffd5b3ea4e8
[ 1759.694497][T17008]  </TASK>
[ 1759.697556][T17008] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1759.704854][T17008] CPU: 0 UID: 0 PID: 17008 Comm: syz.0.1970 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1759.716457][T17008] Tainted: [L]=SOFTLOCKUP
[ 1759.720800][T17008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1759.730868][T17008] Call Trace:
[ 1759.734198][T17008]  <TASK>
[ 1759.737168][T17008]  vpanic+0x56d/0xa60
[ 1759.741203][T17008]  ? __pfx__printk+0x10/0x10
[ 1759.745871][T17008]  ? __pfx_vpanic+0x10/0x10
[ 1759.750431][T17008]  ? is_bpf_text_address+0x292/0x2b0
[ 1759.756045][T17008]  ? is_bpf_text_address+0x26/0x2b0
[ 1759.761275][T17008]  panic+0xc5/0xd0
[ 1759.765009][T17008]  ? __pfx_panic+0x10/0x10
[ 1759.769452][T17008]  __warn+0x315/0x4c0
[ 1759.773460][T17008]  ? __media_pipeline_start+0x1eac/0x2440
[ 1759.779201][T17008]  ? __media_pipeline_start+0x1eac/0x2440
[ 1759.784949][T17008]  __report_bug+0x276/0x570
[ 1759.789527][T17008]  ? __media_pipeline_start+0x1eac/0x2440
[ 1759.795257][T17008]  ? __pfx___report_bug+0x10/0x10
[ 1759.800311][T17008]  ? ktime_get+0x45/0x220
[ 1759.804674][T17008]  ? ktime_get+0x45/0x220
[ 1759.809026][T17008]  ? seqcount_lockdep_reader_access+0xd4/0x100
[ 1759.815215][T17008]  ? __lock_acquire+0x747/0x2de0
[ 1759.820174][T17008]  ? __media_pipeline_start+0x1eac/0x2440
[ 1759.825910][T17008]  report_bug+0x16b/0x220
[ 1759.830267][T17008]  ? __media_pipeline_start+0x1eac/0x2440
[ 1759.836007][T17008]  ? __media_pipeline_start+0x1eae/0x2440
[ 1759.841739][T17008]  handle_bug+0x9c/0x200
[ 1759.846020][T17008]  exc_invalid_op+0x1a/0x50
[ 1759.850531][T17008]  asm_exc_invalid_op+0x1a/0x20
[ 1759.855387][T17008] RIP: 0010:__media_pipeline_start+0x1eac/0x2440
[ 1759.861723][T17008] Code: e3 e9 90 e3 ff ff 0f 1f 44 00 00 e8 be 86 41 fa 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 28 e9 93 fd ff ff e8 a5 86 41 fa 90 <0f> 0b 90 b8 ea ff ff ff e9 72 f4 ff ff e8 92 86 41 fa 90 0f 0b 90
[ 1759.881336][T17008] RSP: 0018:ffffc90004c579c8 EFLAGS: 00010287
[ 1759.887420][T17008] RAX: ffffffff87852e0b RBX: ffff88802c1a8ce8 RCX: 0000000000080000
[ 1759.895413][T17008] RDX: ffffc900237eb000 RSI: 00000000000003ec RDI: 00000000000003ed
[ 1759.903490][T17008] RBP: ffff88802c1a8000 R08: 0000000000000000 R09: 0000000000000000
[ 1759.911487][T17008] R10: dffffc0000000000 R11: fffffbfff1f64550 R12: ffff88802c1a8bf8
[ 1759.919497][T17008] R13: ffff88802c1a8cb0 R14: ffff88802cc23010 R15: dffffc0000000000
[ 1759.927502][T17008]  ? __media_pipeline_start+0x1eab/0x2440
[ 1759.933250][T17008]  ? __media_pipeline_start+0x1eab/0x2440
[ 1759.939052][T17008]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1759.944921][T17008]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1759.950764][T17008]  ? mutex_lock_nested+0x152/0x1d0
[ 1759.955896][T17008]  ? media_pipeline_start+0x46/0x70
[ 1759.961112][T17008]  ? __pfx_vimc_capture_start_streaming+0x10/0x10
[ 1759.967543][T17008]  media_pipeline_start+0x51/0x70
[ 1759.972654][T17008]  vimc_capture_start_streaming+0x7c/0x410
[ 1759.978522][T17008]  ? __pfx_vimc_capture_start_streaming+0x10/0x10
[ 1759.985053][T17008]  vb2_start_streaming+0x11e/0x450
[ 1759.990209][T17008]  ? __bitmap_weight+0xac/0x100
[ 1759.995104][T17008]  vb2_core_streamon+0x2c0/0x4d0
[ 1760.000100][T17008]  __video_do_ioctl+0x8b2/0xc70
[ 1760.005019][T17008]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1760.010443][T17008]  video_usercopy+0x860/0x1430
[ 1760.015235][T17008]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1760.020648][T17008]  ? __pfx_video_usercopy+0x10/0x10
[ 1760.025857][T17008]  ? smack_file_ioctl+0x265/0x370
[ 1760.030907][T17008]  ? __fget_files+0x2a/0x420
[ 1760.035503][T17008]  ? __fget_files+0x3a8/0x420
[ 1760.040192][T17008]  v4l2_ioctl+0x190/0x1e0
[ 1760.044537][T17008]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1760.049493][T17008]  __se_sys_ioctl+0xff/0x170
[ 1760.054136][T17008]  do_syscall_64+0x166/0x520
[ 1760.058740][T17008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1760.064816][T17008]  ? clear_bhb_loop+0x70/0xc0
[ 1760.069505][T17008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1760.075402][T17008] RIP: 0033:0x7f8aa6fae159
[ 1760.079822][T17008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1760.099438][T17008] RSP: 002b:00007f8aa51e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1760.107861][T17008] RAX: ffffffffffffffda RBX: 00007f8aa7236090 RCX: 00007f8aa6fae159
[ 1760.115849][T17008] RDX: 0000200000000100 RSI: 0000000040045612 RDI: 0000000000000003
[ 1760.123873][T17008] RBP: 00007f8aa704506b R08: 0000000000000000 R09: 0000000000000000
[ 1760.132315][T17008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1760.140323][T17008] R13: 00007f8aa7236128 R14: 00007f8aa7236090 R15: 00007ffd5b3ea4e8
[ 1760.148330][T17008]  </TASK>
[ 1760.151991][T17008] Kernel Offset: disabled
[ 1760.156331][T17008] Rebooting in 86400 seconds..