last executing test programs:

3m32.378451588s ago: executing program 0 (id=2701):
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
write$char_usb(r4, 0x0, 0x0)
close(r4)
syz_usb_control_io$printer(r0, 0x0, 0x0)

3m29.300748062s ago: executing program 2 (id=2715):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00'})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000840)={0x14, r3, 0x4, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x11)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='v', 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c)
sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x7fff, 0x2)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1}, 0xc)
write$cgroup_pid(r1, &(0x7f0000000440), 0x12)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)

3m29.299174496s ago: executing program 0 (id=2724):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080)=r3, 0x12)

3m29.200664308s ago: executing program 2 (id=2716):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140), 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)

3m28.990712939s ago: executing program 0 (id=2717):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(0xffffffffffffffff, 0x410, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000500)="0e"})
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)

3m28.728577924s ago: executing program 3 (id=2720):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140))
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
syz_emit_ethernet(0x30f, 0x0, &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0x211, 0x4b]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f0000000680), 0x0)
connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x2000b3404, {0x7, 0x2d, 0x5, 0x210420, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30)

3m26.882659605s ago: executing program 2 (id=2722):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000002c0)=0x1)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f00000006c0)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000f40)={&(0x7f0000000b00)={{@my=0x0, 0x1ff}, {@my=0x0, 0x9}, 0x400, "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"}, 0x418, 0x3})
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x6b, 0xa, 0x7, 0x0, 0x0, 0x0, 0x4, 0x7, 0xd, 0xa0, 0x3, 0x5, 0x0, 0x2, 0x8, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x40000800, 0x2, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x0, 0x4, 0xfffffffffffffffc, 0x7, 0x4, 0x4, 0x100000000001, 0x6], 0x1000, 0x47f00})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0)
read(r5, &(0x7f0000000340), 0x1000)

3m26.882308272s ago: executing program 3 (id=2723):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140))
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
syz_emit_ethernet(0x30f, 0x0, &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0x211, 0x4b]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f0000000680), 0x0)
connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x2000b3404, {0x7, 0x2d, 0x5, 0x210420, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30)

3m26.876830813s ago: executing program 0 (id=2725):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r3 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000500)="0e"})
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)

3m26.773680227s ago: executing program 2 (id=2726):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, <r6=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63)

3m26.72122866s ago: executing program 3 (id=2727):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffff, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x4, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r3, r2})
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00')
pread64(r6, &(0x7f0000000340)=""/146, 0x92, 0x2f)

3m26.60607021s ago: executing program 1 (id=2728):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080)=r3, 0x12)

3m26.289692184s ago: executing program 3 (id=2729):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080)=r3, 0x12)

3m26.181318772s ago: executing program 1 (id=2730):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080)=r3, 0x12)

3m25.972596787s ago: executing program 0 (id=2731):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

3m25.972423297s ago: executing program 3 (id=2732):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f00000001c0)="5cba91", 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x204)
writev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)

3m25.969872594s ago: executing program 1 (id=2740):
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080)=r3, 0x12)

3m25.679139646s ago: executing program 1 (id=2734):
openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0)
open(0x0, 0x181102, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060108000000000000000005000005050005000a00000005000100070000000500040000007a4a0900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800124000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r2, &(0x7f0000000380), 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r3, &(0x7f0000000200)='1', 0x1)
socket$igmp(0x2, 0x3, 0x2)
r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
io_setup(0x1, &(0x7f00000000c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
socket$nl_generic(0x10, 0x3, 0x10)

3m22.9804981s ago: executing program 0 (id=2735):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f00000001c0)="5cba91", 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x204)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0), 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)

3m22.980164529s ago: executing program 1 (id=2736):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140))
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
syz_emit_ethernet(0x30f, 0x0, &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0x211, 0x4b]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f0000000680), 0x0)
connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x2000b3404, {0x7, 0x2d, 0x5, 0x210420, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30)

3m22.979909921s ago: executing program 2 (id=2737):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

3m22.601331877s ago: executing program 1 (id=2738):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
syz_open_dev$mouse(0x0, 0x0, 0x2042)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/252], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r2 = userfaultfd(0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

3m22.51641548s ago: executing program 2 (id=2739):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080)=r3, 0x12)

3m21.924713856s ago: executing program 3 (id=2741):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r3 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000500)="0e"})
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)

2m50.958827072s ago: executing program 32 (id=2735):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f00000001c0)="5cba91", 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x204)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0), 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)

2m50.827592592s ago: executing program 33 (id=2738):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
syz_open_dev$mouse(0x0, 0x0, 0x2042)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/252], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r2 = userfaultfd(0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

2m50.548367242s ago: executing program 34 (id=2739):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080)=r3, 0x12)

2m50.314348486s ago: executing program 35 (id=2741):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r3 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000500)="0e"})
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)

6.599841879s ago: executing program 4 (id=3337):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f)
r4 = dup2(r3, r3)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x2020)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)

5.789097951s ago: executing program 5 (id=3332):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000006c0)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

5.417222674s ago: executing program 4 (id=3334):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_ublk_setup_io_uring(0x791b, &(0x7f00000003c0)={0x0, 0xef18, 0x1, 0x3, 0x30f}, &(0x7f0000000440), &(0x7f0000000780), &(0x7f00000007c0))
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r2}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace$pokeuser(0x6, r10, 0x118, 0xffffb453)
ptrace$pokeuser(0x6, r10, 0x104, 0x7)
io_uring_setup(0x14b6, &(0x7f00000002c0)={0x0, 0xf553, 0x8000, 0x1, 0x6e, 0x0, r3})
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48)

4.789378804s ago: executing program 5 (id=3338):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\x02\x00\x00\x00G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\xafON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x19\xdd(5\xea0\x01,D\xf2\xa3\x85Q\x1f@\xdej\x88\xc8\x17\xc4<Y\xde\xf6v\x8f\x92\xd0XH\x12\x04\xf3\xd0-T\xcat\xf7\x85\xaa\x8fXT\xa1\xeb\xfd\xaf9\xca;\x85\x8b^\x8b\xa4\x89\xc7\x9c\x12\x91\xf9i\x02Q1D\xc2\xf5\x1c\x94\x1a\xcf\x80W\x84\x96,\x8fG\xacy?\xea$\xb2Ia\xce\x94\xf2Cm\x86\xb1qh8\xde\xe4\xe3\x80\xabM\xe9\x14|\xc1\xbb\xc14Dq\x1f\xf4\x88\xe7V\xe0\xa1Hb\xd94v&H\xd5j\x02~-\xed\r\xfc\xb4\r\x00\xe9\xe3\x92U\xe7\x8f\xcc\xe4HJ18R\xee\xc5\x85*\xcf\xcbh}&\xe2\xc5[\xbbY\xca\x17-\x04\x95\xa3\xc5(\x9c\xdaZ\x0f', 0x2)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r1, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x5, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7623c435aff90493ddd7aae07ef35f0700000000000000ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d746916f31c07b84819e7df4af14e1df82d", [0x6, 0x6]})
write$char_usb(r0, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0xa9a9a933ffbf0685, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = socket(0x1, 0x5, 0x0)
close(r4)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
fcntl$getown(r2, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer2(0xffffff9c, 0x0, 0x80, 0x0)
accept4$inet(r2, &(0x7f0000000cc0)={0x2, 0x0, @private}, 0x0, 0x800)
syz_open_dev$admmidi(&(0x7f0000003340), 0x1, 0x285900)

4.195310619s ago: executing program 5 (id=3340):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000006c0)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

4.096441883s ago: executing program 6 (id=3341):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
fcntl$setsig(r2, 0xa, 0x21)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r3, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x290, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x234, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x54, 0x2, "16ec61360458e3b4d0d82fb0f66b6599ff8bbf96909aea737d97456d7aef2209efebdaaa9bfae4faf65ce2e5115fc7ce49fc313aa90d75883d83e9746372bedf7e7d4bed1eddcee051680ba54ccd3ffe"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc2, 0x3, "056e29bc489ff9648a80dbfa54d608e51d78049bda7b51d1114a51bc75de1d45d9e41c0a0f3587c96f4ad09e4b2f1f7632e7fb3cebd08eb2cae60d51cbbab47bc48b538a8279ea4e82cf6134ec171cfd1a16e0378b46fda13b61b80ab4b5e892f5b117aa49bcd05d52fb238f4633071db33f9196d732ddecd5977823b9583a7caf5d08b7fb11290fa989f14f0a8390ed081c9dd1796cfaaf03afa0d04928bbf3a8387be572c075182894dba6f3d1d18bf41c307fca00ee486e48910f6aea"}, @NL80211_FTM_RESP_ATTR_LCI={0xa0, 0x2, "c6037c1247d91edfd224787a01b99c1b50ae37777386ac039f965ee7bb072ece2bc1141c06a60fe7472781e5bab88abf41e4ac59f8f582a22326f6a508183364ddbc9f3427fde214bbb05c1598a98d5270bff1e6b648f62593f61eb3554ea89c3a46afde4a6f206d4901d72ce4ca51edc3c60e8383d6adb4a792dde32c993462fc0766d404b2198161b0b45bb61284f09e7e874718b590d6ceb1982d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x10, 0x3, "df6319c1929152f1227f9ae2"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5c, 0x3, "32d6630880e6eafd6f22f1cc496dc975b3651261cb79ca49f67f64cd5f265b9c2a4b3179a8f2f97a1f77c7db6ed2bb7ed067a010991e2c9509c0c3777b4c3ca77399d53c6cec5807874f3b127ec9c0e9d20526808f47398b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x290}}, 0x0)

4.057047928s ago: executing program 7 (id=3342):
openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x7, 0x48f99f36)
syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0xc5, 0x0, &(0x7f00000007c0), &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shutdown(0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r2, &(0x7f0000001300)=""/4113, 0x1011, 0x20, 0x0, 0x0)

3.115249972s ago: executing program 6 (id=3343):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140))
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
syz_emit_ethernet(0x30f, 0x0, &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0x211, 0x4b]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f0000000680), 0x0)
connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x2000b3404, {0x7, 0x2d, 0x5, 0x210420, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30)

3.113966139s ago: executing program 6 (id=3344):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

3.056902472s ago: executing program 7 (id=3345):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000))
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xbf, 0x4}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000002)

2.88295969s ago: executing program 4 (id=3346):
r0 = socket$kcm(0x23, 0x5, 0x0)
listen(r0, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x7f}}, './file0\x00'})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x40)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000000)

2.780347983s ago: executing program 5 (id=3347):
ioperm(0x7, 0x4, 0x7)
syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
read$FUSE(r0, &(0x7f0000008880)={0x2020}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ioctl$FIOCLEX(r1, 0x5451)
ftruncate(r2, 0xffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fcntl$addseals(r2, 0x409, 0x3)
close(0x3)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000})
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
socket$nl_route(0x10, 0x3, 0x0)

2.696657895s ago: executing program 6 (id=3348):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={0x3, 0xb, "6226ba", 0x3, 0x6})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @nfc={0x27, r3, 0x0, 0x1}, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}}}, @nl=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x0, 0x0, 0xf019, &(0x7f0000000080)='netpci0\x00', 0x8, 0x21, 0x47c})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r6, &(0x7f0000006540)={0x2020}, 0xfffffce2)
fspick(r6, &(0x7f0000000000)='./sys_mount\x00', 0x0)
sendto$inet_nvme_of_msg(r6, &(0x7f0000000000)={@icreq={{0x0, 0x8, 0x80, 0x9}, 0x0, 0x0, 0x1, 0x1}, @void}, 0x80, 0x0, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.578299884s ago: executing program 6 (id=3349):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "61b2c13a64c7a3fdf4d8186dbecd6aa50d61f492573729589a196e8b82f9c7b17428dc5c3d91bc5d5aad038e9c2edb9399d0214d28bc8710b6d5b4b201efe3b6", 0x11}, 0x48, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d83, 0x101200)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000340)=""/90)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)

2.073776524s ago: executing program 7 (id=3350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20)
socket(0x2a, 0x2, 0x0)
r3 = userfaultfd(0x80001)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
setitimer(0x2, 0x0, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f000069f000/0x1000)=nil, 0x1000}, 0x7, 0x2})

2.010219052s ago: executing program 6 (id=3351):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @random="8528d5915819", @private=0x2}}}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30)

1.997648948s ago: executing program 4 (id=3352):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006)
io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000})
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x0, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x32}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

981.471445ms ago: executing program 5 (id=3353):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000280)={0x8, {0x9, 0x3f9b, 0x7fffffff, 0xaa}, {0x2, 0x1ff, 0x4, 0x80000001}, {0x4, 0xe}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000, 0x9}, {}, 0x5}}, 0xb8}}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x5}, {0x3}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x3b}, 0x20)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r6 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235})
r7 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430)
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40046607, &(0x7f00000000c0)=0xaba3)
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000100)='\x00')

814.397929ms ago: executing program 4 (id=3354):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002240)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
ftruncate(r3, 0x7ffffffd)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

720.804226ms ago: executing program 7 (id=3355):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000006c0)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

593.081846ms ago: executing program 5 (id=3356):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000006c0)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

440.278019ms ago: executing program 7 (id=3357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={0x3, 0xb, "6226ba", 0x3, 0x6})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @nfc={0x27, r3, 0x0, 0x1}, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}}}, @nl=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x0, 0x0, 0xf019, &(0x7f0000000080)='netpci0\x00', 0x8, 0x21, 0x47c})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r6, &(0x7f0000006540)={0x2020}, 0xfffffce2)
fspick(r6, &(0x7f0000000000)='./sys_mount\x00', 0x0)
sendto$inet_nvme_of_msg(r6, &(0x7f0000000000)={@icreq={{0x0, 0x8, 0x80, 0x9}, 0x0, 0x0, 0x1, 0x1}, @void}, 0x80, 0x0, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

350.321113ms ago: executing program 7 (id=3358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x1)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
socket$packet(0x11, 0xa, 0x300)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f6010203010902240002010050"], 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c)
syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0)

0s ago: executing program 4 (id=3359):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='usb_gadget/g1\x00', 0x0)
mkdirat(r0, &(0x7f0000000080)='usb_gadget/g1/functions/uvc.usb0\x00', 0x0)
r1 = openat(r0, &(0x7f00000000c0)='usb_gadget/g1/functions/uvc.usb0/streaming_maxpacket\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='64\n\x00', 0x3)
mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x0)
mkdirat(r0, &(0x7f0000000180)='usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x0)
mkdirat(r0, &(0x7f00000001c0)='usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x0)
symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', r0, &(0x7f0000000240)='usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', r0, &(0x7f00000002c0)='usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', r0, &(0x7f0000000340)='usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
mkdirat(r0, &(0x7f0000000380)='usb_gadget/g1/configs/c.1\x00', 0x0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', r0, &(0x7f0000000400)='usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r2 = openat(r0, &(0x7f0000000440)='usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000480)='dummy_udc.0\x00', 0xb)
r3 = syz_open_dev$video(&(0x7f00000004c0), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000500)={0x1, 0x1, 0x1})
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f85663, &(0x7f0000000540)={0x0, 0x1, 0x1, {0x1}})

kernel console output (not intermixed with test programs):

t device team_slave_0 added
[  567.145719][T15430] team0: Port device team_slave_1 added
[  567.169017][T15424] team0: Port device team_slave_0 added
[  567.235040][T15430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.237821][T15430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  567.248724][T15430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.255633][T15424] team0: Port device team_slave_1 added
[  567.288409][T15430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  567.291477][T15430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  567.299308][ T5746] Bluetooth: hci2: command tx timeout
[  567.301472][T15430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.379612][ T5746] Bluetooth: hci5: command tx timeout
[  567.403238][T15424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.405971][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  567.415158][T15424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.424993][T15431] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.429290][T15431] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.431756][T15431] bridge_slave_0: entered allmulticast mode
[  567.434601][T15431] bridge_slave_0: entered promiscuous mode
[  567.437930][T15431] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.440392][T15431] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.442685][T15431] bridge_slave_1: entered allmulticast mode
[  567.445400][T15431] bridge_slave_1: entered promiscuous mode
[  567.458933][ T5746] Bluetooth: hci4: command tx timeout
[  567.466504][T15424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  567.470967][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  567.481584][T15424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.531987][T15435] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.535016][T15435] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.537694][T15435] bridge_slave_0: entered allmulticast mode
[  567.541972][T15435] bridge_slave_0: entered promiscuous mode
[  567.571461][T15430] hsr_slave_0: entered promiscuous mode
[  567.574810][T15430] hsr_slave_1: entered promiscuous mode
[  567.579745][T15430] debugfs: 'hsr0' already exists in 'hsr'
[  567.582104][T15430] Cannot create hsr debugfs directory
[  567.587048][T15431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.592132][T15431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  567.606841][T15435] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.609203][T15435] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.611518][T15435] bridge_slave_1: entered allmulticast mode
[  567.614261][T15435] bridge_slave_1: entered promiscuous mode
[  567.632673][T15435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.637869][T15431] team0: Port device team_slave_0 added
[  567.641549][T15431] team0: Port device team_slave_1 added
[  567.672867][T15435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  567.979218][T15431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.981572][T15431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  567.989732][T15431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.997003][T15424] hsr_slave_0: entered promiscuous mode
[  567.999497][T15424] hsr_slave_1: entered promiscuous mode
[  568.001708][T15424] debugfs: 'hsr0' already exists in 'hsr'
[  568.003561][T15424] Cannot create hsr debugfs directory
[  568.013702][T15435] team0: Port device team_slave_0 added
[  568.016364][T15431] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.018564][T15431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.028380][T15431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.047656][T15435] team0: Port device team_slave_1 added
[  568.099220][T15435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.101624][T15435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.117146][T15435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.128605][T15435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.131419][T15435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.139880][T15435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.218966][T15431] hsr_slave_0: entered promiscuous mode
[  568.222016][T15431] hsr_slave_1: entered promiscuous mode
[  568.224621][T15431] debugfs: 'hsr0' already exists in 'hsr'
[  568.226470][T15431] Cannot create hsr debugfs directory
[  568.285399][T15435] hsr_slave_0: entered promiscuous mode
[  568.287773][T15435] hsr_slave_1: entered promiscuous mode
[  568.290298][T15435] debugfs: 'hsr0' already exists in 'hsr'
[  568.292160][T15435] Cannot create hsr debugfs directory
[  568.462556][T15430] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  568.474871][T15430] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  568.494588][T15430] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  568.499153][ T5822] IPVS: stop unused estimator thread 0...
[  568.502717][T15430] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  568.506317][T15430] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  568.513715][T15430] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  568.542912][T15430] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  568.552060][T15430] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  568.668026][T15424] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  568.673009][T15424] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  568.676511][T15424] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  568.681948][T15424] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  568.684993][T15424] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  568.696059][T15424] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  568.700454][T15424] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  568.704821][T15424] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  568.816385][T15435] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  568.828303][T15435] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  568.832622][T15435] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  568.837728][T15435] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  568.852744][T15435] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  568.858534][T15435] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  568.910619][T15435] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  568.924373][T15435] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  568.989204][ T5746] Bluetooth: hci1: command tx timeout
[  569.034078][T15431] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  569.038161][T15431] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  569.044409][T15431] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  569.051363][T15431] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  569.058497][T15424] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.065554][T15430] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.076818][T15431] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  569.082982][T15431] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  569.086085][T15431] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  569.091452][T15431] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  569.141354][T15430] 8021q: adding VLAN 0 to HW filter on device team0
[  569.160470][ T6313] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.163590][ T6313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  569.186447][T15424] 8021q: adding VLAN 0 to HW filter on device team0
[  569.192170][ T6313] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.195214][ T6313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  569.219948][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.222993][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  569.240928][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.243871][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  569.381408][ T5746] Bluetooth: hci2: command tx timeout
[  569.389310][T15435] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.450673][ T5822] veth9: left allmulticast mode
[  569.452800][ T5822] veth9: left promiscuous mode
[  569.459368][ T5822] bridge5: port 2(veth9) entered disabled state
[  569.463743][ T5746] Bluetooth: hci5: command tx timeout
[  569.469990][ T5822] veth7: left allmulticast mode
[  569.472231][ T5822] veth7: left promiscuous mode
[  569.480905][ T5822] bridge5: port 1(veth7) entered disabled state
[  569.491420][ T5822] lo: left allmulticast mode
[  569.540235][ T5746] Bluetooth: hci4: command tx timeout
[  569.604013][ T5822] bond9 (unregistering): (slave ip6erspan0): Releasing active interface
[  569.634392][ T5822] bond13 (unregistering): (slave ip6gretap1): Releasing active interface
[  569.745254][ T5822] bond7 (unregistering): (slave gretap1): Releasing active interface
[  569.772977][ T5822] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  569.782486][ T5822] bond5 (unregistering): (slave bridge3): Releasing backup interface
[  569.801129][ T5822] bond1 (unregistering): Released all slaves
[  569.813518][ T5822] bond2 (unregistering): Released all slaves
[  569.825667][ T5822] bond3 (unregistering): Released all slaves
[  569.842547][ T5822] bond4 (unregistering): Released all slaves
[  569.855188][ T5822] bond5 (unregistering): Released all slaves
[  569.867466][ T5822] bond6 (unregistering): Released all slaves
[  569.881675][ T5822] bond7 (unregistering): Released all slaves
[  569.899490][ T5822] bond8 (unregistering): Released all slaves
[  569.907219][ T5822] bond9 (unregistering): Released all slaves
[  569.915549][ T5822] bond10 (unregistering): (slave veth11): Releasing active interface
[  569.918610][ T5822] bond10 (unregistering): Released all slaves
[  569.927227][ T5822] bond11 (unregistering): Released all slaves
[  569.937264][ T5822] bond12 (unregistering): Released all slaves
[  569.946348][ T5822] bond13 (unregistering): Released all slaves
[  569.957185][ T5822] bond0 (unregistering): Released all slaves
[  569.974672][ T5822] bond14 (unregistering): (slave dummy0): Releasing active interface
[  569.978159][ T5822] dummy0: left promiscuous mode
[  569.983278][ T5822] dummy0: left allmulticast mode
[  569.992889][ T5822] bond14 (unregistering): Released all slaves
[  570.000878][ T5822] bond15 (unregistering): Released all slaves
[  570.029518][T15435] 8021q: adding VLAN 0 to HW filter on device team0
[  570.035057][T15431] 8021q: adding VLAN 0 to HW filter on device bond0
[  570.048893][ T6313] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.051941][ T6313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  570.084029][ T6313] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.086391][ T6313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  570.155747][T15431] 8021q: adding VLAN 0 to HW filter on device team0
[  570.198095][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.200530][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  570.204705][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.207122][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  570.279466][ T5822] tipc: Disabling bearer <eth:syzkaller0>
[  570.283326][ T5822] tipc: Left network mode
[  570.496534][T15430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  570.668365][T15424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  570.987873][T15431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  571.032152][T15435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  571.059435][ T5746] Bluetooth: hci1: command tx timeout
[  571.080487][T15430] veth0_vlan: entered promiscuous mode
[  571.139428][ T5822] hsr_slave_0: left promiscuous mode
[  571.143034][ T5822] hsr_slave_1: left promiscuous mode
[  571.459445][ T5746] Bluetooth: hci2: command tx timeout
[  571.487590][T15424] veth0_vlan: entered promiscuous mode
[  571.496405][T15430] veth1_vlan: entered promiscuous mode
[  571.526215][T15424] veth1_vlan: entered promiscuous mode
[  571.539034][ T5746] Bluetooth: hci5: command tx timeout
[  571.584022][T15430] veth0_macvtap: entered promiscuous mode
[  571.600671][T15430] veth1_macvtap: entered promiscuous mode
[  571.621435][ T5746] Bluetooth: hci4: command tx timeout
[  571.641648][T15424] veth0_macvtap: entered promiscuous mode
[  571.653309][T15424] veth1_macvtap: entered promiscuous mode
[  571.674884][T15430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.683721][T15431] veth0_vlan: entered promiscuous mode
[  571.693611][T15424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.709665][T15430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  571.730853][T15424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  571.749140][T13661] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.752206][T15431] veth1_vlan: entered promiscuous mode
[  571.760653][ T6029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.785397][T13661] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.801814][T13661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.843521][T15435] veth0_vlan: entered promiscuous mode
[  571.861014][ T5822] IPVS: stop unused estimator thread 0...
[  571.907444][T15435] veth1_vlan: entered promiscuous mode
[  571.908573][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.915526][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  571.919677][ T6029] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.950558][T15431] veth0_macvtap: entered promiscuous mode
[  571.968893][T15431] veth1_macvtap: entered promiscuous mode
[  571.981743][ T6310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.986059][ T6310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.000510][T15435] veth0_macvtap: entered promiscuous mode
[  572.012616][T15435] veth1_macvtap: entered promiscuous mode
[  572.037833][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.041567][T15431] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.043930][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.065888][T15431] batman_adv: batadv0: Interface activated: batadv_slave_1
[  572.083032][T15435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.092699][T15435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  572.124773][ T9220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.127232][ T9220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.149155][T11968] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.152032][T11968] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.154855][T11968] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  572.157702][T11968] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  572.161463][T11968] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  572.164263][T11968] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  572.166989][T11968] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.171454][T11968] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.174279][T11968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.176981][T11968] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.183835][T11968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  572.659989][ T9220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.670643][ T9220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.706151][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.725010][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.755225][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.775179][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.870035][ T6310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.874885][ T6310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.213026][ T5746] Bluetooth: hci1: command tx timeout
[  573.290409][T15601] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer.
[  573.538963][ T5746] Bluetooth: hci2: command tx timeout
[  573.587513][T15615] syzkaller0: entered promiscuous mode
[  573.591940][T15615] syzkaller0: entered allmulticast mode
[  573.619405][ T5746] Bluetooth: hci5: command tx timeout
[  573.702766][ T5746] Bluetooth: hci4: command tx timeout
[  574.365967][T15621] syzkaller0: entered promiscuous mode
[  574.368414][T15621] syzkaller0: entered allmulticast mode
[  574.438266][T15621] tipc: Started in network mode
[  574.441942][T15621] tipc: Node identity 9ef3357c5335, cluster identity 4711
[  574.444540][T15621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  574.476108][T15620] tipc: Resetting bearer <eth:syzkaller0>
[  574.556182][T15620] tipc: Disabling bearer <eth:syzkaller0>
[  575.141445][T15645] binder: 15638:15645 ioctl 4018620d 0 returned -22
[  577.375190][T15675] binder: 15673:15675 ioctl 4018620d 0 returned -22
[  578.687921][T15691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  578.693013][T15691] syzkaller0: entered promiscuous mode
[  578.695036][T15691] syzkaller0: entered allmulticast mode
[  578.807349][T15691] tipc: Resetting bearer <eth:syzkaller0>
[  579.018903][T15690] tipc: Resetting bearer <eth:syzkaller0>
[  579.334268][T15690] tipc: Disabling bearer <eth:syzkaller0>
[  581.338579][T15720] binder: 15716:15720 ioctl 4018620d 0 returned -22
[  582.073385][   T42] audit: type=1804 audit(1785754679.283:10233): pid=15711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2775" name="/newroot/9/cgroup.controllers" dev="tmpfs" ino=69 res=1 errno=0
[  582.091784][   T42] audit: type=1800 audit(1785754679.283:10234): pid=15711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2775" name="cgroup.controllers" dev="tmpfs" ino=69 res=0 errno=0
[  582.477596][T15743] tipc: Started in network mode
[  582.483093][T15743] tipc: Node identity 7aab6af0cc99, cluster identity 4711
[  582.493255][T15743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  582.499494][T15743] syzkaller0: entered promiscuous mode
[  582.501284][T15743] syzkaller0: entered allmulticast mode
[  582.558635][T15743] tipc: Resetting bearer <eth:syzkaller0>
[  582.574447][T15742] tipc: Resetting bearer <eth:syzkaller0>
[  582.622958][T15742] tipc: Disabling bearer <eth:syzkaller0>
[  583.816717][T15753] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  585.121692][T15771] netlink: 'syz.4.2792': attribute type 11 has an invalid length.
[  585.294848][    T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  585.369705][    T9] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  586.097663][T15799] tipc: Started in network mode
[  586.105939][T15799] tipc: Node identity d605d56ef2a7, cluster identity 4711
[  586.113672][T15799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  586.126752][T15799] syzkaller0: entered promiscuous mode
[  586.136271][T15799] syzkaller0: entered allmulticast mode
[  586.502977][T15798] tipc: Resetting bearer <eth:syzkaller0>
[  586.600145][T15798] tipc: Disabling bearer <eth:syzkaller0>
[  586.777976][T15805] pim6reg: entered allmulticast mode
[  586.829887][T15805] pim6reg: left allmulticast mode
[  587.268446][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2801'.
[  588.789715][T15810] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.004358][T15827] overlay: Unknown parameter '/'
[  589.065342][T15810] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.161758][T15827] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  589.401249][T15810] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.726968][T15810] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.892331][ T6024] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  589.902534][ T6024] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.914623][ T6024] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.925768][ T6024] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  589.963036][T15835] tipc: Started in network mode
[  589.967122][T15835] tipc: Node identity eae94a559289, cluster identity 4711
[  589.972344][T15835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.975184][T15835] syzkaller0: entered promiscuous mode
[  589.977072][T15835] syzkaller0: entered allmulticast mode
[  590.019678][T15835] tipc: Resetting bearer <eth:syzkaller0>
[  590.023789][T15834] tipc: Resetting bearer <eth:syzkaller0>
[  590.105731][T15834] tipc: Disabling bearer <eth:syzkaller0>
[  590.265879][T15837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  590.270509][T15837] syzkaller0: entered promiscuous mode
[  590.273168][T15837] syzkaller0: entered allmulticast mode
[  590.339620][T15836] tipc: Resetting bearer <eth:syzkaller0>
[  590.369832][T15836] tipc: Disabling bearer <eth:syzkaller0>
[  590.466484][T15848] binder: 15844:15848 ioctl 4018620d 0 returned -22
[  591.907615][T15865] syz.6.2815: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1
[  591.917871][T15865] CPU: 2 UID: 0 PID: 15865 Comm: syz.6.2815 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  591.917892][T15865] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  591.917897][T15865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  591.917904][T15865] Call Trace:
[  591.917909][T15865]  <TASK>
[  591.917914][T15865]  dump_stack_lvl+0x100/0x190
[  591.917947][T15865]  warn_alloc.cold+0x94/0xa8
[  591.917961][T15865]  ? __pfx_warn_alloc+0x10/0x10
[  591.917978][T15865]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  591.917995][T15865]  ? __pfx_get_page_from_freelist+0x10/0x10
[  591.918012][T15865]  __alloc_frozen_pages_noprof+0x159f/0x2dc0
[  591.918033][T15865]  ? clockevents_program_event+0x1ef/0x820
[  591.918047][T15865]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  591.918063][T15865]  ? __pfx_clockevents_program_event+0x10/0x10
[  591.918077][T15865]  ? find_held_lock+0x2b/0x80
[  591.918110][T15865]  ? __hrtimer_rearm_deferred+0x23c/0x720
[  591.918129][T15865]  ? mark_held_locks+0x40/0x70
[  591.918146][T15865]  ? irqentry_exit+0x24d/0xa00
[  591.918167][T15865]  __folio_alloc_noprof+0x13/0x260
[  591.918180][T15865]  alloc_migration_target+0x1d7/0x6d0
[  591.918199][T15865]  migrate_pages_batch+0x5dc/0x45c0
[  591.918218][T15865]  ? __pfx_alloc_migration_target+0x10/0x10
[  591.918241][T15865]  ? __pfx_migrate_pages_batch+0x10/0x10
[  591.918261][T15865]  ? __pfx___schedule+0x10/0x10
[  591.918274][T15865]  ? find_held_lock+0x2b/0x80
[  591.918289][T15865]  ? __lock_acquire+0x49f/0x1a40
[  591.918309][T15865]  migrate_pages_sync+0x12c/0x880
[  591.918327][T15865]  ? __pfx_alloc_migration_target+0x10/0x10
[  591.918347][T15865]  ? __pfx_migrate_pages_sync+0x10/0x10
[  591.918371][T15865]  migrate_pages+0x1a83/0x2850
[  591.918391][T15865]  ? __pfx_alloc_migration_target+0x10/0x10
[  591.918409][T15865]  ? do_raw_spin_lock+0x128/0x260
[  591.918422][T15865]  ? __pfx_migrate_pages+0x10/0x10
[  591.918442][T15865]  ? __lock_acquire+0x49f/0x1a40
[  591.918460][T15865]  ? __pfx_vm_normal_page+0x10/0x10
[  591.918479][T15865]  move_pages_and_store_status+0xf1/0x230
[  591.918498][T15865]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  591.918522][T15865]  kernel_move_pages+0xc89/0x14a0
[  591.918544][T15865]  ? __pfx_kernel_move_pages+0x10/0x10
[  591.918567][T15865]  ? find_held_lock+0x2b/0x80
[  591.918580][T15865]  ? trace_syscall_enter+0xd9/0x110
[  591.918592][T15865]  ? trace_syscall_enter+0xd9/0x110
[  591.918605][T15865]  __ia32_sys_move_pages+0xdd/0x1b0
[  591.918623][T15865]  ? trace_syscall_enter+0xe3/0x110
[  591.918634][T15865]  __do_fast_syscall_32+0xe7/0x970
[  591.918652][T15865]  do_fast_syscall_32+0x32/0x70
[  591.918668][T15865]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  591.918683][T15865] RIP: 0023:0xf701efec
[  591.918696][T15865] Code: Unable to access opcode bytes at 0xf701efc2.
[  591.918701][T15865] RSP: 002b:00000000f53cb50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  591.918712][T15865] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0
[  591.918719][T15865] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  591.918726][T15865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  591.918732][T15865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  591.918738][T15865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  591.918753][T15865]  </TASK>
[  592.192225][T15865] Mem-Info:
[  592.206844][T15865] active_anon:13934 inactive_anon:1910 isolated_anon:0
[  592.206844][T15865]  active_file:2371 inactive_file:20585 isolated_file:0
[  592.206844][T15865]  unevictable:768 dirty:814 writeback:0
[  592.206844][T15865]  slab_reclaimable:7030 slab_unreclaimable:72134
[  592.206844][T15865]  mapped:35033 shmem:13663 pagetables:1021
[  592.206844][T15865]  sec_pagetables:373 bounce:0
[  592.206844][T15865]  kernel_misc_reclaimable:0
[  592.206844][T15865]  free:32791 free_pcp:10490 free_cma:0
[  592.254600][T15865] Node 0 active_anon:8kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:1020kB sec_pagetables:1332kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  592.272103][T15865] Node 1 active_anon:57508kB inactive_anon:7584kB active_file:9484kB inactive_file:82340kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:141732kB dirty:3256kB writeback:0kB shmem:54684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7220kB pagetables:3112kB sec_pagetables:160kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  592.288950][T15865] Node 0 DMA free:2104kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:8kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  592.300136][T15865] lowmem_reserve[]: 0 280 280 280 280
[  592.304275][T15865] Node 0 DMA32 free:40972kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:716kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:516kB local_pcp:164kB free_cma:0kB
[  592.314522][T15865] lowmem_reserve[]: 0 0 0 0 0
[  592.316109][T15865] Node 1 DMA32 free:88088kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57712kB inactive_anon:7584kB active_file:9484kB inactive_file:82340kB unevictable:1544kB writepending:3256kB zspages:3752kB present:1048432kB managed:948212kB mlocked:8kB bounce:0kB free_pcp:39596kB local_pcp:14964kB free_cma:0kB
[  592.327071][T15865] lowmem_reserve[]: 0 0 0 0 0
[  592.328664][T15865] Node 0 DMA: 40*4kB (UE) 7*8kB (UE) 8*16kB (UE) 1*32kB (U) 1*64kB (E) 1*128kB (E) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2104kB
[  592.334400][T15865] Node 0 DMA32: 1013*4kB (UME) 533*8kB (UME) 229*16kB (UME) 352*32kB (UME) 81*64kB (UME) 28*128kB (UME) 11*256kB (UM) 6*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 40972kB
[  592.350013][T15865] Node 1 DMA32: 1*4kB (E) 223*8kB (UME) 2*16kB (UE) 8*32kB (ME) 149*64kB (ME) 89*128kB (UME) 62*256kB (M) 26*512kB (UM) 9*1024kB (M) 9*2048kB (UM) 2*4096kB (UM) = 88028kB
[  592.355676][T15865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  592.358948][T15865] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  592.361908][T15865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  592.364963][T15865] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  592.368067][T15865] 37518 total pagecache pages
[  592.369923][T15865] 585 pages in swap cache
[  592.371370][T15865] Free swap  = 82528kB
[  592.374423][T15865] Total swap = 124996kB
[  592.375745][T15865] 524155 pages RAM
[  592.378249][T15865] 0 pages HighMem/MovableOnly
[  592.388469][T15865] 211532 pages reserved
[  592.389960][T15865] 0 pages cma reserved
[  592.508536][T15868] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.514362][T15868] syzkaller0: entered promiscuous mode
[  592.518875][T15868] syzkaller0: entered allmulticast mode
[  592.571863][T15868] tipc: Resetting bearer <eth:syzkaller0>
[  592.599143][T15867] tipc: Resetting bearer <eth:syzkaller0>
[  592.633525][T15867] tipc: Disabling bearer <eth:syzkaller0>
[  592.907239][T15875] overlay: Unknown parameter '/'
[  592.937485][T15875] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  593.779184][ T5746] Bluetooth: hci4: command tx timeout
[  595.289098][T15893] binder: 15891:15893 ioctl 4018620d 0 returned -22
[  595.580886][T15900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.607163][T15900] syzkaller0: entered promiscuous mode
[  595.613046][T15900] syzkaller0: entered allmulticast mode
[  595.826713][T15904] tipc: Resetting bearer <eth:syzkaller0>
[  595.836747][T15899] tipc: Resetting bearer <eth:syzkaller0>
[  595.907423][T15899] tipc: Disabling bearer <eth:syzkaller0>
[  597.458578][T15930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  597.461514][T15930] syzkaller0: entered promiscuous mode
[  597.465599][T15930] syzkaller0: entered allmulticast mode
[  597.765188][T15932] tipc: Resetting bearer <eth:syzkaller0>
[  597.774802][T15929] tipc: Resetting bearer <eth:syzkaller0>
[  597.800755][T15929] tipc: Disabling bearer <eth:syzkaller0>
[  598.803357][T15938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  598.816373][T15938] syzkaller0: entered promiscuous mode
[  598.826190][T15938] syzkaller0: entered allmulticast mode
[  598.919970][T15935] binder: 15934:15935 ioctl 4018620d 0 returned -22
[  599.423177][T15940] tipc: Resetting bearer <eth:syzkaller0>
[  599.437772][T15937] tipc: Resetting bearer <eth:syzkaller0>
[  599.494668][T15937] tipc: Disabling bearer <eth:syzkaller0>
[  599.787058][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2841'.
[  599.790986][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2841'.
[  599.992423][T15953] usb_phy_generic pcspkr: dummy supplies not allowed for exclusive requests (id=vbus)
[  601.881052][T15977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.888410][T15977] syzkaller0: entered promiscuous mode
[  601.897157][T15977] syzkaller0: entered allmulticast mode
[  602.049080][T15970] binder: 15969:15970 ioctl 4018620d 0 returned -22
[  602.122762][T15982] tipc: Resetting bearer <eth:syzkaller0>
[  602.611446][T15976] tipc: Resetting bearer <eth:syzkaller0>
[  603.243050][T15976] tipc: Disabling bearer <eth:syzkaller0>
[  603.261884][ T5892] tipc: Node number set to 2019576405
[  603.404088][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2855'.
[  603.458654][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2855'.
[  603.700314][   T34] usb 11-1: new full-speed USB device number 2 using dummy_hcd
[  603.780760][T16001] syzkaller0: entered promiscuous mode
[  603.795363][T16001] syzkaller0: entered allmulticast mode
[  603.983560][   T34] usb 11-1: not running at top speed; connect to a high speed hub
[  603.996335][   T34] usb 11-1: config 3 has an invalid interface number: 161 but max is 0
[  603.999901][   T34] usb 11-1: config 3 has no interface number 0
[  604.002622][   T34] usb 11-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  604.014389][   T34] usb 11-1: config 3 interface 161 has no altsetting 0
[  604.034137][   T34] usb 11-1: language id specifier not provided by device, defaulting to English
[  604.046386][   T34] usb 11-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f
[  604.050061][   T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.710119][   T34] option 11-1:3.161: GSM modem (1-port) converter detected
[  604.714196][   T34] usb 11-1: USB disconnect, device number 2
[  604.717011][   T34] option 11-1:3.161: device disconnected
[  606.168654][T16025] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2865'.
[  606.586531][T16026] overlay: Unknown parameter '/'
[  606.651760][T16027] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  606.852779][T16029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  606.864122][T16029] syzkaller0: entered promiscuous mode
[  606.877603][T16029] syzkaller0: entered allmulticast mode
[  607.342563][T16034] tipc: Resetting bearer <eth:syzkaller0>
[  607.390038][T16028] tipc: Resetting bearer <eth:syzkaller0>
[  607.550678][T16031] binder: 16030:16031 ioctl 4018620d 0 returned -22
[  607.631930][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'.
[  607.638294][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2870'.
[  607.644935][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2870'.
[  608.365940][T16028] tipc: Disabling bearer <eth:syzkaller0>
[  608.621894][T16044] bridge_slave_1: left allmulticast mode
[  608.629030][T16044] bridge_slave_1: left promiscuous mode
[  608.632586][T16039] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  608.634588][T16044] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.637244][T16039] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  608.671403][T16039] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  608.730681][T16044] bridge_slave_0: left allmulticast mode
[  608.732854][T16044] bridge_slave_0: left promiscuous mode
[  608.734761][T16044] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.802426][T11684] tipc: Node number set to 3056757488
[  608.841468][T16057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  608.900570][T16054] tipc: Resetting bearer <eth:syzkaller0>
[  608.935583][T16061] syzkaller0: entered promiscuous mode
[  608.937308][T16061] syzkaller0: entered allmulticast mode
[  608.942718][T16053] tipc: Resetting bearer <eth:syzkaller0>
[  608.983157][T16053] tipc: Disabling bearer <eth:syzkaller0>
[  609.450827][T16076] binder: 16075:16076 ioctl 4018620d 0 returned -22
[  609.786344][T16085] overlay: Unknown parameter '/'
[  609.845089][T16086] overlayfs: overlapping lowerdir path
[  610.577719][T16098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  610.580701][T16098] syzkaller0: entered promiscuous mode
[  610.582716][T16098] syzkaller0: entered allmulticast mode
[  610.732506][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'.
[  610.736317][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'.
[  610.766516][T16107] tipc: Resetting bearer <eth:syzkaller0>
[  610.834195][T16097] tipc: Resetting bearer <eth:syzkaller0>
[  611.092628][T16097] tipc: Disabling bearer <eth:syzkaller0>
[  611.294718][T16111] binder: 16110:16111 ioctl 4018620d 0 returned -22
[  613.880893][T16146] overlay: Unknown parameter '/'
[  614.657067][T16144] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  615.303563][T16151] binder: 16150:16151 ioctl 4018620d 0 returned -22
[  615.484335][T16165] i2c i2c-0: delete_device: Can't find device in list
[  617.053399][T16187] binder: 16186:16187 ioctl 4018620d 0 returned -22
[  617.088456][T16189] overlay: Unknown parameter '/'
[  617.148361][T16190] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  618.929962][T16211] syzkaller0: entered promiscuous mode
[  618.931840][T16211] syzkaller0: entered allmulticast mode
[  618.946729][T16211] simple: basic_1
[  618.949054][T16211] simple: basic_2
[  618.950273][T16211] simple: basic_3
[  618.951629][T16211] simple: basic_4
[  618.953079][T16211] simple: basic_5
[  618.954517][T16211] simple: basic_6
[  618.955985][T16211] simple: basic_7
[  618.957402][T16211] simple: basic_8
[  618.958934][T16211] simple: basic_9
[  618.960355][T16211] simple: basic_10
[  618.961828][T16211] simple: basic_11
[  618.963326][T16211] simple: basic_12
[  618.964762][T16211] simple: basic_13
[  618.966231][T16211] simple: basic_14
[  618.967705][T16211] simple: basic_15
[  618.969204][T16211] simple: basic_16
[  618.970657][T16211] simple: basic_17
[  618.972093][T16211] 0: reclassify loop, rule prio 0, protocol 800
[  620.530693][T16232] overlay: Unknown parameter '/'
[  620.595854][T16233] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  621.388994][ T5892] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  621.567110][ T5892] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  621.572309][ T5892] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  621.582343][ T5892] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  621.586554][ T5892] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  621.597733][ T5892] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  621.606610][ T5892] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  621.609680][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  621.612437][ T5892] usb 9-1: Product: syz
[  621.613835][ T5892] usb 9-1: Manufacturer: syz
[  621.622397][ T5892] cdc_wdm 9-1:1.0: skipping garbage
[  621.625487][ T5892] cdc_wdm 9-1:1.0: skipping garbage
[  621.643970][ T5892] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  621.645924][ T5892] cdc_wdm 9-1:1.0: Unknown control protocol
[  623.629091][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2927'.
[  623.638981][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2927'.
[  623.744015][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2926'.
[  623.756556][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2926'.
[  623.872197][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  623.910161][T16244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.918462][T16244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.520178][ T5851] usb 9-1: USB disconnect, device number 2
[  626.716167][T16260] warn_alloc: 1 callbacks suppressed
[  626.716182][T16260] syz.7.2929: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1
[  626.731410][T16260] CPU: 0 UID: 0 PID: 16260 Comm: syz.7.2929 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  626.731432][T16260] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  626.731437][T16260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  626.731443][T16260] Call Trace:
[  626.731448][T16260]  <TASK>
[  626.731453][T16260]  dump_stack_lvl+0x100/0x190
[  626.731471][T16260]  warn_alloc.cold+0x94/0xa8
[  626.731483][T16260]  ? __pfx_warn_alloc+0x10/0x10
[  626.731499][T16260]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  626.731516][T16260]  ? __pfx_get_page_from_freelist+0x10/0x10
[  626.731533][T16260]  __alloc_frozen_pages_noprof+0x159f/0x2dc0
[  626.731553][T16260]  ? __css_rstat_updated+0x1ce/0x5a0
[  626.731572][T16260]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  626.731585][T16260]  ? do_raw_spin_lock+0x128/0x260
[  626.731600][T16260]  ? __lock_acquire+0x49f/0x1a40
[  626.731618][T16260]  ? do_raw_spin_unlock+0x145/0x1e0
[  626.731630][T16260]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  626.731645][T16260]  ? rcu_is_watching+0x12/0xc0
[  626.731659][T16260]  ? trace_hrtimer_start+0x77/0x220
[  626.731678][T16260]  __folio_alloc_noprof+0x13/0x260
[  626.731691][T16260]  alloc_migration_target+0x1d7/0x6d0
[  626.731711][T16260]  migrate_pages_batch+0x5dc/0x45c0
[  626.731729][T16260]  ? __pfx_alloc_migration_target+0x10/0x10
[  626.731751][T16260]  ? __pfx_migrate_pages_batch+0x10/0x10
[  626.731776][T16260]  ? __pfx___schedule+0x10/0x10
[  626.731789][T16260]  ? find_held_lock+0x2b/0x80
[  626.731804][T16260]  ? __lock_acquire+0x49f/0x1a40
[  626.731824][T16260]  migrate_pages_sync+0x12c/0x880
[  626.731841][T16260]  ? __pfx_alloc_migration_target+0x10/0x10
[  626.731862][T16260]  ? __pfx_migrate_pages_sync+0x10/0x10
[  626.731878][T16260]  ? __free_object+0x2a8/0x3f0
[  626.731910][T16260]  migrate_pages+0x1a83/0x2850
[  626.731929][T16260]  ? __pfx_alloc_migration_target+0x10/0x10
[  626.731958][T16260]  ? do_raw_spin_lock+0x128/0x260
[  626.731973][T16260]  ? __pfx_migrate_pages+0x10/0x10
[  626.731994][T16260]  ? __lock_acquire+0x49f/0x1a40
[  626.732011][T16260]  ? __pfx_vm_normal_page+0x10/0x10
[  626.732030][T16260]  move_pages_and_store_status+0xf1/0x230
[  626.732049][T16260]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  626.732073][T16260]  kernel_move_pages+0xc89/0x14a0
[  626.732096][T16260]  ? __pfx_kernel_move_pages+0x10/0x10
[  626.732119][T16260]  ? find_held_lock+0x2b/0x80
[  626.732132][T16260]  ? trace_syscall_enter+0xd9/0x110
[  626.732143][T16260]  ? trace_syscall_enter+0xd9/0x110
[  626.732156][T16260]  __ia32_sys_move_pages+0xdd/0x1b0
[  626.732174][T16260]  ? trace_syscall_enter+0xe3/0x110
[  626.732186][T16260]  __do_fast_syscall_32+0xe7/0x970
[  626.732205][T16260]  do_fast_syscall_32+0x32/0x70
[  626.732221][T16260]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  626.732237][T16260] RIP: 0023:0xf7f92fec
[  626.732252][T16260] Code: Unable to access opcode bytes at 0xf7f92fc2.
[  626.732257][T16260] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  626.732268][T16260] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0
[  626.732275][T16260] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  626.732281][T16260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  626.732288][T16260] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  626.732294][T16260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  626.732308][T16260]  </TASK>
[  626.733494][T16260] Mem-Info:
[  627.397996][T16260] active_anon:4313 inactive_anon:35061 isolated_anon:1
[  627.397996][T16260]  active_file:385 inactive_file:12585 isolated_file:0
[  627.397996][T16260]  unevictable:770 dirty:115 writeback:0
[  627.397996][T16260]  slab_reclaimable:7058 slab_unreclaimable:72216
[  627.397996][T16260]  mapped:25157 shmem:38455 pagetables:1249
[  627.397996][T16260]  sec_pagetables:374 bounce:0
[  627.397996][T16260]  kernel_misc_reclaimable:0
[  627.397996][T16260]  free:25075 free_pcp:584 free_cma:0
[  627.477383][T16260] Node 0 active_anon:8kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8064kB pagetables:1020kB sec_pagetables:1340kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  627.487932][T16260] Node 1 active_anon:17448kB inactive_anon:140188kB active_file:2908kB inactive_file:49608kB unevictable:1544kB isolated(anon):4kB isolated(file):0kB mapped:100532kB dirty:460kB writeback:0kB shmem:152556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7156kB pagetables:3976kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  627.528597][T16260] Node 0 DMA free:2108kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:8kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  627.563985][T16260] lowmem_reserve[]: 0 280 280 280 280
[  627.571554][T16260] Node 0 DMA32 free:35600kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:1348kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:128kB free_cma:0kB
[  627.588237][T16260] lowmem_reserve[]: 0 0 0 0 0
[  627.602847][T16260] Node 1 DMA32 free:51584kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25336kB inactive_anon:140052kB active_file:3716kB inactive_file:50928kB unevictable:1544kB writepending:460kB zspages:6188kB present:1048432kB managed:948212kB mlocked:8kB bounce:0kB free_pcp:1744kB local_pcp:884kB free_cma:0kB
[  627.617402][T16260] lowmem_reserve[]: 0 0 0 0 0
[  627.621126][T16260] Node 0 DMA: 41*4kB (UE) 7*8kB (UE) 8*16kB (UE) 1*32kB (U) 1*64kB (E) 1*128kB (E) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2108kB
[  627.627272][T16260] Node 0 DMA32: 1104*4kB (UME) 532*8kB (UME) 231*16kB (UME) 172*32kB (UME) 81*64kB (UME) 28*128kB (UME) 11*256kB (UM) 6*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 35600kB
[  627.634691][T16260] Node 1 DMA32: 190*4kB (UME) 199*8kB (UME) 104*16kB (UME) 204*32kB (UME) 169*64kB (UME) 75*128kB (UME) 16*256kB (UM) 1*512kB (U) 3*1024kB (UM) 5*2048kB (UM) 1*4096kB (E) = 52976kB
[  627.642462][T16260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  627.646712][T16260] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  627.655127][T16260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  627.660523][T16260] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  627.667078][T16260] 54240 total pagecache pages
[  627.670038][T16260] 945 pages in swap cache
[  627.671933][T16260] Free swap  = 0kB
[  627.673585][T16260] Total swap = 124996kB
[  627.675350][T16260] 524155 pages RAM
[  627.676934][T16260] 0 pages HighMem/MovableOnly
[  627.679561][T16260] 211532 pages reserved
[  627.681320][T16260] 0 pages cma reserved
[  628.772182][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2938'.
[  628.848195][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2938'.
[  629.037273][T16290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  629.040097][T16290] syzkaller0: entered promiscuous mode
[  629.043591][T16290] syzkaller0: entered allmulticast mode
[  629.278386][T16294] overlay: Unknown parameter '/'
[  629.385966][T16295] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  629.497697][T16293] tipc: Resetting bearer <eth:syzkaller0>
[  629.905963][T16289] tipc: Resetting bearer <eth:syzkaller0>
[  630.666577][T16289] tipc: Disabling bearer <eth:syzkaller0>
[  630.682824][ T5843] tipc: Node number set to 3452319100
[  630.939234][T16297] binder: 16296:16297 ioctl 4018620d 0 returned -22
[  631.504380][T16305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.514608][T16305] syzkaller0: entered promiscuous mode
[  631.518680][T16305] syzkaller0: entered allmulticast mode
[  631.592779][T16304] tipc: Resetting bearer <eth:syzkaller0>
[  632.023945][T16304] tipc: Disabling bearer <eth:syzkaller0>
[  632.092055][   T42] audit: type=1804 audit(1785754729.303:10235): pid=16301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2943" name="/newroot/51/cgroup.controllers" dev="tmpfs" ino=301 res=1 errno=0
[  632.104583][   T42] audit: type=1800 audit(1785754729.313:10236): pid=16301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2943" name="cgroup.controllers" dev="tmpfs" ino=301 res=0 errno=0
[  634.164836][T16334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  634.167796][T16334] syzkaller0: entered promiscuous mode
[  634.173606][T16334] syzkaller0: entered allmulticast mode
[  634.238698][T16334] tipc: Resetting bearer <eth:syzkaller0>
[  634.254140][T16332] tipc: Resetting bearer <eth:syzkaller0>
[  634.289857][T16332] tipc: Disabling bearer <eth:syzkaller0>
[  635.108925][T16346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  635.114689][T16346] syzkaller0: entered promiscuous mode
[  635.116461][T16346] syzkaller0: entered allmulticast mode
[  635.213767][T16345] tipc: Resetting bearer <eth:syzkaller0>
[  635.548489][T16345] tipc: Disabling bearer <eth:syzkaller0>
[  636.358118][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2959'.
[  636.365038][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2959'.
[  637.476665][T16368] netlink: 'syz.6.2961': attribute type 1 has an invalid length.
[  637.483110][T16368] netlink: 756 bytes leftover after parsing attributes in process `syz.6.2961'.
[  637.723931][T16379] overlay: Unknown parameter '/'
[  637.791445][T16381] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  639.202445][T16389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  639.211828][T16389] syzkaller0: entered promiscuous mode
[  639.213681][T16389] syzkaller0: entered allmulticast mode
[  639.232313][T16388] tipc: Resetting bearer <eth:syzkaller0>
[  639.297471][T16388] tipc: Disabling bearer <eth:syzkaller0>
[  639.506052][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2968'.
[  639.512011][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2968'.
[  641.960674][T16416] syzkaller1: entered promiscuous mode
[  641.969014][T16416] syzkaller1: entered allmulticast mode
[  642.381361][T16422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  642.384146][T16422] syzkaller0: entered promiscuous mode
[  642.386069][T16422] syzkaller0: entered allmulticast mode
[  642.394962][T16421] tipc: Resetting bearer <eth:syzkaller0>
[  642.412557][T16421] tipc: Disabling bearer <eth:syzkaller0>
[  642.532813][T16423] warn_alloc: 1 callbacks suppressed
[  642.532828][T16423] syz.5.2976: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1
[  642.548238][T16423] CPU: 2 UID: 0 PID: 16423 Comm: syz.5.2976 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  642.548264][T16423] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  642.548270][T16423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  642.548290][T16423] Call Trace:
[  642.548296][T16423]  <TASK>
[  642.548302][T16423]  dump_stack_lvl+0x100/0x190
[  642.548321][T16423]  warn_alloc.cold+0x94/0xa8
[  642.548335][T16423]  ? __pfx_warn_alloc+0x10/0x10
[  642.548356][T16423]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  642.548377][T16423]  ? __pfx_get_page_from_freelist+0x10/0x10
[  642.548398][T16423]  __alloc_frozen_pages_noprof+0x159f/0x2dc0
[  642.548422][T16423]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  642.548437][T16423]  ? do_raw_spin_lock+0x128/0x260
[  642.548453][T16423]  ? __lock_acquire+0x49f/0x1a40
[  642.548469][T16423]  ? do_raw_spin_unlock+0x145/0x1e0
[  642.548482][T16423]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  642.548497][T16423]  ? rcu_is_watching+0x12/0xc0
[  642.548510][T16423]  ? trace_hrtimer_start+0x77/0x220
[  642.548529][T16423]  __folio_alloc_noprof+0x13/0x260
[  642.548544][T16423]  alloc_migration_target+0x1d7/0x6d0
[  642.548563][T16423]  migrate_pages_batch+0x5dc/0x45c0
[  642.548583][T16423]  ? __pfx_alloc_migration_target+0x10/0x10
[  642.548604][T16423]  ? __pfx_migrate_pages_batch+0x10/0x10
[  642.548625][T16423]  ? __pfx___schedule+0x10/0x10
[  642.548637][T16423]  ? find_held_lock+0x2b/0x80
[  642.548652][T16423]  ? __lock_acquire+0x49f/0x1a40
[  642.548671][T16423]  migrate_pages_sync+0x12c/0x880
[  642.548689][T16423]  ? __pfx_alloc_migration_target+0x10/0x10
[  642.548708][T16423]  ? __pfx_migrate_pages_sync+0x10/0x10
[  642.548731][T16423]  migrate_pages+0x1a83/0x2850
[  642.548750][T16423]  ? __pfx_alloc_migration_target+0x10/0x10
[  642.548768][T16423]  ? do_raw_spin_lock+0x128/0x260
[  642.548781][T16423]  ? __pfx_migrate_pages+0x10/0x10
[  642.548800][T16423]  ? __lock_acquire+0x49f/0x1a40
[  642.548818][T16423]  ? __pfx_vm_normal_page+0x10/0x10
[  642.548836][T16423]  move_pages_and_store_status+0xf1/0x230
[  642.548855][T16423]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  642.548878][T16423]  kernel_move_pages+0xc89/0x14a0
[  642.548900][T16423]  ? __pfx_kernel_move_pages+0x10/0x10
[  642.548923][T16423]  ? find_held_lock+0x2b/0x80
[  642.548935][T16423]  ? trace_syscall_enter+0xd9/0x110
[  642.548947][T16423]  ? trace_syscall_enter+0xd9/0x110
[  642.548959][T16423]  __ia32_sys_move_pages+0xdd/0x1b0
[  642.548977][T16423]  ? trace_syscall_enter+0xe3/0x110
[  642.548988][T16423]  __do_fast_syscall_32+0xe7/0x970
[  642.549006][T16423]  do_fast_syscall_32+0x32/0x70
[  642.549022][T16423]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  642.549037][T16423] RIP: 0023:0xf700efec
[  642.549057][T16423] Code: Unable to access opcode bytes at 0xf700efc2.
[  642.549063][T16423] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  642.549075][T16423] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0
[  642.549083][T16423] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  642.549091][T16423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  642.549098][T16423] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  642.549106][T16423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  642.549121][T16423]  </TASK>
[  642.654744][T16423] Mem-Info:
[  642.661116][T16423] active_anon:12878 inactive_anon:14237 isolated_anon:0
[  642.661116][T16423]  active_file:4382 inactive_file:10759 isolated_file:0
[  642.661116][T16423]  unevictable:770 dirty:425 writeback:0
[  642.661116][T16423]  slab_reclaimable:7012 slab_unreclaimable:72724
[  642.661116][T16423]  mapped:30797 shmem:25551 pagetables:1107
[  642.661116][T16423]  sec_pagetables:374 bounce:0
[  642.661116][T16423]  kernel_misc_reclaimable:0
[  642.661116][T16423]  free:27914 free_pcp:8606 free_cma:0
[  642.675698][T16423] Node 0 active_anon:32kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8032kB pagetables:1020kB sec_pagetables:1340kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  642.755403][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2979'.
[  642.756712][T16423] Node 1 active_anon:43116kB inactive_anon:43180kB active_file:17528kB inactive_file:43036kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:123160kB dirty:1700kB writeback:0kB shmem:78500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7088kB pagetables:3408kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  642.790233][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2979'.
[  642.793249][T16423] Node 0 DMA free:2108kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:8kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  642.813437][T16423] lowmem_reserve[]: 0 280 280 280 280
[  642.815745][T16423] Node 0 DMA32 free:33908kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:748kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:6260kB local_pcp:1316kB free_cma:0kB
[  642.874219][T16423] lowmem_reserve[]: 0 0 0 0 0
[  642.934961][T16423] Node 1 DMA32 free:82872kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43116kB inactive_anon:43180kB active_file:17528kB inactive_file:43036kB unevictable:1544kB writepending:1700kB zspages:4512kB present:1048432kB managed:948212kB mlocked:8kB bounce:0kB free_pcp:42360kB local_pcp:17032kB free_cma:0kB
[  642.968767][T16423] lowmem_reserve[]: 0 0 0 0 0
[  643.050418][T16423] Node 0 DMA: 41*4kB (UE) 7*8kB (UE) 8*16kB (UE) 1*32kB (U) 1*64kB (E) 1*128kB (E) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2108kB
[  643.086394][T16423] Node 0 DMA32: 1073*4kB (UME) 504*8kB (UME) 217*16kB (UME) 161*32kB (UME) 75*64kB (UME) 25*128kB (UME) 11*256kB (UM) 6*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 33908kB
[  643.226442][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2982'.
[  643.234516][T16439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  643.239661][T16439] syzkaller0: entered promiscuous mode
[  643.244474][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2982'.
[  643.248666][T16439] syzkaller0: entered allmulticast mode
[  643.324219][T16423] Node 1 DMA32: 1237*4kB (UM) 1105*8kB (UME) 264*16kB (UME) 199*32kB (UME) 126*64kB (UME) 87*128kB (UME) 27*256kB (UM) 17*512kB (UM) 11*1024kB (UM) 6*2048kB (UM) 0*4096kB = 82748kB
[  643.365748][T16423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  643.400115][T16442] tipc: Resetting bearer <eth:syzkaller0>
[  643.411860][T16423] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  643.426403][T16438] tipc: Resetting bearer <eth:syzkaller0>
[  643.457786][T16423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  643.481122][T16438] tipc: Disabling bearer <eth:syzkaller0>
[  643.495628][T16423] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  643.505320][T16423] 39013 total pagecache pages
[  643.506873][T16423] 1791 pages in swap cache
[  643.514636][T16423] Free swap  = 61680kB
[  643.518249][T16423] Total swap = 124996kB
[  643.524909][T16423] 524155 pages RAM
[  643.536261][T16423] 0 pages HighMem/MovableOnly
[  643.552948][T16423] 211532 pages reserved
[  643.554727][T16423] 0 pages cma reserved
[  645.244465][T16458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  645.285753][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2989'.
[  645.289722][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2989'.
[  645.304922][T16456] tipc: Disabling bearer <eth:syzkaller0>
[  645.334838][T16459] syzkaller1: entered promiscuous mode
[  645.337312][T16459] syzkaller1: entered allmulticast mode
[  646.330188][T16476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  646.332971][T16476] syzkaller0: entered promiscuous mode
[  646.334909][T16476] syzkaller0: entered allmulticast mode
[  646.351818][T16476] tipc: Resetting bearer <eth:syzkaller0>
[  646.355047][T16475] tipc: Resetting bearer <eth:syzkaller0>
[  646.367940][T16475] tipc: Disabling bearer <eth:syzkaller0>
[  646.577634][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2996'.
[  646.629441][T16481] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  646.633464][T16481] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  646.646418][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2996'.
[  646.680545][T16481] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  646.694160][T16481] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  646.696943][T16481] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  646.701467][T16481] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  646.707978][T16481] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  646.716513][T16481] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  646.724753][T16481] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  646.750046][T16481] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  646.758609][T16481] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  646.773961][T16481] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  647.243975][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2998'.
[  647.247669][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2998'.
[  647.437685][T16496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  647.540144][T16495] tipc: Disabling bearer <eth:syzkaller0>
[  648.659137][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout
[  648.715728][T16508] syzkaller1: entered promiscuous mode
[  648.717429][T16508] syzkaller1: entered allmulticast mode
[  648.730202][T16510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  648.735447][T16510] syzkaller0: entered promiscuous mode
[  648.738950][ T5746] Bluetooth: hci5: command 0x0c1a tx timeout
[  648.739128][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  648.754827][T16510] syzkaller0: entered allmulticast mode
[  648.780101][T16510] tipc: Resetting bearer <eth:syzkaller0>
[  648.805004][T16509] tipc: Resetting bearer <eth:syzkaller0>
[  648.821526][ T5746] Bluetooth: hci4: command 0x0c1a tx timeout
[  648.859464][T16509] tipc: Disabling bearer <eth:syzkaller0>
[  649.424440][T16516] __nla_validate_parse: 2 callbacks suppressed
[  649.424456][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3007'.
[  649.436363][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3007'.
[  649.547123][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3008'.
[  649.556316][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3008'.
[  649.950358][T16520] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  649.963590][T16520] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  649.970398][T16520] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  649.983062][T16520] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  650.050138][T16523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.164016][T16522] tipc: Disabling bearer <eth:syzkaller0>
[  651.422787][T16539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'.
[  651.448576][T16539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'.
[  652.025760][ T5746] Bluetooth: hci4: command 0x0c1a tx timeout
[  652.027715][ T5746] Bluetooth: hci5: command 0x0c1a tx timeout
[  652.028877][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  652.029712][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout
[  652.286985][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3017'.
[  652.306706][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3017'.
[  653.355846][T16553] binder: 16546:16553 ioctl 4018620d 0 returned -22
[  653.705707][T16555] syzkaller1: entered promiscuous mode
[  653.707519][T16555] syzkaller1: entered allmulticast mode
[  653.755603][T16560] ehci-pci 0000:00:1d.7: remove, state 4
[  653.760084][T16560] usb usb1: USB disconnect, device number 1
[  653.806680][T16557] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  653.809982][T16557] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  653.813659][T16557] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  653.817006][T16557] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  653.828068][T16560] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  653.892194][T16564] binder: 16558:16564 ioctl 4018620d 0 returned -22
[  653.906740][T16557] warn_alloc: 3 callbacks suppressed
[  653.906760][T16557] syz.6.3021: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1
[  653.929106][T16557] CPU: 2 UID: 0 PID: 16557 Comm: syz.6.3021 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  653.929128][T16557] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  653.929133][T16557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  653.929140][T16557] Call Trace:
[  653.929145][T16557]  <TASK>
[  653.929150][T16557]  dump_stack_lvl+0x100/0x190
[  653.929168][T16557]  warn_alloc.cold+0x94/0xa8
[  653.929181][T16557]  ? __pfx_warn_alloc+0x10/0x10
[  653.929200][T16557]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  653.929219][T16557]  ? __pfx_get_page_from_freelist+0x10/0x10
[  653.929237][T16557]  __alloc_frozen_pages_noprof+0x159f/0x2dc0
[  653.929260][T16557]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  653.929276][T16557]  ? stack_trace_save+0x8e/0xc0
[  653.929292][T16557]  ? __pfx_stack_trace_save+0x10/0x10
[  653.929313][T16557]  ? kasan_save_track+0x14/0x30
[  653.929327][T16557]  ? __kasan_kmalloc+0xaa/0xb0
[  653.929339][T16557]  ? __kmalloc_noprof+0x322/0x820
[  653.929351][T16557]  ? comedi_isadma_alloc+0xc6/0x620
[  653.929399][T16557]  ? pcl816_attach+0x909/0xb30
[  653.929422][T16557]  __alloc_pages_noprof+0xb/0x110
[  653.929436][T16557]  __dma_direct_alloc_pages.isra.0+0x47c/0x8f0
[  653.929470][T16557]  ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10
[  653.929488][T16557]  ? dma_alloc_from_dev_coherent+0x2e0/0x570
[  653.929507][T16557]  dma_direct_alloc+0x8f/0x590
[  653.929524][T16557]  dma_alloc_attrs+0x182/0x3a0
[  653.929539][T16557]  ? __pfx_dma_alloc_attrs+0x10/0x10
[  653.929552][T16557]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  653.929566][T16557]  ? dma_direct_supported+0xca/0x220
[  653.929585][T16557]  comedi_isadma_alloc+0x331/0x620
[  653.929605][T16557]  ? __pfx_comedi_isadma_alloc+0x10/0x10
[  653.929622][T16557]  ? request_threaded_irq+0x27b/0x3e0
[  653.929641][T16557]  pcl816_attach+0x909/0xb30
[  653.929657][T16557]  comedi_device_attach+0x40e/0x6b0
[  653.929674][T16557]  do_devconfig_ioctl+0x1b3/0x6d0
[  653.929690][T16557]  ? comedi_unlocked_ioctl+0x180/0x3310
[  653.929702][T16557]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  653.929725][T16557]  ? tomoyo_path_number_perm+0x46d/0x580
[  653.929740][T16557]  ? kasan_save_stack+0x3f/0x50
[  653.929753][T16557]  ? kasan_save_stack+0x30/0x50
[  653.929766][T16557]  ? kasan_save_track+0x14/0x30
[  653.929779][T16557]  ? kasan_save_free_info+0x3b/0x70
[  653.929792][T16557]  comedi_unlocked_ioctl+0x860/0x3310
[  653.929807][T16557]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  653.929852][T16557]  ? kasan_quarantine_put+0x104/0x240
[  653.929867][T16557]  ? lockdep_hardirqs_on+0x78/0x100
[  653.929884][T16557]  ? find_held_lock+0x2b/0x80
[  653.929898][T16557]  ? tomoyo_path_number_perm+0x28f/0x580
[  653.929913][T16557]  ? tomoyo_path_number_perm+0x28f/0x580
[  653.929931][T16557]  ? tomoyo_path_number_perm+0x188/0x580
[  653.929950][T16557]  comedi_compat_ioctl+0x438/0xe20
[  653.929963][T16557]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[  653.929975][T16557]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  653.929993][T16557]  ? do_vfs_ioctl+0x226/0x13e0
[  653.930009][T16557]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  653.930029][T16557]  ? find_held_lock+0x2b/0x80
[  653.930042][T16557]  ? __fget_files+0x215/0x3d0
[  653.930052][T16557]  ? hook_file_ioctl_common+0x140/0x440
[  653.930070][T16557]  ? __fget_files+0x21f/0x3d0
[  653.930088][T16557]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[  653.930099][T16557]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  653.930118][T16557]  __do_fast_syscall_32+0xe7/0x970
[  653.930134][T16557]  ? lockdep_hardirqs_on+0x78/0x100
[  653.930151][T16557]  do_fast_syscall_32+0x32/0x70
[  653.930168][T16557]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  653.930183][T16557] RIP: 0023:0xf701efec
[  653.930197][T16557] Code: Unable to access opcode bytes at 0xf701efc2.
[  653.930202][T16557] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  653.930213][T16557] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400
[  653.930221][T16557] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000
[  653.930229][T16557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  653.930237][T16557] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  653.930244][T16557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  653.930259][T16557]  </TASK>
[  653.930298][T16557] Mem-Info:
[  654.067224][T16557] active_anon:978 inactive_anon:1499 isolated_anon:0
[  654.067224][T16557]  active_file:4176 inactive_file:17785 isolated_file:0
[  654.067224][T16557]  unevictable:783 dirty:546 writeback:0
[  654.067224][T16557]  slab_reclaimable:7008 slab_unreclaimable:72586
[  654.067224][T16557]  mapped:22236 shmem:787 pagetables:984
[  654.067224][T16557]  sec_pagetables:374 bounce:0
[  654.067224][T16557]  kernel_misc_reclaimable:0
[  654.067224][T16557]  free:39065 free_pcp:0 free_cma:0
[  654.081600][T16557] Node 0 active_anon:0kB inactive_anon:64kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8032kB pagetables:1020kB sec_pagetables:1340kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  654.091716][T16557] Node 0 DMA free:2108kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:8kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  654.101302][T16557] lowmem_reserve[]: 0 280 280 280 280
[  654.103036][T16557] Node 0 DMA: 41*4kB (UE) 7*8kB (UE) 8*16kB (UE) 1*32kB (U) 1*64kB (E) 1*128kB (E) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2108kB
[  654.107572][T16557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  654.110639][T16557] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  654.113621][T16557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  654.116555][T16557] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  654.119631][T16557] 24600 total pagecache pages
[  654.121136][T16557] 1853 pages in swap cache
[  654.124624][T16557] Free swap  = 77400kB
[  654.125933][T16557] Total swap = 124996kB
[  654.127294][T16557] 524155 pages RAM
[  654.128500][T16557] 0 pages HighMem/MovableOnly
[  654.130392][T16557] 211532 pages reserved
[  654.131722][T16557] 0 pages cma reserved
[  654.189146][ T5851] usb 2-1: new full-speed USB device number 2 using uhci_hcd
[  654.361158][ T5851] usb 2-1: not running at top speed; connect to a high speed hub
[  654.388104][ T5851] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  654.391326][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  654.413247][T16566] syzkaller0: entered promiscuous mode
[  654.416674][ T5851] usb 2-1: Product: QEMU USB Tablet
[  654.418689][ T5851] usb 2-1: Manufacturer: QEMU
[  654.418982][T16566] syzkaller0: entered allmulticast mode
[  654.423036][ T5851] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  654.468894][ T5851] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input17
[  654.554062][ T5851] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  654.679732][T16563] usb 2-1: USB disconnect, device number 2
[  654.934033][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'.
[  654.944279][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'.
[  655.524719][T16578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  655.530101][T16578] syzkaller0: entered promiscuous mode
[  655.531802][T16578] syzkaller0: entered allmulticast mode
[  655.560637][T16578] tipc: Resetting bearer <eth:syzkaller0>
[  655.604419][T16577] tipc: Resetting bearer <eth:syzkaller0>
[  655.778553][T16577] tipc: Disabling bearer <eth:syzkaller0>
[  655.859196][   T64] Bluetooth: hci4: command 0x0c1a tx timeout
[  655.859252][ T5746] Bluetooth: hci5: command 0x0c1a tx timeout
[  655.861913][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  655.864043][T15439] Bluetooth: hci1: command 0x0c1a tx timeout
[  656.055224][T16585] fido_id[16585]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  656.393547][T16563] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  656.495910][T16563] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  656.543578][T16563] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  656.579878][T16563] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  656.611408][T16563] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  656.616451][T16563] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  656.645151][T16563] usb usb1: Product: EHCI Host Controller
[  656.662111][T16563] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  656.671130][T16563] usb usb1: SerialNumber: 0000:00:1d.7
[  656.750515][T16563] hub 1-0:1.0: USB hub found
[  656.795319][T16563] hub 1-0:1.0: 6 ports detected
[  656.884141][T16596] netlink: 'syz.4.3032': attribute type 1 has an invalid length.
[  656.898731][T16596] netlink: 756 bytes leftover after parsing attributes in process `syz.4.3032'.
[  656.956379][T16563] hub 2-0:1.0: USB hub found
[  657.060200][T16563] hub 2-0:1.0: 2 ports detected
[  657.168928][ T5851] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  657.194348][T16563] hub 3-0:1.0: USB hub found
[  657.204428][T16563] hub 3-0:1.0: 2 ports detected
[  657.353293][ T5851] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  657.368723][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  657.386844][ T5851] usb 1-1: Product: QEMU USB Tablet
[  657.446020][T16563] hub 4-0:1.0: USB hub found
[  657.448393][ T5851] usb 1-1: Manufacturer: QEMU
[  657.461246][T16563] hub 4-0:1.0: 2 ports detected
[  657.463449][ T5851] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  657.624056][ T5851] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0007/input/input18
[  657.747903][T16602] syzkaller0: entered promiscuous mode
[  657.757619][T16602] syzkaller0: entered allmulticast mode
[  657.844748][ T5851] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  658.402212][T16614] binder: 16603:16614 ioctl 4018620d 0 returned -22
[  658.527361][T16614] binder: 16603:16614 ioctl c0306201 0 returned -14
[  658.629223][T16619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  658.634717][T16619] syzkaller0: entered promiscuous mode
[  658.636507][T16619] syzkaller0: entered allmulticast mode
[  658.660472][T16619] tipc: Resetting bearer <eth:syzkaller0>
[  658.680889][T16618] tipc: Resetting bearer <eth:syzkaller0>
[  658.776039][T16618] tipc: Disabling bearer <eth:syzkaller0>
[  659.047138][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3040'.
[  659.075455][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3040'.
[  660.560651][T16635] ehci-pci 0000:00:1d.7: remove, state 1
[  660.599007][T16635] usb usb1: USB disconnect, device number 1
[  660.615228][T16635] usb 1-1: USB disconnect, device number 2
[  661.418420][T16635] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  661.474786][ T5830] libceph: connect (1)[c::]:6789 error -101
[  661.476975][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  661.481156][T16643] ceph: No mds server is up or the cluster is laggy
[  661.650143][T16636] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  661.667729][T16636] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  661.676017][T16636] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  661.699165][T16636] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  661.707058][T16636] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  661.711335][T16636] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  661.714696][T16636] usb usb1: Product: EHCI Host Controller
[  661.717804][T16636] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  661.720504][T16636] usb usb1: SerialNumber: 0000:00:1d.7
[  661.750706][T16636] hub 1-0:1.0: USB hub found
[  661.753230][T16636] hub 1-0:1.0: 6 ports detected
[  661.860079][T16636] hub 2-0:1.0: USB hub found
[  661.865413][T16636] hub 2-0:1.0: 2 ports detected
[  661.938506][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3048'.
[  661.938559][T16636] hub 3-0:1.0: USB hub found
[  661.944112][T16636] hub 3-0:1.0: 2 ports detected
[  661.956253][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3048'.
[  662.068639][T16636] hub 4-0:1.0: USB hub found
[  662.070490][ T1042] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  662.077486][T16636] hub 4-0:1.0: 2 ports detected
[  662.156792][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3049'.
[  662.172888][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3049'.
[  662.276411][ T1042] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  662.280678][ T1042] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  662.284391][ T1042] usb 1-1: Product: QEMU USB Tablet
[  662.286840][ T1042] usb 1-1: Manufacturer: QEMU
[  662.293271][ T1042] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  662.329084][T16660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  662.342735][T16660] syzkaller0: entered promiscuous mode
[  662.351286][T16660] syzkaller0: entered allmulticast mode
[  662.371813][T16660] tipc: Resetting bearer <eth:syzkaller0>
[  662.379750][T16659] tipc: Resetting bearer <eth:syzkaller0>
[  662.437718][T16659] tipc: Disabling bearer <eth:syzkaller0>
[  662.544580][ T1042] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input19
[  662.886180][T16664] netlink: 'syz.7.3054': attribute type 1 has an invalid length.
[  662.892136][T16664] netlink: 756 bytes leftover after parsing attributes in process `syz.7.3054'.
[  663.067339][ T1042] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  663.257550][T16667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  663.918104][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3058'.
[  663.922031][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3058'.
[  664.345818][T16693] syzkaller0: entered promiscuous mode
[  664.354222][T16693] syzkaller0: entered allmulticast mode
[  664.412002][T16696] syzkaller0: entered promiscuous mode
[  664.413924][T16696] syzkaller0: entered allmulticast mode
[  665.578708][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3069'.
[  665.594423][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3069'.
[  666.068628][T16726] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  666.070790][T16726] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  666.092193][T16726] vhci_hcd vhci_hcd.0: Device attached
[  666.392138][   T34] usb 50-1: SetAddress Request (2) to port 0
[  666.416671][   T34] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  666.585724][T16727] vhci_hcd: connection reset by peer
[  666.589523][   T13] vhci_hcd vhci_hcd.6: stop threads
[  666.591209][   T13] vhci_hcd vhci_hcd.6: release socket
[  666.593031][   T13] vhci_hcd vhci_hcd.6: disconnect device
[  666.785668][T16737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  667.295379][T16744] syzkaller0: entered promiscuous mode
[  667.297245][T16744] syzkaller0: entered allmulticast mode
[  667.704673][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3076'.
[  667.712198][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3076'.
[  668.441972][T16761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  668.445803][T16761] syzkaller0: entered promiscuous mode
[  668.448311][T16761] syzkaller0: entered allmulticast mode
[  668.659368][T16761] tipc: Resetting bearer <eth:syzkaller0>
[  668.678985][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  668.953090][T16759] tipc: Resetting bearer <eth:syzkaller0>
[  669.334186][T16759] tipc: Disabling bearer <eth:syzkaller0>
[  669.688375][T16780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  669.868671][T16777] 8021q: adding VLAN 0 to HW filter on device bond1
[  671.075579][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3088'.
[  671.095156][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3088'.
[  671.459102][   T34] usb 50-1: device descriptor read/8, error -110
[  671.859914][   T34] usb usb50-port1: attempt power cycle
[  671.880086][T16817] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  672.483638][   T34] usb usb50-port1: unable to enumerate USB device
[  672.485077][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3095'.
[  672.496269][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3095'.
[  672.604922][T16840] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  672.687095][   T42] audit: type=1326 audit(1785754769.893:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.5.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  672.721837][   T42] audit: type=1326 audit(1785754769.913:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.5.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  672.747193][   T42] audit: type=1326 audit(1785754769.933:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.5.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  672.768971][   T42] audit: type=1326 audit(1785754769.933:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.5.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  672.808957][   T42] audit: type=1326 audit(1785754769.933:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.5.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700efec code=0x7ffc0000
[  672.834942][   T42] audit: type=1326 audit(1785754769.933:10242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.5.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  672.856015][   T42] audit: type=1326 audit(1785754769.933:10243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.5.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000
[  673.013641][   T42] audit: type=1326 audit(1785754770.223:10244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.5.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  673.023243][   T42] audit: type=1326 audit(1785754770.223:10245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.5.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  673.179996][T16845] fuse: Unknown parameter 'group_i00000000000000000000'
[  673.673442][ T5892] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  673.839383][ T5892] usb 9-1: Using ep0 maxpacket: 32
[  673.854529][ T5892] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  673.873099][ T5892] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  673.884611][ T5892] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  673.889969][ T5892] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  673.898276][ T5892] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  673.911771][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.925642][ T5892] usb 9-1: Product: syz
[  673.929130][ T5892] usb 9-1: Manufacturer: syz
[  673.935226][ T5892] usb 9-1: SerialNumber: syz
[  673.995208][    C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  674.043726][ T5892] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input20
[  674.128965][ T5843] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  674.339125][ T5892] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  674.348251][ T5892]  (id 0x00)
[  674.384483][T16860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  674.399962][ T5892] rc_core: IR keymap rc-imon-pad not found
[  674.402218][ T5892] Registered IR keymap rc-empty
[  674.408775][ T5892] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  674.414105][ T5892] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  674.458984][ T5843] usb 11-1: Using ep0 maxpacket: 32
[  674.469820][T16858] tipc: Disabling bearer <eth:syzkaller0>
[  674.472383][ T5843] usb 11-1: config 0 has no interfaces?
[  674.480626][ T5843] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  674.486720][ T5843] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.492687][ T5843] usb 11-1: Product: syz
[  674.494560][ T5843] usb 11-1: Manufacturer: syz
[  674.499943][ T5843] usb 11-1: SerialNumber: syz
[  674.509815][ T5843] usb 11-1: config 0 descriptor??
[  674.550005][ T5892] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0
[  674.554425][ T5892] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input21
[  674.563680][ T5892] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:3> initialized
[  674.729341][ T5746] Bluetooth: hci5: unexpected event for opcode 0x0c03
[  674.740377][ T5892] usb 11-1: USB disconnect, device number 3
[  675.422862][T16867] fuse: Unknown parameter 'group_id00000000000000000000'
[  675.799052][T16874] netlink: 'syz.4.3100': attribute type 1 has an invalid length.
[  676.645982][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3110'.
[  676.651756][T16884] bridge_slave_1: left allmulticast mode
[  676.654119][T16884] bridge_slave_1: left promiscuous mode
[  676.656799][T16884] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.664910][T16884] bridge_slave_0: left allmulticast mode
[  676.667474][T16884] bridge_slave_0: left promiscuous mode
[  676.670023][T16884] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.689017][ T5851] usb 9-1: USB disconnect, device number 3
[  677.407687][T16902] fuse: Unknown parameter 'group_id00000000000000000000'
[  677.567177][T16908] syzkaller0: entered promiscuous mode
[  677.570146][T16908] syzkaller0: entered allmulticast mode
[  678.139129][ T5843] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  678.174729][T16919] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  678.229281][   T42] audit: type=1326 audit(1785754774.440:10246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.241897][   T42] audit: type=1326 audit(1785754774.440:10247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.277500][   T42] audit: type=1326 audit(1785754774.450:10248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.288704][   T42] audit: type=1326 audit(1785754774.450:10249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.305334][ T5843] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  678.305405][   T42] audit: type=1326 audit(1785754774.450:10250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.318968][ T5843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.324790][   T42] audit: type=1326 audit(1785754774.450:10251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.332164][ T5843] usb 10-1: Product: syz
[  678.333633][ T5843] usb 10-1: Manufacturer: syz
[  678.335724][ T5843] usb 10-1: SerialNumber: syz
[  678.338991][   T42] audit: type=1326 audit(1785754774.450:10252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.349074][   T42] audit: type=1326 audit(1785754774.450:10253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.477790][   T42] audit: type=1326 audit(1785754774.680:10254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.489061][   T42] audit: type=1326 audit(1785754774.690:10255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.7.3123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  678.601533][T16912] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3120'.
[  678.613728][T16912] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.669935][ T5843] rtl8150 10-1:1.0: couldn't reset the device
[  678.675123][ T5843] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5
[  678.684544][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3125'.
[  678.698168][ T5843] usb 10-1: USB disconnect, device number 2
[  678.864337][T16932] fuse: Unknown parameter 'group_id00000000000000000000'
[  679.104417][T16936] binder: 16929:16936 ioctl 4018620d 0 returned -22
[  679.584513][T16938] syzkaller0: entered promiscuous mode
[  679.586311][T16938] syzkaller0: entered allmulticast mode
[  679.919599][T16945] syzkaller0: entered promiscuous mode
[  679.922142][T16945] syzkaller0: entered allmulticast mode
[  679.948282][T16945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  679.968424][T16945] tipc: Resetting bearer <eth:syzkaller0>
[  679.989282][T16944] tipc: Resetting bearer <eth:syzkaller0>
[  680.008185][T16944] tipc: Disabling bearer <eth:syzkaller0>
[  680.996781][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'.
[  681.027721][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'.
[  682.297406][T16976] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  682.886921][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3146'.
[  682.894697][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3146'.
[  684.724037][T17028] binder: 17005:17028 ioctl 4018620d 0 returned -22
[  684.798765][T17015] usb 1-1: USB disconnect, device number 2
[  685.122260][T17035] syzkaller0: entered promiscuous mode
[  685.124532][T17035] syzkaller0: entered allmulticast mode
[  685.318318][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  685.397726][T17032] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3155'.
[  685.743864][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3158'.
[  685.976442][T17046] 8021q: adding VLAN 0 to HW filter on device bond1
[  685.988684][T17054] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  686.019117][T17056] bond1: entered promiscuous mode
[  686.023567][T17056] dummy0: entered promiscuous mode
[  686.026094][T17056] bond1: entered allmulticast mode
[  686.028301][T17056] dummy0: entered allmulticast mode
[  686.036986][T17059] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  686.167125][T17062] syzkaller0: entered promiscuous mode
[  686.183292][T17062] syzkaller0: entered allmulticast mode
[  686.223271][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.228439][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.231111][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.233910][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.236591][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.239397][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.242201][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.245021][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.247877][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.250725][T17062] tc action pedit offset must be on 32 bit boundaries
[  686.253495][T17062] 0: reclassify loop, rule prio 0, protocol 800
[  686.484255][T17075] xfrm0: entered allmulticast mode
[  686.636781][T17084] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.861373][T17088] binder: 17073:17088 ioctl 4018620d 0 returned -22
[  686.904004][T17090] syzkaller0: entered promiscuous mode
[  686.914525][T17090] syzkaller0: entered allmulticast mode
[  687.835107][T17098] syz_tun: entered allmulticast mode
[  687.847427][T17105] fuse: Bad value for 'fd'
[  688.000932][T17108] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  689.650107][T17136] Cannot find add_set index 2 as target
[  689.919142][T17138] fuse: Bad value for 'fd'
[  690.110109][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3185'.
[  690.114383][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3185'.
[  691.279529][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  691.739078][   T24] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  691.890171][   T24] usb 11-1: Using ep0 maxpacket: 8
[  691.893695][   T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.902400][   T24] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  691.912718][   T24] usb 11-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  691.922474][   T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.935311][   T24] usb 11-1: config 0 descriptor??
[  692.150964][   T42] audit: type=1800 audit(1785754788.360:10256): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3190" name="bus" dev="ramfs" ino=86093 res=0 errno=0
[  692.231856][T17168] binder: 17166:17168 ioctl 4018620d 0 returned -22
[  692.335854][T17170] fuse: Bad value for 'fd'
[  692.376397][   T24] ryos 0003:1E7D:3138.0009: unknown main item tag 0x2
[  692.380236][   T24] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0
[  692.384168][   T24] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0
[  692.387022][   T24] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0
[  692.395815][   T24] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0
[  692.398654][   T24] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0
[  692.402329][   T24] ryos 0003:1E7D:3138.0009: unexpected long global item
[  692.405954][   T24] ryos 0003:1E7D:3138.0009: parse failed
[  692.408424][   T24] ryos 0003:1E7D:3138.0009: probe with driver ryos failed with error -22
[  692.448378][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3194'.
[  692.452314][T17172] bridge_slave_1: left promiscuous mode
[  692.454866][T17172] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.462443][T17172] bridge_slave_0: left allmulticast mode
[  692.467182][T17172] bridge_slave_0: left promiscuous mode
[  692.473563][T17172] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.583475][T11684] usb 11-1: USB disconnect, device number 4
[  692.862660][T17183] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.3198'.
[  692.886928][T17183] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  692.889080][T17183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  692.893948][T17183] vhci_hcd vhci_hcd.0: Device attached
[  692.903679][T17187] vhci_hcd: connection closed
[  692.908629][ T6022] vhci_hcd vhci_hcd.5: stop threads
[  692.919819][ T6022] vhci_hcd vhci_hcd.5: release socket
[  692.921547][ T6022] vhci_hcd vhci_hcd.5: disconnect device
[  693.210564][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3200'.
[  693.217907][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3200'.
[  693.799833][T17203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  693.922601][T17202] tipc: Disabling bearer <eth:syzkaller0>
[  694.093988][T17206] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  694.920136][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3207'.
[  694.928055][T17225] bridge_slave_1: left allmulticast mode
[  694.930024][T17225] bridge_slave_1: left promiscuous mode
[  694.936013][T17225] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.945495][T17225] bridge_slave_0: left allmulticast mode
[  694.948073][T17225] bridge_slave_0: left promiscuous mode
[  694.953772][T17225] bridge0: port 1(bridge_slave_0) entered disabled state
[  695.468101][T17238] fuse: Invalid rootmode
[  695.593400][T17242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  695.646674][T17241] tipc: Disabling bearer <eth:syzkaller0>
[  695.750099][T17244] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  696.120197][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'.
[  696.142210][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'.
[  696.277650][T17260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  696.323948][T17259] tipc: Disabling bearer <eth:syzkaller0>
[  696.528915][T17267] netlink: zone id is out of range
[  696.530676][T17267] netlink: zone id is out of range
[  696.533662][T17267] netlink: zone id is out of range
[  696.535595][T17267] netlink: zone id is out of range
[  696.552210][T17267] netlink: zone id is out of range
[  696.555773][T17267] netlink: zone id is out of range
[  696.558219][T17267] netlink: zone id is out of range
[  696.564907][T17267] netlink: zone id is out of range
[  696.567828][T17267] netlink: zone id is out of range
[  696.572827][T17267] netlink: zone id is out of range
[  696.719480][T11684] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  696.809875][T17270] fuse: Invalid rootmode
[  696.899637][T11684] usb 10-1: config 0 has an invalid interface number: 69 but max is 0
[  696.904396][T11684] usb 10-1: config 0 has no interface number 0
[  696.917160][T11684] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  696.942990][T11684] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  696.995836][T11684] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  697.012899][T11684] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.030632][T11684] usb 10-1: Product: syz
[  697.041160][T11684] usb 10-1: Manufacturer: syz
[  697.050250][T11684] usb 10-1: SerialNumber: syz
[  697.136412][T11684] usb 10-1: config 0 descriptor??
[  697.162023][T17262] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  697.187608][T11684] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  697.282343][T11684] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  697.504490][    C2] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  697.841395][   T42] audit: type=1326 audit(1785754794.050:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  697.859331][   T42] audit: type=1326 audit(1785754794.050:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  697.880861][   T42] audit: type=1326 audit(1785754794.050:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71473eb code=0x7ffc0000
[  697.892184][   T42] audit: type=1326 audit(1785754794.050:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71473eb code=0x7ffc0000
[  697.902254][   T42] audit: type=1326 audit(1785754794.050:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  697.909053][   T42] audit: type=1326 audit(1785754794.050:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  697.913634][T17281] syzkaller0: entered promiscuous mode
[  697.917167][   T42] audit: type=1326 audit(1785754794.050:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71473eb code=0x7ffc0000
[  697.918177][T17281] syzkaller0: entered allmulticast mode
[  697.925297][   T42] audit: type=1326 audit(1785754794.090:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71473eb code=0x7ffc0000
[  697.933848][   T42] audit: type=1326 audit(1785754794.140:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71473eb code=0x7ffc0000
[  697.940754][   T42] audit: type=1326 audit(1785754794.140:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.4.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71473eb code=0x7ffc0000
[  697.949911][T17283] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  698.531488][T17301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  698.597199][T17300] tipc: Disabling bearer <eth:syzkaller0>
[  699.935745][ T5851] usb 10-1: USB disconnect, device number 3
[  700.044148][ T5851] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  700.061517][ T5851] cyberjack 10-1:0.69: device disconnected
[  700.111508][T17319] fuse: Invalid rootmode
[  700.129173][T17323] Bluetooth: MGMT ver 1.23
[  700.819290][T17338] random: crng reseeded on system resumption
[  702.194790][T15439] Bluetooth: hci2: command 0x0c1a tx timeout
[  702.197281][ T5746] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  702.550378][T17343] syz_tun: entered allmulticast mode
[  704.439945][T17375] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  704.650694][   T42] kauditd_printk_skb: 43 callbacks suppressed
[  704.650710][   T42] audit: type=1800 audit(1785754800.860:10310): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3241" name="bus" dev="ramfs" ino=87116 res=0 errno=0
[  706.571202][T17401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3249'.
[  706.716976][T17407] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3251'.
[  707.010176][ T5823] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  707.105669][T17413] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  707.168904][ T5823] usb 9-1: Using ep0 maxpacket: 8
[  707.172589][ T5823] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.185733][ T5823] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  707.199301][ T5823] usb 9-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  707.206964][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.225746][ T5823] usb 9-1: config 0 descriptor??
[  707.655014][ T5823] ryos 0003:1E7D:3138.000A: unknown main item tag 0x2
[  707.665615][ T5823] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0
[  707.674473][ T5823] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0
[  707.681952][ T5823] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0
[  707.684092][ T5823] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0
[  707.690743][ T5823] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0
[  707.696852][ T5823] ryos 0003:1E7D:3138.000A: unexpected long global item
[  707.703474][ T5823] ryos 0003:1E7D:3138.000A: parse failed
[  707.705412][ T5823] ryos 0003:1E7D:3138.000A: probe with driver ryos failed with error -22
[  707.838956][T17416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  707.855155][ T5823] usb 9-1: USB disconnect, device number 4
[  707.916310][T17415] tipc: Disabling bearer <eth:syzkaller0>
[  708.451985][T17427] fuse: Bad value for 'rootmode'
[  709.816546][   T42] audit: type=1800 audit(1785754806.020:10311): pid=17444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3262" name="scan_secs" dev="configfs" ino=86523 res=0 errno=0
[  711.023385][T17457] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3265'.
[  712.981508][   T42] audit: type=1326 audit(1785754809.160:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.7.3269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  712.998512][   T42] audit: type=1326 audit(1785754809.190:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.7.3269" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71973eb code=0x7ffc0000
[  713.017172][   T42] audit: type=1326 audit(1785754809.200:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.7.3269" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71973eb code=0x7ffc0000
[  713.041986][   T42] audit: type=1326 audit(1785754809.200:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.7.3269" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71973eb code=0x7ffc0000
[  713.071319][   T42] audit: type=1326 audit(1785754809.200:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.7.3269" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71973eb code=0x7ffc0000
[  713.086281][   T42] audit: type=1326 audit(1785754809.220:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.7.3269" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71973eb code=0x7ffc0000
[  713.107670][   T42] audit: type=1326 audit(1785754809.220:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.7.3269" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71973eb code=0x7ffc0000
[  713.139900][   T42] audit: type=1326 audit(1785754809.220:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.7.3269" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71973eb code=0x7ffc0000
[  713.148974][   T42] audit: type=1326 audit(1785754809.220:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.7.3269" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71973eb code=0x7ffc0000
[  714.127535][ T5746] Bluetooth: hci4: unexpected event for opcode 0x2041
[  714.378691][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3278'.
[  714.503088][T17512] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  714.613728][T17508] veth3: entered allmulticast mode
[  714.673300][T17508] bond1: (slave veth3): Enslaving as an active interface with an up link
[  714.775263][T17514] bond1 (unregistering): (slave veth3): Releasing backup interface
[  714.783205][T17514] bond1 (unregistering): Released all slaves
[  715.156882][T17528] random: crng reseeded on system resumption
[  715.992523][T17532] Cannot find add_set index 2 as target
[  716.227063][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3285'.
[  716.231703][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3285'.
[  717.303681][ T5823] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  717.472658][ T5823] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  717.484127][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.596790][T17560] netlink: 'syz.5.3294': attribute type 13 has an invalid length.
[  717.731657][ T5823] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device
[  717.760497][ T5823] wwan wwan0: port wwan0qmi0 attached
[  717.919022][   T34] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  717.924608][T17571] fuse: Bad value for 'fd'
[  718.033755][ T6743] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  718.161019][   T34] usb 12-1: config 0 has no interfaces?
[  718.168021][   T34] usb 12-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  718.190400][   T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.210471][   T34] usb 12-1: config 0 descriptor??
[  718.229153][ T6743] usb 11-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config
[  718.238129][ T5823] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 82:4a:8e:5e:1c:ce
[  718.240964][ T6743] usb 11-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 65, changing to 10
[  718.248228][ T6743] usb 11-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 34773, setting to 1024
[  718.252455][ T6743] usb 11-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  718.258058][ T6743] usb 11-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  718.266973][ T6743] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.271207][ T6743] usb 11-1: Product: syz
[  718.272633][ T6743] usb 11-1: Manufacturer: syz
[  718.274170][ T6743] usb 11-1: SerialNumber: syz
[  718.284583][ T6743] usb-storage 11-1:1.0: USB Mass Storage device detected
[  718.300071][T17574] netlink: 'syz.5.3298': attribute type 21 has an invalid length.
[  718.303355][ T6743] usb-storage 11-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  718.303432][T17574] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3298'.
[  718.307355][ T6743] scsi host6: usb-storage 11-1:1.0
[  718.309281][T17574] netlink: 'syz.5.3298': attribute type 4 has an invalid length.
[  718.313492][T17574] netlink: 'syz.5.3298': attribute type 3 has an invalid length.
[  718.315915][T17574] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3298'.
[  718.463284][ T6743] usb 12-1: USB disconnect, device number 2
[  719.321607][T17583] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  719.350938][T17584] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.486631][T17584] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.599877][T17584] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.687583][T17584] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.869683][ T6029] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  719.874110][ T6029] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  719.877846][ T6029] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  719.883153][ T6029] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  720.026673][ T5851] usb 9-1: USB disconnect, device number 5
[  720.034402][ T5851] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device
[  720.250170][ T5851] wwan wwan0: port wwan0qmi0 disconnected
[  720.723978][ T5892] usb 11-1: USB disconnect, device number 5
[  721.099404][T17607] fuse: Bad value for 'fd'
[  722.116296][T17616] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  722.125994][T17616] VFS: Can't find a romfs filesystem on dev nullb0.
[  722.125994][T17616] 
[  723.073313][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3312'.
[  723.081289][T17621] netlink: 'syz.7.3311': attribute type 13 has an invalid length.
[  723.085112][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3312'.
[  723.511190][T17631] bond1: Removing last arp target with arp_interval on
[  723.675321][T17629] netlink: 'syz.4.3313': attribute type 27 has an invalid length.
[  724.277160][T17629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  724.454821][T17649] netlink: 'syz.6.3317': attribute type 8 has an invalid length.
[  724.458199][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3317'.
[  724.466021][T17629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  724.770238][T17631] can0: slcan on ptm0.
[  724.833418][T17642] 8021q: adding VLAN 0 to HW filter on device bond0
[  724.843945][T17642] 8021q: adding VLAN 0 to HW filter on device team0
[  724.907555][T17642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  724.959534][T17642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  724.967889][T17642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  725.028115][T17642] veth1_vlan: left promiscuous mode
[  725.035578][T17642] veth0_vlan: left promiscuous mode
[  725.050906][T17642] veth0_vlan: entered promiscuous mode
[  725.085110][T17642] veth1_vlan: entered promiscuous mode
[  725.097879][T17642] veth1_macvtap: left promiscuous mode
[  725.105969][T17642] veth0_macvtap: left promiscuous mode
[  725.111840][T17642] veth0_macvtap: entered promiscuous mode
[  725.118378][T17642] veth1_macvtap: entered promiscuous mode
[  725.132343][T17642] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  725.139703][T17642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  725.144829][T17642] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  725.147781][T17642] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  725.169011][T17642] 8021q: adding VLAN 0 to HW filter on device bond1
[  725.457663][T17649] bond0: entered promiscuous mode
[  725.461928][T17649] bond_slave_0: entered promiscuous mode
[  725.469759][T17649] bond_slave_1: entered promiscuous mode
[  725.489510][T17649] gretap0: entered promiscuous mode
[  725.502280][T17649] team0: entered promiscuous mode
[  725.506391][T17649] team_slave_0: entered promiscuous mode
[  725.513916][T17649] team_slave_1: entered promiscuous mode
[  725.543825][T17649] hsr1: entered promiscuous mode
[  725.690635][T17639] can0 (unregistered): slcan off ptm0.
[  726.045683][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'.
[  726.351135][T17660] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  726.719161][ T5892] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  726.890522][ T5892] usb 12-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  726.897084][ T5892] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.147875][ T5892] qmi_wwan 12-1:1.0: cdc-wdm0: USB WDM device
[  727.168424][ T5892] wwan wwan0: port wwan0qmi0 attached
[  727.324540][T17687] kAFS: unable to lookup cell 'ÿ'
[  727.376681][ T5892] qmi_wwan 12-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.7-1, WWAN/QMI device, de:c9:26:7c:55:fb
[  727.531608][T17691] netlink: 'syz.5.3326': attribute type 10 has an invalid length.
[  727.572794][T17691] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  727.596170][T17691] team0: Port device netdevsim1 added
[  727.870281][T17693] MINIX-fs: blocksize too small for device
[  727.961321][T17696] netlink: 'syz.6.3328': attribute type 13 has an invalid length.
[  728.571958][T17709] kAFS: unable to lookup cell 'ÿ'
[  728.753319][T17713] netlink: 'syz.4.3337': attribute type 10 has an invalid length.
[  728.759178][T17713] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  728.761421][T17713] team0: Port device netdevsim1 added
[  728.791114][T17714] 9p: Bad value for 'rfdno'
[  729.512711][   T24] usb 12-1: USB disconnect, device number 3
[  729.521863][   T24] qmi_wwan 12-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.7-1, WWAN/QMI device
[  729.600813][T17721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.607732][T17724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  729.629815][   T24] wwan wwan0: port wwan0qmi0 disconnected
[  729.677869][T17721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.725544][T17723] tipc: Disabling bearer <eth:syzkaller0>
[  729.733065][T11684] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  729.738735][T11684] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  729.836653][T17721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.848946][   T74] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  729.959232][ T6313] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  730.071898][ T6313] wlan1: authentication with 08:02:11:00:00:00 timed out
[  730.103919][T17734] loop7: detected capacity change from 0 to 16384
[  730.221276][   T42] kauditd_printk_skb: 104 callbacks suppressed
[  730.221293][   T42] audit: type=1326 audit(1785754826.430:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  730.262940][   T42] audit: type=1326 audit(1785754826.450:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  730.293737][   T42] audit: type=1326 audit(1785754826.450:10427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  730.304230][   T42] audit: type=1326 audit(1785754826.450:10428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  730.326633][   T42] audit: type=1326 audit(1785754826.450:10429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  730.341930][   T42] audit: type=1326 audit(1785754826.450:10430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  730.353266][   T42] audit: type=1326 audit(1785754826.450:10431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  730.357693][    C3] I/O error, dev loop7, sector 8200 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 2
[  730.364207][    C3] I/O error, dev loop7, sector 8200 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  730.366944][   T42] audit: type=1326 audit(1785754826.450:10432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71973eb code=0x7ffc0000
[  730.367481][    C3] Buffer I/O error on dev loop7, logical block 1025, async page read
[  730.382359][   T42] audit: type=1326 audit(1785754826.450:10433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  730.382590][T17738] loop7: detected capacity change from 16384 to 0
[  730.382635][    C2] I/O error, dev loop7, sector 8200 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  730.382693][    C2] Buffer I/O error on dev loop7, logical block 1025, async page read
[  730.395964][   T42] audit: type=1326 audit(1785754826.450:10434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3339" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f92fec code=0x7ffc0000
[  731.959011][T17778] netlink: 'syz.4.3346': attribute type 2 has an invalid length.
[  732.072987][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3346'.
[  732.143951][T17787] vlan2: entered allmulticast mode
[  732.145705][T17787] bond0: entered allmulticast mode
[  732.154489][T17787] bond_slave_0: entered allmulticast mode
[  732.156360][T17787] bond_slave_1: entered allmulticast mode
[  732.339269][   T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  732.518983][   T24] usb 10-1: Using ep0 maxpacket: 32
[  732.526490][   T24] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[  732.534305][   T24] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  732.539563][   T24] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  732.544635][   T24] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  732.550875][   T24] usb 10-1: config 0 interface 0 has no altsetting 0
[  732.556035][   T24] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  732.560169][   T24] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  732.563780][   T24] usb 10-1: Product: syz
[  732.565538][   T24] usb 10-1: Manufacturer: syz
[  732.567482][   T24] usb 10-1: SerialNumber: syz
[  732.572409][   T24] usb 10-1: config 0 descriptor??
[  732.580597][   T24] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  732.594323][   T24] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  732.786806][T17794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  732.852584][T17794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  732.889912][   T24] usb 10-1: USB disconnect, device number 4
[  732.893308][   T24] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[  732.912232][T17794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  733.317872][T17800] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.531865][T17800] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.122839][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3353'.
[  734.136946][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3353'.
[  734.712007][T17800] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.743246][ T6743] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  734.933993][T17800] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.975256][T17827] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  734.978545][T17827] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  735.048875][   T24] IPVS: starting estimator thread 0...
[  735.054157][T17822] net_ratelimit: 10 callbacks suppressed
[  735.054172][T17822] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  735.062803][T17827] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI
[  735.067003][T17827] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737]
[  735.070287][T17827] CPU: 0 UID: 0 PID: 17827 Comm: syz.4.3359 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  735.073961][T17827] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  735.075893][T17827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  735.079064][T17827] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0
[  735.080990][T17827] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31
[  735.086962][T17827] RSP: 0000:ffffc90003d07818 EFLAGS: 00010202
[  735.088922][T17827] RAX: dffffc0000000000 RBX: ffff888058d7c158 RCX: ffffc90005979000
[  735.091405][T17827] RDX: 00000000000000e6 RSI: ffffffff87e4c166 RDI: ffff888058d7c128
[  735.093898][T17827] RBP: ffff888058d7c150 R08: 0000000000000001 R09: 0000000000000000
[  735.096372][T17827] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020
[  735.098833][T17827] R13: ffff888058d7c128 R14: ffff88802aa98920 R15: ffff888058d7c000
[  735.101328][T17827] FS:  0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f53fdb40
[  735.104122][T17827] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  735.106224][T17827] CR2: 00007f2b61f4f880 CR3: 0000000055831000 CR4: 0000000000352ef0
[  735.108732][T17827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  735.111258][T17827] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  735.113778][T17827] Call Trace:
[  735.114852][T17827]  <TASK>
[  735.115807][T17827]  ? f_midi2_unbind+0x146/0x800
[  735.117370][T17827]  f_midi2_unbind+0x265/0x800
[  735.118875][T17827]  ? __pfx_f_midi2_unbind+0x10/0x10
[  735.120538][T17827]  purge_configs_funcs+0x285/0x510
[  735.122178][T17827]  configfs_composite_bind+0xf2c/0x1960
[  735.123940][T17827]  gadget_bind_driver+0x28c/0xbf0
[  735.125551][T17827]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  735.127352][T17827]  ? __pfx_gadget_bind_driver+0x10/0x10
[  735.129155][T17827]  really_probe+0x241/0xa60
[  735.130665][T17827]  __driver_probe_device+0x20e/0x450
[  735.132492][T17827]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  735.134798][T17827]  driver_probe_device+0x4a/0x140
[  735.136769][T17827]  __driver_attach+0x21f/0x5b0
[  735.138668][T17827]  ? __pfx___driver_attach+0x10/0x10
[  735.140427][T17831] IPVS: using max 36 ests per chain, 86400 per kthread
[  735.140726][T17827]  bus_for_each_dev+0x13e/0x1d0
[  735.145554][T17827]  ? __pfx_bus_for_each_dev+0x10/0x10
[  735.147653][T17827]  ? bus_add_driver+0x2b5/0x5b0
[  735.149436][T17827]  bus_add_driver+0x305/0x5b0
[  735.150955][T17827]  driver_register+0x1e2/0x360
[  735.152469][T17827]  usb_gadget_register_driver_owner+0x132/0x210
[  735.154436][T17827]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  735.156275][T17827]  configfs_write_iter+0x302/0x4e0
[  735.157884][T17827]  vfs_write+0x6ac/0x1050
[  735.159204][T17827]  ? __pfx_configfs_write_iter+0x10/0x10
[  735.160904][T17827]  ? __pfx_vfs_write+0x10/0x10
[  735.162384][T17827]  ? find_held_lock+0x2b/0x80
[  735.163815][T17827]  ksys_write+0x12a/0x250
[  735.165193][T17827]  ? __pfx_ksys_write+0x10/0x10
[  735.166722][T17827]  ? trace_syscall_enter+0xd9/0x110
[  735.168369][T17827]  __do_fast_syscall_32+0xe7/0x970
[  735.170012][T17827]  do_fast_syscall_32+0x32/0x70
[  735.171564][T17827]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  735.173600][T17827] RIP: 0023:0xf700efec
[  735.174898][T17827] Code: Unable to access opcode bytes at 0xf700efc2.
[  735.176964][T17827] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  735.179575][T17827] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000480
[  735.182039][T17827] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000
[  735.184509][T17827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  735.186974][T17827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  735.189377][T17827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  735.191849][T17827]  </TASK>
[  735.192854][T17827] Modules linked in:
[  735.194790][T17827] ---[ end trace 0000000000000000 ]---
[  735.212486][T17827] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0
[  735.214533][T17827] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31
[  735.216076][ T6743] usb 12-1: unable to get BOS descriptor or descriptor too short
[  735.221028][T17827] RSP: 0000:ffffc90003d07818 EFLAGS: 00010202
[  735.225225][T17827] RAX: dffffc0000000000 RBX: ffff888058d7c158 RCX: ffffc90005979000
[  735.227812][T17827] RDX: 00000000000000e6 RSI: ffffffff87e4c166 RDI: ffff888058d7c128
[  735.230930][T17827] RBP: ffff888058d7c150 R08: 0000000000000001 R09: 0000000000000000
[  735.233592][T17827] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020
[  735.234238][ T6743] usb 12-1: unable to read config index 0 descriptor/start: -71
[  735.236202][T17827] R13: ffff888058d7c128 R14: ffff88802aa98920 R15: ffff888058d7c000
[  735.241511][T17827] FS:  0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f53fdb40
[  735.244564][T17827] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  735.245057][ T6743] usb 12-1: can't read configurations, error -71
[  735.246792][T17827] CR2: 000000000c432984 CR3: 0000000055831000 CR4: 0000000000352ef0
[  735.251851][T17827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  735.254435][T17827] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  735.257094][T17827] Kernel panic - not syncing: Fatal exception
[  735.259581][T17827] Kernel Offset: disabled
[  735.260952][T17827] Rebooting in 86400 seconds..